mirror of
https://github.com/lukaszraczylo/gohoarder.git
synced 2026-10-12 00:45:16 +00:00
b172788741
Dependabot security updates report update_not_possible because the vulnerable packages are transitive and their parents pin them. The Dependabot job fails on every run. pnpm overrides raise minimatch to 9.0.9, esbuild to 0.28.2 and postcss-selector-parser to 6.1.4. All three versions are older than the seven day minimum release age. pnpm audit reports no known vulnerabilities. The build and the 47 tests pass. Co-authored-by: copilot-swe-agent[bot] <[email protected]>
9 lines
245 B
YAML
9 lines
245 B
YAML
allowBuilds:
|
|
esbuild: true
|
|
vue-demi: true
|
|
# Patched versions of transitive dependencies that Dependabot cannot raise on its own.
|
|
overrides:
|
|
"minimatch@<9.0.9": ^9.0.9
|
|
"esbuild@<0.28.2": ^0.28.2
|
|
"postcss-selector-parser@<6.1.4": ^6.1.4
|