Skip to content

Commit 3fd5350

Browse files
committed
🔒 chore(deps): resolve Dependabot alerts via yarn resolutions
Overrides transitive deps to their patched versions: - dompurify >=3.4.0 (was 3.2.4 via mermaid) - lodash / lodash-es >=4.18.0 (prototype pollution + code injection) - brace-expansion >=2.0.3 (ReDoS) All are transitive (via mermaid, html-webpack-plugin, minimatch chains). No direct-dep bumps needed. yarn build clean.
1 parent 735386c commit 3fd5350

2 files changed

Lines changed: 22 additions & 42 deletions

File tree

‎package.json‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -47,6 +47,12 @@
4747
"turbopack-inline-svg-loader": "^1.0.3",
4848
"typescript": "6.0.3"
4949
},
50+
"resolutions": {
51+
"dompurify": "^3.4.0",
52+
"lodash": "^4.18.0",
53+
"lodash-es": "^4.18.0",
54+
"brace-expansion": "^2.0.3"
55+
},
5056
"name": "wpbones-docs",
5157
"packageManager": "yarn@4.14.1",
5258
"private": true,

‎yarn.lock‎

Lines changed: 16 additions & 42 deletions
Original file line numberDiff line numberDiff line change
@@ -6153,31 +6153,12 @@ __metadata:
61536153
languageName: node
61546154
linkType: hard
61556155

6156-
"brace-expansion@npm:^1.1.7":
6157-
version: 1.1.11
6158-
resolution: "brace-expansion@npm:1.1.11"
6159-
dependencies:
6160-
balanced-match: "npm:^1.0.0"
6161-
concat-map: "npm:0.0.1"
6162-
checksum: 10c0/695a56cd058096a7cb71fb09d9d6a7070113c7be516699ed361317aca2ec169f618e28b8af352e02ab4233fb54eb0168460a40dc320bab0034b36ab59aaad668
6163-
languageName: node
6164-
linkType: hard
6165-
6166-
"brace-expansion@npm:^2.0.1":
6167-
version: 2.0.1
6168-
resolution: "brace-expansion@npm:2.0.1"
6169-
dependencies:
6170-
balanced-match: "npm:^1.0.0"
6171-
checksum: 10c0/b358f2fe060e2d7a87aa015979ecea07f3c37d4018f8d6deb5bd4c229ad3a0384fe6029bb76cd8be63c81e516ee52d1a0673edbe2023d53a5191732ae3c3e49f
6172-
languageName: node
6173-
linkType: hard
6174-
6175-
"brace-expansion@npm:^2.0.2":
6176-
version: 2.0.3
6177-
resolution: "brace-expansion@npm:2.0.3"
6156+
"brace-expansion@npm:^2.0.3":
6157+
version: 2.1.0
6158+
resolution: "brace-expansion@npm:2.1.0"
61786159
dependencies:
61796160
balanced-match: "npm:^1.0.0"
6180-
checksum: 10c0/468436c9b2fa6f9e64d0cff8784b21300677571a7196e258593e95e7c3db9973a80fbafdb0f01404d5d298a04dc666eae1fc3c9052e2edbb9f2510541deeddfe
6161+
checksum: 10c0/439cedf3e23d7993b37919f1d6fdc653ec21a42437ec3e7460bea9ca8b17edf7a24a633273c31d61aa4335877cf29a443f1871814131c87997a1e6223e1f1502
61816162
languageName: node
61826163
linkType: hard
61836164

@@ -6868,13 +6849,6 @@ __metadata:
68686849
languageName: node
68696850
linkType: hard
68706851

6871-
"concat-map@npm:0.0.1":
6872-
version: 0.0.1
6873-
resolution: "concat-map@npm:0.0.1"
6874-
checksum: 10c0/c996b1cfdf95b6c90fee4dae37e332c8b6eb7d106430c17d538034c0ad9a1630cb194d2ab37293b1bdd4d779494beee7786d586a50bd9376fd6f7bcc2bd4c98f
6875-
languageName: node
6876-
linkType: hard
6877-
68786852
"confbox@npm:^0.1.8":
68796853
version: 0.1.8
68806854
resolution: "confbox@npm:0.1.8"
@@ -7905,15 +7879,15 @@ __metadata:
79057879
languageName: node
79067880
linkType: hard
79077881

7908-
"dompurify@npm:^3.2.1":
7909-
version: 3.2.4
7910-
resolution: "dompurify@npm:3.2.4"
7882+
"dompurify@npm:^3.4.0":
7883+
version: 3.4.0
7884+
resolution: "dompurify@npm:3.4.0"
79117885
dependencies:
79127886
"@types/trusted-types": "npm:^2.0.7"
79137887
dependenciesMeta:
79147888
"@types/trusted-types":
79157889
optional: true
7916-
checksum: 10c0/6be56810fb7ad2776155c8fc2967af5056783c030094362c7d0cf1ad13f2129cf922d8eefab528a34bdebfb98e2f44b306a983ab93aefb9d6f24c18a3d027a05
7890+
checksum: 10c0/5593ac44ee20b9aa521c2120884effc98927fb9128c548183c75e79e0a04357c62ee913a049a267c8f396cb8c9d520ecf72562826c5524c46d4fe03c12063638
79177891
languageName: node
79187892
linkType: hard
79197893

@@ -10898,10 +10872,10 @@ __metadata:
1089810872
languageName: node
1089910873
linkType: hard
1090010874

10901-
"lodash-es@npm:4.17.21, lodash-es@npm:^4.17.21":
10902-
version: 4.17.21
10903-
resolution: "lodash-es@npm:4.17.21"
10904-
checksum: 10c0/fb407355f7e6cd523a9383e76e6b455321f0f153a6c9625e21a8827d10c54c2a2341bd2ae8d034358b60e07325e1330c14c224ff582d04612a46a4f0479ff2f2
10875+
"lodash-es@npm:^4.18.0":
10876+
version: 4.18.1
10877+
resolution: "lodash-es@npm:4.18.1"
10878+
checksum: 10c0/35d4dcf87ef07f8d090f409447575800108057e360b445f590d0d25d09e3d1e33a163d2fc100d4d072b0f901d5e2fc533cd7c4bfd8eeb38a06abec693823c8b8
1090510879
languageName: node
1090610880
linkType: hard
1090710881

@@ -10926,10 +10900,10 @@ __metadata:
1092610900
languageName: node
1092710901
linkType: hard
1092810902

10929-
"lodash@npm:^4.17.20, lodash@npm:^4.17.21":
10930-
version: 4.17.21
10931-
resolution: "lodash@npm:4.17.21"
10932-
checksum: 10c0/d8cbea072bb08655bb4c989da418994b073a608dffa608b09ac04b43a791b12aeae7cd7ad919aa4c925f33b48490b5cfe6c1f71d827956071dae2e7bb3a6b74c
10903+
"lodash@npm:^4.18.0":
10904+
version: 4.18.1
10905+
resolution: "lodash@npm:4.18.1"
10906+
checksum: 10c0/757228fc68805c59789e82185135cf85f05d0b2d3d54631d680ca79ec21944ec8314d4533639a14b8bcfbd97a517e78960933041a5af17ecb693ec6eecb99a27
1093310907
languageName: node
1093410908
linkType: hard
1093510909

0 commit comments

Comments
 (0)