Skip to content

Commit 6c3a747

Browse files
ebmifaclaude
andauthored
[cherry-pick][v1.69.0] Fix pnpm audit high-severity vulnerabilities (#26053) (#26055)
## Summary Cherry-pick of #26053 onto `releases/sui-v1.69.0-release`. - Add pnpm overrides to resolve high-severity dependency vulnerabilities failing the `pnpm audit` CI check - `path-to-regexp@<0.1.13` → ReDoS via multiple route parameters - `picomatch@<2.3.2` and `picomatch@>=4.0.0 <4.0.4` → ReDoS via extglob quantifiers ## Test plan - [x] Clean cherry-pick, no conflicts - [ ] CI passes on release branch 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent b85ea33 commit 6c3a747

2 files changed

Lines changed: 23 additions & 25 deletions

File tree

package.json

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,10 @@
2626
"cross-spawn@5.1.0": "7.0.5",
2727
"base-x@=5.0.0": ">=5.0.1",
2828
"valibot@<1.2.0": ">=1.2.0",
29-
"@remix-run/router@<=1.23.1": ">=1.23.2"
29+
"@remix-run/router@<=1.23.1": ">=1.23.2",
30+
"path-to-regexp@<0.1.13": ">=0.1.13",
31+
"picomatch@<2.3.2": ">=2.3.2",
32+
"picomatch@>=4.0.0 <4.0.4": ">=4.0.4"
3033
}
3134
},
3235
"engines": {

pnpm-lock.yaml

Lines changed: 19 additions & 24 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)