Skip to content

Commit d7cbd13

Browse files
quangtran88quangtran88
committed
chore(deps): override protobufjs to 7.5.8 to clear HIGH advisories
The workspace pinned protobufjs@7.5.5 via pnpm-workspace.yaml overrides; that version carries 4 HIGH advisories (GHSA-66ff-xgx4-vchm, -75px-5xx7-5xc7, -jvwf-75h9-cwgg, -685m-2w69-288q). 7.5.8 is the earliest patched release in the 7.x line. CI's security-dependency-audit job exits non-zero when production dependencies carry HIGH or higher advisories, which blocks this PR. Bumping the override clears the audit without changing any application behavior.
1 parent 5bf1312 commit d7cbd13

2 files changed

Lines changed: 12 additions & 12 deletions

File tree

‎pnpm-lock.yaml‎

Lines changed: 11 additions & 11 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎pnpm-workspace.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ overrides:
5959
tar: 7.5.15
6060
tough-cookie: 4.1.3
6161
yauzl: 3.2.1
62-
protobufjs: 7.5.5
62+
protobufjs: 7.5.8
6363
uuid: 14.0.0
6464

6565
allowBuilds:

0 commit comments

Comments
 (0)