lukaszraczylo/gohoarder
1
0
Fork 0
mirror of https://github.com/lukaszraczylo/gohoarder.git synced 2026-10-12 00:45:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(deps): override vulnerable frontend packages

Browse Source 
Dependabot could not raise esbuild, minimatch and postcss-selector-parser, because their parents pin older ranges. The workspace now overrides them to the patched versions. The frontend builds and its tests pass.
This commit is contained in:
lukaszraczylo
2026-10-03 00:30:11 +01:00
parent 8396284de3
commit 48c12a4869
2 changed files with 123 additions and 131 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/pnpm-workspace.yaml
+4
View File
@@ -1,3 +1,7 @@
allowBuilds:
esbuild: true
vue-demi: true
overrides:
"esbuild@<0.28.1": "^0.28.1"
"minimatch@<9.0.7": "^9.0.7"
"postcss-selector-parser@<6.0.11": "^6.0.11"