Skip to content

Commit 397f97c

Browse files
alanzfacebook-github-bot
authored andcommitted
Add resolution for outdated path-to-regexp package
Summary: This is to address the [dependabot alert](https://github.com/WhatsApp/erlang-language-platform/security/dependabot/32) Note: I tried increasing beyond 0.8.00 as per the vulnerabilitiy report (>= 0.2.0, < 8.0.0), but compilation failed, so went below the lower bound instead. It should probably be raised in furture. allow-large-files for the stored path-to-regexp dependency Reviewed By: michalmuskala Differential Revision: D62433876 fbshipit-source-id: ff486a244c21015b0a17bd665ff0b2bec1a547d5
1 parent d14edcd commit 397f97c

File tree

2 files changed

+6
-22
lines changed

2 files changed

+6
-22
lines changed

website/package.json

+2-1
Original file line numberDiff line numberDiff line change
@@ -58,6 +58,7 @@
5858
"ws": ">=8.17.1",
5959
"axios": ">=1.7.4",
6060
"micromatch": ">=4.0.8",
61-
"webpack": "5.94.0"
61+
"webpack": "5.94.0",
62+
"path-to-regexp": "<0.2.0"
6263
}
6364
}

website/yarn.lock

+4-21
Original file line numberDiff line numberDiff line change
@@ -5839,11 +5839,6 @@ is-yarn-global@^0.3.0:
58395839
resolved "https://registry.yarnpkg.com/is-yarn-global/-/is-yarn-global-0.3.0.tgz#d502d3382590ea3004893746754c89139973e232"
58405840
integrity sha512-VjSeb/lHmkoyd8ryPVIKvOCn4D1koMqY+vqyjjUfc3xyKtP4dYOxM44sZrnqQSzSds3xyOrUTLTC9LVCVgLngw==
58415841

5842-
5843-
version "0.0.1"
5844-
resolved "https://registry.yarnpkg.com/isarray/-/isarray-0.0.1.tgz#8a18acfca9a8f4177e09abfc6038939b05d1eedf"
5845-
integrity sha512-D2S+3GLxWH+uhrNEcoh/fnmYeP8E8/zHl644d/jdA0g2uyXvy3sb0qxotE+ne0LtccHknQzWwZEzhak7oJ0COQ==
5846-
58475842
isarray@~1.0.0:
58485843
version "1.0.0"
58495844
resolved "https://registry.yarnpkg.com/isarray/-/isarray-1.0.0.tgz#bb935d48582cba168c06834957a54a3e07124f11"
@@ -7398,22 +7393,10 @@ path-root@^0.1.1:
73987393
dependencies:
73997394
path-root-regex "^0.1.0"
74007395

7401-
7402-
version "0.1.7"
7403-
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-0.1.7.tgz#df604178005f522f15eb4490e7247a1bfaa67f8c"
7404-
integrity sha512-5DFkuoqlv1uYQKxy8omFBeJPQcdoE07Kv2sferDCrAq1ohOU+MSDswDIbnx3YAM60qIOnYa53wBhXW0EbMonrQ==
7405-
7406-
7407-
version "2.2.1"
7408-
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-2.2.1.tgz#90b617025a16381a879bc82a38d4e8bdeb2bcf45"
7409-
integrity sha512-gu9bD6Ta5bwGrrU8muHzVOBFFREpp2iRkVfhBJahwJ6p6Xw20SjT0MxLnwkjOibQmGSYhiUnf2FLe7k+jcFmGQ==
7410-
7411-
path-to-regexp@^1.7.0:
7412-
version "1.8.0"
7413-
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-1.8.0.tgz#887b3ba9d84393e87a0a0b9f4cb756198b53548a"
7414-
integrity sha512-n43JRhlUKUAlibEJhPeir1ncUID16QnEjNpwzNdO3Lm4ywrBpBZ5oLD0I6br9evr1Y9JTqwRtAh7JLoOzAQdVA==
7415-
dependencies:
7416-
isarray "0.0.1"
7396+
[email protected], [email protected], path-to-regexp@<0.2.0, path-to-regexp@^1.7.0:
7397+
version "0.1.10"
7398+
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-0.1.10.tgz#67e9108c5c0551b9e5326064387de4763c4d5f8b"
7399+
integrity sha512-7lf7qcQidTku0Gu3YDPc8DJ1q7OOucfa/BSsIwjuh56VU7katFvuM8hULfkwB3Fns/rsVF7PwPKVw1sl5KQS9w==
74177400

74187401
path-type@^4.0.0:
74197402
version "4.0.0"

0 commit comments

Comments
 (0)