trails-cool/trails
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix Dependabot alerts: brace-expansion and path-to-regexp

Browse source 
- Override brace-expansion >=4.0.0 <5.0.5 → 5.0.5 (process hang via zero-step sequences)
- Override path-to-regexp <0.1.13 → 0.1.13 (ReDoS via Express transitive dep)
- Dismissed esbuild alert #1 (already on 0.25.12+, alert for <=0.24.2)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Ullrich Schäfer 2026-03-28 07:49:37 +01:00
parent 81d0feffdd
commit 55afc4cbf3
No known key found for this signature in database
GPG key ID: A32FF691A0F752D9
2 changed files with 13 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

4
package.json
View file

@ -24,7 +24,9 @@
},
"pnpm": {
"overrides": {
"picomatch@>=4.0.0 <4.0.4": "4.0.4"
"picomatch@>=4.0.0 <4.0.4": "4.0.4",
"brace-expansion@>=4.0.0 <5.0.5": "5.0.5",
"path-to-regexp@<0.1.13": "0.1.13"
},
"onlyBuiltDependencies": ["@sentry/cli", "esbuild"]
},