Skip to content

Commit de0bd55

Browse files
chore: upgrade picomatch to ^4.0.4 to address CVE-2026-33671, CVE-2026-33672
Refreshed the yarn.lock so all picomatch instances resolve to patched versions: 4.x at 4.0.4 and 2.x at 2.3.2. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
1 parent 4c9dfe0 commit de0bd55

2 files changed

Lines changed: 2 additions & 8 deletions

File tree

CHANGELOG.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
99

1010
### Fixed
1111
- Upgraded `protobufjs` to `^7.6.2`. [#1281](https://github.com/sourcebot-dev/sourcebot/pull/1281)
12+
- Upgraded `picomatch` to `^4.0.4`. [#PR](https://github.com/sourcebot-dev/sourcebot/pull/PR)
1213

1314
## [5.0.1] - 2026-06-04
1415

yarn.lock

Lines changed: 1 addition & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -18993,20 +18993,13 @@ __metadata:
1899318993
languageName: node
1899418994
linkType: hard
1899518995

18996-
"picomatch@npm:^4.0.2, picomatch@npm:^4.0.4":
18996+
"picomatch@npm:^4.0.2, picomatch@npm:^4.0.3, picomatch@npm:^4.0.4":
1899718997
version: 4.0.4
1899818998
resolution: "picomatch@npm:4.0.4"
1899918999
checksum: 10c0/e2c6023372cc7b5764719a5ffb9da0f8e781212fa7ca4bd0562db929df8e117460f00dff3cb7509dacfc06b86de924b247f504d0ce1806a37fac4633081466b0
1900019000
languageName: node
1900119001
linkType: hard
1900219002

19003-
"picomatch@npm:^4.0.3":
19004-
version: 4.0.3
19005-
resolution: "picomatch@npm:4.0.3"
19006-
checksum: 10c0/9582c951e95eebee5434f59e426cddd228a7b97a0161a375aed4be244bd3fe8e3a31b846808ea14ef2c8a2527a6eeab7b3946a67d5979e81694654f939473ae2
19007-
languageName: node
19008-
linkType: hard
19009-
1901019003
"picospinner@npm:^3.0.0":
1901119004
version: 3.0.0
1901219005
resolution: "picospinner@npm:3.0.0"

0 commit comments

Comments
 (0)