chore: update js-yaml (#11300)

mirror of https://github.com/andwati/zitadel.git synced 2026-10-18 05:52:51 +00:00

# Which Problems Are Solved
Fixes [Dependency Security
Alert](https://github.com/zitadel/zitadel/security/dependabot/379)

# How the Problems Are Solved
This PR adds a pnpm override to force `js-yaml@^4` to resolve to
`>=4.1.1`, which contains the fix for the prototype pollution
vulnerability. The override only affects the 4.x line, leaving 3.x
versions unchanged.

# Additional Context
- Closes https://github.com/zitadel/zitadel/security/dependabot/379

This commit is contained in:

Ramon

2026-01-07 10:20:01 +00:00

committed by

GitHub

parent 20b6c9869a

commit 4b5d6e39e1

2 changed files with 6 additions and 9 deletions

									
										pnpm-workspace.yaml
									
		+2
		
												View File
												
				@@ -8,3 +8,5 @@ packages:

				exclude:

				  - benchmark # because of the node 18 or 20 dependency

				overrides:

				  "js-yaml@^4": ">=4.1.1"