fix(security): bump minimatch override to >=10.2.3 (GHSA-7r86, GHSA-23c5)
All checks were successful
ci/woodpecker/push/orchestrator Pipeline was successful
ci/woodpecker/push/web Pipeline was successful
ci/woodpecker/push/api Pipeline was successful

Two high-severity ReDoS vulnerabilities in minimatch >=10.0.0 <10.2.3
via @typescript-eslint transitive dep. Bumps existing pnpm override
from >=10.2.1 to >=10.2.3.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
2026-02-26 19:48:19 -06:00
parent 5ed0a859da
commit 55abe359f3
2 changed files with 19 additions and 30 deletions

View File

@@ -63,7 +63,7 @@
],
"overrides": {
"@isaacs/brace-expansion": ">=5.0.1",
"minimatch": ">=10.2.1",
"minimatch": ">=10.2.3",
"tar": ">=7.5.8",
"form-data": ">=2.5.4",
"lodash": ">=4.17.23",