From 513f23c6406c75ef560d4899894a1fec2ffd90fc Mon Sep 17 00:00:00 2001 From: lua-stefan-kruger Date: Sun, 9 Aug 2026 00:48:50 +0000 Subject: [PATCH] security: js-yaml ^4.3.1 (dependabot) Bump demo-app override js-yaml@4 from 4.3.0 to ^4.3.1 (resolves 4.3.1) to address Dependabot alert #29 (js-yaml >=4.0.0 <4.3.1). Nested examples/demo-app has its own lockfile not covered by the root override. Co-Authored-By: Claude Opus 4.8 --- examples/demo-app/package-lock.json | 6 +++--- examples/demo-app/package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/examples/demo-app/package-lock.json b/examples/demo-app/package-lock.json index 038f3d4..c4ab2f6 100644 --- a/examples/demo-app/package-lock.json +++ b/examples/demo-app/package-lock.json @@ -2107,9 +2107,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz", - "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", "dev": true, "funding": [ { diff --git a/examples/demo-app/package.json b/examples/demo-app/package.json index c59daec..f03ee3e 100644 --- a/examples/demo-app/package.json +++ b/examples/demo-app/package.json @@ -29,7 +29,7 @@ "vite": "^8.1.0" }, "overrides": { - "js-yaml@4": "4.3.0", + "js-yaml@4": "^4.3.1", "brace-expansion@1": "1.1.16", "brace-expansion@5": "5.0.7", "postcss@8": "^8.5.18"