mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-18 05:52:51 +00:00
RamonandGitHub
4b5d6e39e1
# Which Problems Are Solved Fixes [Dependency Security Alert](https://github.com/zitadel/zitadel/security/dependabot/379) # How the Problems Are Solved This PR adds a pnpm override to force `js-yaml@^4` to resolve to `>=4.1.1`, which contains the fix for the prototype pollution vulnerability. The override only affects the 4.x line, leaving 3.x versions unchanged. # Additional Context - Closes https://github.com/zitadel/zitadel/security/dependabot/379
13 lines
173 B
YAML
13 lines
173 B
YAML
packages:
|
|
- docs
|
|
- console
|
|
- tests/*
|
|
- packages/*
|
|
- apps/*
|
|
|
|
exclude:
|
|
- benchmark # because of the node 18 or 20 dependency
|
|
|
|
overrides:
|
|
"js-yaml@^4": ">=4.1.1"
|