From 56e9ee3b6b0ea60567e9c528c3e0448d4d38e233 Mon Sep 17 00:00:00 2001 From: sec-check Date: Sat, 10 Oct 2026 20:28:43 -0400 Subject: [PATCH] fix(deps): override smol-toml to >=1.9.0 markdownlint-cli2 0.23.3 pins smol-toml exactly at 1.8.0, which is in the range of GHSA-r4xh-jqrq-34v2. Add an overrides entry so the lockfile resolves the patched 1.9.x line. lint:md verified green. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Signed-off-by: sec-check --- package-lock.json | 6 +++--- package.json | 1 + 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 46c5636..015dacf 100644 --- a/package-lock.json +++ b/package-lock.json @@ -14032,9 +14032,9 @@ } }, "node_modules/smol-toml": { - "version": "1.8.0", - "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.8.0.tgz", - "integrity": "sha512-kCZr2V3ch9i00x8zXRhjUNVcjG9ijES5dDudkXvUVCT5QlJNQWElSJdZqyPemffHoLNUYwOcou0Fy+ojN0uHSQ==", + "version": "1.9.1", + "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.9.1.tgz", + "integrity": "sha512-j7WyPdf0CJoutMzMoPLF/bVXHtKZIT9Rb4eGeEbWw8X2t5oirjPgpL+OpaENZrILYaXqYwnVH+qgUwVbl+pUJQ==", "dev": true, "license": "BSD-3-Clause", "engines": { diff --git a/package.json b/package.json index e68b542..3d2d025 100644 --- a/package.json +++ b/package.json @@ -73,6 +73,7 @@ "dompurify": ">=3.4.16", "linkify-it": ">=5.0.2", "lodash-es": ">=4.18.0", + "smol-toml": ">=1.9.0", "follow-redirects": ">=1.16.0", "js-yaml": ">=5.2.2", "markdown-it": ">=14.1.1",