Skip to content

Commit d24c5d5

Browse files
Bump dset dependency handling the CVE-2024-21529 (#3620)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
1 parent 45fb1b6 commit d24c5d5

File tree

4 files changed

+18
-6
lines changed

4 files changed

+18
-6
lines changed

.changeset/afraid-olives-attend.md

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
'graphql-yoga': patch
3+
---
4+
5+
Bump dset dependency handling the CVE-2024-21529
6+
7+
https://security.snyk.io/vuln/SNYK-JS-DSET-7116691
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
---
2+
"graphql-yoga": patch
3+
---
4+
dependencies updates:
5+
- Updated dependency [`dset@^3.1.4` ↗︎](https://www.npmjs.com/package/dset/v/3.1.4) (from `^3.1.1`, in `dependencies`)

packages/graphql-yoga/package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,7 @@
5757
"@graphql-yoga/subscription": "workspace:^",
5858
"@whatwg-node/fetch": "^0.10.1",
5959
"@whatwg-node/server": "^0.9.64",
60-
"dset": "^3.1.1",
60+
"dset": "^3.1.4",
6161
"lru-cache": "^10.0.0",
6262
"tslib": "^2.8.1"
6363
},

pnpm-lock.yaml

+5-5
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)