Skip to content

Commit 17bedda

Browse files
authored
Security fixes (#176)
## Change description > override picomatch and bump ts-jest to bump handlebars to 4.7.9 ## Type of change - [ ] Bug fix (fixes an issue) - [ ] New feature (adds functionality) - [X] Security issues ## Related issues - [Vulnerabilities related to picomatch](https://github.com/LaWebcapsule/orbits/security/dependabot?q=is%3Aopen+package%3Apicomatch) - [Vulnerabilities related to handlebars](https://github.com/LaWebcapsule/orbits/security/dependabot?q=is%3Aopen+package%3Ahandlebars) - [Vulnerabilities related to protobufjs](https://github.com/LaWebcapsule/orbits/security/dependabot?q=is%3Aopen+package%3Aprotobufjs) ## Checklists ### Development - [X] Lint rules pass locally - [x] Application changes have been tested thoroughly - [X] Automated tests covering modified code pass ### Security - [x] Security impact of change has been considered - [x] Code follows company security practices and guidelines ### Code review - [X] Pull request has a descriptive title and context useful to a reviewer. Screenshots or screencasts are attached as necessary - [X] reviewers assigned --------- Signed-off-by: Sofia Chakir <sofiachakir@gmail.com>
1 parent 9e12fc7 commit 17bedda

5 files changed

Lines changed: 104 additions & 93 deletions

File tree

.changeset/fruity-llamas-bet.md

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
---
2+
'@orbi-ts/cli': patch
3+
'@orbi-ts/core': patch
4+
'@orbi-ts/fuel': patch
5+
'@orbi-ts/eslint-plugin-orbits': patch
6+
'@orbi-ts/services': patch
7+
---
8+
9+
Update dependencies

package.json

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,10 @@
4343
"fast-xml-parser@>=5.0.0 <5.3.6": ">=5.3.6",
4444
"fast-xml-parser@>=5.0.0 <5.3.8": ">=5.3.8",
4545
"ajv@<6.14.0": ">=6.14.0",
46-
"ajv@>=7.0.0-alpha.0 <8.18.0": ">=8.18.0"
46+
"ajv@>=7.0.0-alpha.0 <8.18.0": ">=8.18.0",
47+
"picomatch@^2": "2.3.2",
48+
"picomatch@^4": "4.0.4",
49+
"protobufjs@<7.5.5": "7.5.5"
4750
}
4851
},
4952
"dependencies": {

0 commit comments

Comments
 (0)