Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit fd8b1c6

Browse files
antfubotantfubot
authored
fix(deps): override shell-quote to ^1.8.4 (GHSA-w7jw-789q-3m8p) (#63)
1 parent 8b74534 commit fd8b1c6

4 files changed

Lines changed: 7 additions & 163 deletions

File tree

‎plans/002-shell-quote-security-override.md‎

Lines changed: 0 additions & 158 deletions
This file was deleted.

‎plans/README.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ changes are allowed as long as they're marked).
1414
| Plan | Title | Cat | Priority | Effort | Depends on | Status |
1515
|------|-------|-----|----------|--------|------------|--------|
1616
| 001 | Add missing `typecheck` scripts (inspect + 5 examples) | dx | P1 | S | — | TODO |
17-
| 002 | Clear the critical `shell-quote` advisory in the bundle | security/deps | P1 | S | — | TODO |
17+
| 002 | Clear the critical `shell-quote` advisory in the bundle | security/deps | P1 | S | — | DONE |
1818
| 003 | Reject cross-origin WebSocket upgrades ⚠️ | security | P1 | S | — | TODO |
1919
| 004 | Stop git argument injection via `ref`/`hash` | security/bug | P1 | S | — | TODO |
2020
| 005 | Don't cache a rejected RPC `setup()` promise | bug | P1 | S | — | TODO |

‎pnpm-lock.yaml‎

Lines changed: 5 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎pnpm-workspace.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,7 @@ overrides:
2929
chokidar: ^5.0.0
3030
crossws: ^0.4.8
3131
semver: ^7.8.1
32+
shell-quote: ^1.8.4
3233
catalogs:
3334
build:
3435
'@antfu/ni': ^30.1.0

0 commit comments

Comments
 (0)