Skip to content

Commit eab2422

Browse files
committed
deps: update tmp to version 0.2.4
Refs KEH-281
1 parent 252d2bc commit eab2422

2 files changed

Lines changed: 12 additions & 12 deletions

File tree

package.json

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -84,6 +84,12 @@
8484
"To force patched underscore for doctoc transitive dependency",
8585
"See https://www.npmjs.com/advisories/1113950",
8686
"NOTE: This can be removed when doctoc no longer resolves underscore <1.13.8"
87+
],
88+
"tmp": [
89+
"tmp allows arbitrary temporary file/directory write via symbolic link in versions <0.2.4",
90+
"Pinning to >=0.2.4 via @graphql-codegen/cli > inquirer > external-editor > tmp",
91+
"See https://www.npmjs.com/advisories/1109537",
92+
"NOTE: This can be removed when @graphql-codegen/cli no longer resolves vulnerable tmp versions"
8793
]
8894
}
8995
},
@@ -103,7 +109,8 @@
103109
"hds-react/cookie": "^0.7.2",
104110
"lodash": "^4.18.1",
105111
"minimatch": ">=9.0.7",
106-
"doctoc/underscore": "^1.13.8"
112+
"doctoc/underscore": "^1.13.8",
113+
"tmp": ">=0.2.4"
107114
},
108115
"dependencies": {
109116
"@apollo/client": "^3.13.8",

yarn.lock

Lines changed: 4 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -7038,11 +7038,6 @@ ora@^5.4.1:
70387038
strip-ansi "^6.0.0"
70397039
wcwidth "^1.0.1"
70407040

7041-
os-tmpdir@~1.0.2:
7042-
version "1.0.2"
7043-
resolved "https://registry.yarnpkg.com/os-tmpdir/-/os-tmpdir-1.0.2.tgz#bbe67406c79aa85c5cfec766fe5734555dfa1274"
7044-
integrity sha512-D2FR03Vir7FIu45XBY20mTb+/ZSWB00sjU9jdQXt83gDrI4Ztz5Fs7/yy74g2N5SVQY4xY1qDr4rNddwYRVX0g==
7045-
70467041
outvariant@^1.4.0, outvariant@^1.4.3:
70477042
version "1.4.3"
70487043
resolved "https://registry.yarnpkg.com/outvariant/-/outvariant-1.4.3.tgz#221c1bfc093e8fec7075497e7799fdbf43d14873"
@@ -8410,12 +8405,10 @@ tldts@^6.1.32:
84108405
dependencies:
84118406
tldts-core "^6.1.86"
84128407

8413-
tmp@^0.0.33:
8414-
version "0.0.33"
8415-
resolved "https://registry.yarnpkg.com/tmp/-/tmp-0.0.33.tgz#6d34335889768d21b2bcda0aa277ced3b1bfadf9"
8416-
integrity sha512-jRCJlojKnZ3addtTOjdIqoRuPEKBvNXcGYqzO6zWZX8KfKEpnGY5jfggJQ3EjKuu8D4bJRr0y+cYJFmYbImXGw==
8417-
dependencies:
8418-
os-tmpdir "~1.0.2"
8408+
tmp@>=0.2.4, tmp@^0.0.33:
8409+
version "0.2.5"
8410+
resolved "https://registry.yarnpkg.com/tmp/-/tmp-0.2.5.tgz#b06bcd23f0f3c8357b426891726d16015abfd8f8"
8411+
integrity sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow==
84198412

84208413
to-regex-range@^5.0.1:
84218414
version "5.0.1"

0 commit comments

Comments
 (0)