Skip to content

chore: fix high dependabot alerts for node-forge and picomatch #545

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ignaciosantise merged 3 commits into from
Mar 30, 2026
Merged

chore: fix high dependabot alerts for node-forge and picomatch #545

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
7dc0a60
chore: fix high dependabot alerts for node-forge and picomatch
ignaciosantise Mar 30, 2026
817e09e
chore: add picomatch override to expo-multichain example
ignaciosantise Mar 30, 2026
ef1f084
fix: scope picomatch overrides in expo-multichain to avoid v3 downgrade
ignaciosantise Mar 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 12 additions & 8 deletions examples/expo-multichain/package-lock.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

6 changes: 4 additions & 2 deletions examples/expo-multichain/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -80,14 +80,16 @@
"hono": "4.11.10",
"h3": "1.15.5",
"tar": "7.5.8",
"node-forge": "1.3.2",
"node-forge": "1.4.0",
"undici": "6.23.0",
"preact": "10.28.2",
"js-yaml": "3.14.2",
"valibot": "1.2.0",
"lodash": "4.17.23",
"bn.js": "5.2.3",
"minimatch": "10.2.1"
"minimatch": "10.2.1",
"picomatch@^2": "2.3.2",
"picomatch@^4": "4.0.4"
},
"private": true
}
4 changes: 3 additions & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -98,7 +98,9 @@
"tmp": "0.2.4",
"h3": "1.15.5",
"tar": "7.5.8",
"node-forge": "1.3.2",
"node-forge": "1.4.0",
"picomatch@^2": "2.3.2",
"picomatch@^4": "4.0.4",
"qs": "6.14.2",
"undici": "6.23.0",
"preact": "10.28.2",
Expand Down
26 changes: 13 additions & 13 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14693,10 +14693,10 @@ __metadata:
languageName: node
linkType: hard

"node-forge@npm:1.3.2":
version: 1.3.2
resolution: "node-forge@npm:1.3.2"
checksum: b6f905b0fcc39a2d59598e12ca2c071bfd760e56a9163aab8da7f8d6622547f8db60cfb2aefc39277d5a13af32e58573674b38107a2d4df7c243e12794839546
"node-forge@npm:1.4.0":
version: 1.4.0
resolution: "node-forge@npm:1.4.0"
checksum: c97c634d4d483aae815677db5b1bd14bfea4d873ab48817e020610a2b4d8bc6b3e77994860189b44151ff8e0842c0c4ba6faa80b9a6e6fbd6989865e8eb80b96
languageName: node
linkType: hard

Expand Down Expand Up @@ -15425,23 +15425,23 @@ __metadata:
linkType: hard

"picomatch@npm:^2.0.4, picomatch@npm:^2.2.1, picomatch@npm:^2.2.3, picomatch@npm:^2.3.1":
version: 2.3.1
resolution: "picomatch@npm:2.3.1"
checksum: 050c865ce81119c4822c45d3c84f1ced46f93a0126febae20737bd05ca20589c564d6e9226977df859ed5e03dc73f02584a2b0faad36e896936238238b0446cf
version: 2.3.2
resolution: "picomatch@npm:2.3.2"
checksum: 0a3f5b9ff28faf022e1429b66e47c122e19e7b31cbd098095d29e949684e7ff1d9b83a2133d931326a53ec6ec11c7c59b1850c27fde2f26ca1d5f35861e9701a
languageName: node
linkType: hard

"picomatch@npm:^3.0.1":
version: 3.0.1
resolution: "picomatch@npm:3.0.1"
checksum: b7fe18174bcc05bbf0ea09cc85623ae395676b3e6bc25636d4c20db79a948586237e429905453bf1ba385bc7a7aa5b56f1b351680e650d2b5c305ceb98dfc914
version: 3.0.2
resolution: "picomatch@npm:3.0.2"
checksum: 6804ba293d0158709880ff3ffbf4504d8768cac4a2dfb070bbc81f9cfa4a866acc9eada8cb4e219d0121f45c3af6f9543c6f0fa770e8fc9523cea87f14b3d741
languageName: node
linkType: hard

"picomatch@npm:^4.0.2":
version: 4.0.3
resolution: "picomatch@npm:4.0.3"
checksum: 6817fb74eb745a71445debe1029768de55fd59a42b75606f478ee1d0dc1aa6e78b711d041a7c9d5550e042642029b7f373dc1a43b224c4b7f12d23436735dba0
version: 4.0.4
resolution: "picomatch@npm:4.0.4"
checksum: 76b387b5157951422fa6049a96bdd1695e39dd126cd99df34d343638dc5cdb8bcdc83fff288c23eddcf7c26657c35e3173d4d5f488c4f28b889b314472e0a662
languageName: node
linkType: hard

Expand Down
Loading