Skip to content

fix(deps): override vulnerable postcss#4196

Open
luresun1988-bot wants to merge 1 commit into
SecureBananaLabs:mainfrom
luresun1988-bot:fix-postcss-audit-override
Open

fix(deps): override vulnerable postcss#4196
luresun1988-bot wants to merge 1 commit into
SecureBananaLabs:mainfrom
luresun1988-bot:fix-postcss-audit-override

Conversation

@luresun1988-bot

Copy link
Copy Markdown

Summary

  • add a root npm override for PostCSS 8.5.10
  • refresh the lockfile so Next resolves the patched PostCSS release
  • preserve the existing Next version while removing the PostCSS audit finding

Tests

  • npm ls postcss --all
  • npm audit --omit=dev --json (PostCSS absent; existing qs advisory remains)
  • npm run build -w apps/web

Fixes #4195

github-actions Bot added a commit that referenced this pull request Jun 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Patch PostCSS audit advisory from Next dependency lockfile (reissue via #743)

1 participant