chore(security): override js-yaml to >=4.3.1 <5 to fix GHSA-5p4m-2wfm-xmqj (orval audit)

2026-08-06 23:09:44 +02:00
parent 7018e2eda5
commit 3fc68adcd2
2 changed files with 8 additions and 4 deletions
@@ -180,3 +180,6 @@ overrides:
  linkify-it: ">=5.0.2"
  brace-expansion: ">=5.0.8"
  fast-uri: ">=3.1.4"
+  # Fix GHSA-5p4m-2wfm-xmqj: js-yaml (4.x) quadratic CPU in !!omap (via orval)
+  # Keep below 5.x since orval depends on the 4.x API.
+  js-yaml: ">=4.3.1 <5"