From 73634243ca1e84ba1aff77d3cb3cbd8061de6b76 Mon Sep 17 00:00:00 2001 From: sriram veeraghanta Date: Thu, 16 Jul 2026 02:05:14 +0530 Subject: [PATCH] fix: bump js-yaml to 3.15.0 to resolve DoS advisory (GHSA-h67p-54hq-rp68) --- pnpm-lock.yaml | 9 +++++---- pnpm-workspace.yaml | 1 + 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 87a5b7b..c4ea8ff 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -8,6 +8,7 @@ overrides: esbuild: ^0.25.0 vite: 6.4.3 postcss: ^8.5.10 + js-yaml@<3.15.0: 3.15.0 importers: @@ -1179,8 +1180,8 @@ packages: resolution: {integrity: sha512-ekilCSN1jwRvIbgeg/57YFh8qQDNbwDb9xT/qu2DAHbFFZUicIl4ygVaAvzveMhMVr3LnpSKTNnwt8PoOfmKhQ==} hasBin: true - js-yaml@3.14.2: - resolution: {integrity: sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==} + js-yaml@3.15.0: + resolution: {integrity: sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==} hasBin: true kind-of@6.0.3: @@ -2608,7 +2609,7 @@ snapshots: gray-matter@4.0.3: dependencies: - js-yaml: 3.14.2 + js-yaml: 3.15.0 kind-of: 6.0.3 section-matter: 1.0.0 strip-bom-string: 1.0.0 @@ -2645,7 +2646,7 @@ snapshots: jiti@2.6.1: {} - js-yaml@3.14.2: + js-yaml@3.15.0: dependencies: argparse: 1.0.10 esprima: 4.0.1 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index b35901a..4142cb8 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -7,3 +7,4 @@ overrides: esbuild: ^0.25.0 vite: 6.4.3 postcss: ^8.5.10 + js-yaml@<3.15.0: 3.15.0