mirror of
https://github.com/ivuorinen/base-configs.git
synced 2026-03-04 19:55:08 +00:00
fix(deps): resolve peer dependency warnings and minimatch vulnerability (#480)
* fix(deps): resolve peer dependency warnings and minimatch vulnerability Add packageExtensions to .yarnrc.yml for @commitlint/load and eslint-plugin-n peer dependency warnings. Add resolutions to package.json to force minimatch >=10.2.4, fixing 3 HIGH ReDoS CVEs (CVE-2026-26996, CVE-2026-27903, CVE-2026-27904). * chore(deps): add missing stylelint-config package
This commit is contained in:
@@ -1 +1,10 @@
|
||||
nodeLinker: node-modules
|
||||
|
||||
packageExtensions:
|
||||
"@commitlint/load@*":
|
||||
dependencies:
|
||||
typescript: "*"
|
||||
"@types/node": "*"
|
||||
"eslint-plugin-n@*":
|
||||
dependencies:
|
||||
typescript: "*"
|
||||
|
||||
@@ -48,17 +48,23 @@
|
||||
"prettier:fix": "./node_modules/.bin/prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --write",
|
||||
"prettier:report": "./node_modules/.bin/prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --check"
|
||||
},
|
||||
"devDependencies": {
|
||||
"dependencies": {
|
||||
"@ivuorinen/browserslist-config": "^1.0.1",
|
||||
"@ivuorinen/commitlint-config": "^1.0.0",
|
||||
"@ivuorinen/eslint-config": "^1.0.0",
|
||||
"@ivuorinen/markdownlint-config": "^1.0.1",
|
||||
"@ivuorinen/prettier-config": "^1.0.0",
|
||||
"@ivuorinen/semantic-release-config": "^1.1.1",
|
||||
"@ivuorinen/stylelint-config": "^1.0.6"
|
||||
},
|
||||
"devDependencies": {
|
||||
"@types/node": "*",
|
||||
"npm-run-all2": "^8.0.4",
|
||||
"simple-git-hooks": "^2.13.1",
|
||||
"typescript": ">=4.2.0"
|
||||
},
|
||||
"resolutions": {
|
||||
"minimatch": "^10.2.4"
|
||||
},
|
||||
"packageManager": "yarn@4.12.0"
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user