admin/tool-evaluator
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(security): override js-yaml to >=4.3.1 <5 to fix GHSA-5p4m-2wfm-xmqj (orval audit)
Build & Push Docker Image / build (push) Successful in 1m46s
Details

Browse Source
This commit is contained in:
opencode
2026-08-06 23:09:44 +02:00
parent 7018e2eda5
commit 3fc68adcd2
2 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pnpm-lock.yaml
Generated
+5 -4
View File
@@ -173,6 +173,7 @@ overrides:
linkify-it: '>=5.0.2' linkify-it: '>=5.0.2'
brace-expansion: '>=5.0.8' brace-expansion: '>=5.0.8'
fast-uri: '>=3.1.4' fast-uri: '>=3.1.4'
js-yaml: '>=4.3.1 <5'
importers: importers:
@@ -2913,8 +2914,8 @@ packages:
js-tokens@4.0.0: js-tokens@4.0.0:
resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==} resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
js-yaml@4.3.0: js-yaml@4.3.1:
resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==} resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==}
hasBin: true hasBin: true
jsesc@3.1.0: jsesc@3.1.0:
@@ -5780,7 +5781,7 @@ snapshots:
js-tokens@4.0.0: {} js-tokens@4.0.0: {}
js-yaml@4.3.0: js-yaml@4.3.1:
dependencies: dependencies:
argparse: 2.0.1 argparse: 2.0.1
@@ -5951,7 +5952,7 @@ snapshots:
fs-extra: 11.3.5 fs-extra: 11.3.5
get-tsconfig: 4.14.0 get-tsconfig: 4.14.0
jiti: 2.7.0 jiti: 2.7.0
js-yaml: 4.3.0 js-yaml: 4.3.1
remeda: 2.34.0 remeda: 2.34.0
string-argv: 0.3.2 string-argv: 0.3.2
typedoc: 0.28.19(typescript@7.0.2) typedoc: 0.28.19(typescript@7.0.2)
pnpm-workspace.yaml
+3
View File
@@ -180,3 +180,6 @@ overrides:
linkify-it: ">=5.0.2" linkify-it: ">=5.0.2"
brace-expansion: ">=5.0.8" brace-expansion: ">=5.0.8"
fast-uri: ">=3.1.4" fast-uri: ">=3.1.4"
# Fix GHSA-5p4m-2wfm-xmqj: js-yaml (4.x) quadratic CPU in !!omap (via orval)
# Keep below 5.x since orval depends on the 4.x API.
js-yaml: ">=4.3.1 <5"