fix(deps): resolve peer dependency warnings and minimatch vulnerability (#480)

* fix(deps): resolve peer dependency warnings and minimatch vulnerability

Add packageExtensions to .yarnrc.yml for @commitlint/load and
eslint-plugin-n peer dependency warnings. Add resolutions to
package.json to force minimatch >=10.2.4, fixing 3 HIGH ReDoS
CVEs (CVE-2026-26996, CVE-2026-27903, CVE-2026-27904).

* chore(deps): add missing stylelint-config package
This commit is contained in:
2026-03-04 13:53:03 +02:00
committed by GitHub
parent 94e8eba521
commit 81812c163a
3 changed files with 715 additions and 55 deletions

View File

@@ -1 +1,10 @@
nodeLinker: node-modules
packageExtensions:
"@commitlint/load@*":
dependencies:
typescript: "*"
"@types/node": "*"
"eslint-plugin-n@*":
dependencies:
typescript: "*"

View File

@@ -48,17 +48,23 @@
"prettier:fix": "./node_modules/.bin/prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --write",
"prettier:report": "./node_modules/.bin/prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --check"
},
"devDependencies": {
"dependencies": {
"@ivuorinen/browserslist-config": "^1.0.1",
"@ivuorinen/commitlint-config": "^1.0.0",
"@ivuorinen/eslint-config": "^1.0.0",
"@ivuorinen/markdownlint-config": "^1.0.1",
"@ivuorinen/prettier-config": "^1.0.0",
"@ivuorinen/semantic-release-config": "^1.1.1",
"@ivuorinen/stylelint-config": "^1.0.6"
},
"devDependencies": {
"@types/node": "*",
"npm-run-all2": "^8.0.4",
"simple-git-hooks": "^2.13.1",
"typescript": ">=4.2.0"
},
"resolutions": {
"minimatch": "^10.2.4"
},
"packageManager": "yarn@4.12.0"
}

753
yarn.lock

File diff suppressed because it is too large Load Diff