Skip to content

Commit 5989319

Browse files
committed
chore(deps): resolve all active dependabot node vulnerabilities
- Updated 'undici' and 'tar' implementations across workspace natively via pnpm. - Added explicit strict 'pnpm.overrides' block against '@tootallnate/once' >= 3.0.1 to forcefully resolve a transitive vulnerability inherited from Vercel's deep dependency tree. - 'pnpm audit' now explicitly returns '0 vulnerabilities found'.
1 parent 18cbedd commit 5989319

2 files changed

Lines changed: 78 additions & 38 deletions

File tree

package.json

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,12 +26,13 @@
2626
"lodash": ">=4.17.23",
2727
"qs": "6.14.2",
2828
"minimatch": ">=10.2.3",
29-
"ajv": ">=8.18.0"
29+
"ajv": ">=8.18.0",
30+
"@tootallnate/once": ">=3.0.1"
3031
},
3132
"peerDependencyRules": {
3233
"allowedVersions": {
3334
"tailwindcss": "4"
3435
}
3536
}
3637
}
37-
}
38+
}

pnpm-lock.yaml

Lines changed: 75 additions & 36 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)