fix: add pnpm overrides for vulnerable transitive dependencies (#25064)

This commit is contained in:
Jon Ayers
2026-05-07 15:11:32 -05:00
committed by GitHub
parent 9581f76e07
commit 400374992c
8 changed files with 115 additions and 96 deletions
+3 -2
View File
@@ -11,8 +11,9 @@
"@babel/runtime": "7.26.10",
"form-data": "4.0.4",
"yargs-parser": "13.1.2",
"ajv": "6.12.3",
"markdown-it": "12.3.2"
"ajv": "6.14.0",
"markdown-it": "12.3.2",
"yaml": "1.10.3"
}
}
}
+24 -23
View File
@@ -10,8 +10,9 @@ overrides:
'@babel/runtime': 7.26.10
form-data: 4.0.4
yargs-parser: 13.1.2
ajv: 6.12.3
ajv: 6.14.0
markdown-it: 12.3.2
yaml: 1.10.3
importers:
@@ -19,7 +20,7 @@ importers:
dependencies:
widdershins:
specifier: ^4.0.1
version: 4.0.1(ajv@6.12.3)(mkdirp@3.0.1)
version: 4.0.1(ajv@6.14.0)(mkdirp@3.0.1)
packages:
@@ -45,8 +46,8 @@ packages:
'@types/json-schema@7.0.12':
resolution: {integrity: sha512-Hr5Jfhc9eYOQNPYO5WLDq/n4jqijdHNlDXjuAQkkt+mWdQR+XJToOHrsD4cPaMXpn6KO7y2+wM8AZEs8VpBLVA==}
ajv@6.12.3:
resolution: {integrity: sha512-4K0cK3L1hsqk9xIb2z9vs/XU+PGJZ9PNpJRDS9YLzmNdX6jmVPfamLvTJr0aDAusnHyCHO6MjzlkAsgtqp9teA==}
ajv@6.14.0:
resolution: {integrity: sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==}
ansi-regex@2.1.1:
resolution: {integrity: sha512-TIGnTpdo+E3+pCyAluZvtED5p5wCqLdezCyhPZzKPcxvFplEt4i+W7OONCKgeZFT3+y5NZZfOOS/Bdcanm1MYA==}
@@ -81,7 +82,7 @@ packages:
better-ajv-errors@0.6.7:
resolution: {integrity: sha512-PYgt/sCzR4aGpyNy5+ViSQ77ognMnWq7745zM+/flYO4/Yisdtp9wDQW2IKCyVYPUxQt3E/b5GBSwfhd1LPdlg==}
peerDependencies:
ajv: 6.12.3
ajv: 6.14.0
call-bind-apply-helpers@1.0.2:
resolution: {integrity: sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==}
@@ -734,8 +735,8 @@ packages:
yallist@4.0.0:
resolution: {integrity: sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==}
yaml@1.10.2:
resolution: {integrity: sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==}
yaml@1.10.3:
resolution: {integrity: sha512-vIYeF1u3CjlhAFekPPAk2h/Kv4T3mAkMox5OymRiJQB0spDP10LHvt+K7G9Ny6NuuMAb25/6n1qyUjAcGNf/AA==}
engines: {node: '>= 6'}
yargs-parser@13.1.2:
@@ -774,7 +775,7 @@ snapshots:
'@types/json-schema@7.0.12': {}
ajv@6.12.3:
ajv@6.14.0:
dependencies:
fast-deep-equal: 3.1.3
fast-json-stable-stringify: 2.1.0
@@ -801,11 +802,11 @@ snapshots:
asynckit@0.4.0: {}
better-ajv-errors@0.6.7(ajv@6.12.3):
better-ajv-errors@0.6.7(ajv@6.14.0):
dependencies:
'@babel/code-frame': 7.22.5
'@babel/runtime': 7.26.10
ajv: 6.12.3
ajv: 6.14.0
chalk: 2.4.2
core-js: 3.31.0
json-to-ast: 2.1.0
@@ -1030,7 +1031,7 @@ snapshots:
har-validator@5.1.5:
dependencies:
ajv: 6.12.3
ajv: 6.14.0
har-schema: 2.0.0
has-ansi@2.0.0:
@@ -1197,22 +1198,22 @@ snapshots:
dependencies:
'@exodus/schemasafe': 1.0.1
should: 13.2.3
yaml: 1.10.2
yaml: 1.10.3
oas-resolver@2.5.6:
dependencies:
node-fetch-h2: 2.3.0
oas-kit-common: 1.0.8
reftools: 1.1.9
yaml: 1.10.2
yaml: 1.10.3
yargs: 17.7.2
oas-schema-walker@1.1.5: {}
oas-validator@4.0.8:
dependencies:
ajv: 6.12.3
better-ajv-errors: 0.6.7(ajv@6.12.3)
ajv: 6.14.0
better-ajv-errors: 0.6.7(ajv@6.14.0)
call-me-maybe: 1.0.2
oas-kit-common: 1.0.8
oas-linter: 3.2.2
@@ -1220,7 +1221,7 @@ snapshots:
oas-schema-walker: 1.1.5
reftools: 1.1.9
should: 13.2.3
yaml: 1.10.2
yaml: 1.10.3
once@1.4.0:
dependencies:
@@ -1387,9 +1388,9 @@ snapshots:
dependencies:
has-flag: 3.0.0
swagger2openapi@6.2.3(ajv@6.12.3):
swagger2openapi@6.2.3(ajv@6.14.0):
dependencies:
better-ajv-errors: 0.6.7(ajv@6.12.3)
better-ajv-errors: 0.6.7(ajv@6.14.0)
call-me-maybe: 1.0.2
node-fetch-h2: 2.3.0
node-readfiles: 0.2.0
@@ -1398,7 +1399,7 @@ snapshots:
oas-schema-walker: 1.1.5
oas-validator: 4.0.8
reftools: 1.1.9
yaml: 1.10.2
yaml: 1.10.3
yargs: 15.4.1
transitivePeerDependencies:
- ajv
@@ -1428,7 +1429,7 @@ snapshots:
dependencies:
isexe: 2.0.0
widdershins@4.0.1(ajv@6.12.3)(mkdirp@3.0.1):
widdershins@4.0.1(ajv@6.14.0)(mkdirp@3.0.1):
dependencies:
dot: 1.1.3
fast-safe-stringify: 2.1.1
@@ -1442,9 +1443,9 @@ snapshots:
oas-schema-walker: 1.1.5
openapi-sampler: 1.3.1
reftools: 1.1.9
swagger2openapi: 6.2.3(ajv@6.12.3)
swagger2openapi: 6.2.3(ajv@6.14.0)
urijs: 1.19.11
yaml: 1.10.2
yaml: 1.10.3
yargs: 12.0.5
transitivePeerDependencies:
- ajv
@@ -1477,7 +1478,7 @@ snapshots:
yallist@4.0.0: {}
yaml@1.10.2: {}
yaml@1.10.3: {}
yargs-parser@13.1.2:
dependencies: