Compare commits

..

2 Commits

Author SHA1 Message Date
semantic-release-bot
69e646c10d chore(release): 1.0.7 [skip ci]
## [1.0.7](https://github.com/ivuorinen/base-configs/compare/v1.0.6...v1.0.7) (2026-03-04)

### Bug Fixes

* **deps:** resolve peer dependency warnings and minimatch vulnerability ([#480](https://github.com/ivuorinen/base-configs/issues/480)) ([81812c1](81812c163a))
2026-03-04 11:57:02 +00:00
81812c163a fix(deps): resolve peer dependency warnings and minimatch vulnerability (#480)
* fix(deps): resolve peer dependency warnings and minimatch vulnerability

Add packageExtensions to .yarnrc.yml for @commitlint/load and
eslint-plugin-n peer dependency warnings. Add resolutions to
package.json to force minimatch >=10.2.4, fixing 3 HIGH ReDoS
CVEs (CVE-2026-26996, CVE-2026-27903, CVE-2026-27904).

* chore(deps): add missing stylelint-config package
2026-03-04 13:53:03 +02:00
4 changed files with 723 additions and 56 deletions

View File

@@ -1 +1,10 @@
nodeLinker: node-modules
packageExtensions:
"@commitlint/load@*":
dependencies:
typescript: "*"
"@types/node": "*"
"eslint-plugin-n@*":
dependencies:
typescript: "*"

View File

@@ -3,6 +3,13 @@
All notable changes to this project will be documented in this file. See
[Conventional Commits](https://conventionalcommits.org) for commit guidelines.
## [1.0.7](https://github.com/ivuorinen/base-configs/compare/v1.0.6...v1.0.7) (2026-03-04)
### Bug Fixes
* **deps:** resolve peer dependency warnings and minimatch vulnerability ([#480](https://github.com/ivuorinen/base-configs/issues/480)) ([81812c1](https://github.com/ivuorinen/base-configs/commit/81812c163a6cbfbfdafa3b8adad939b1488b47a9))
## [1.0.6](https://github.com/ivuorinen/base-configs/compare/v1.0.5...v1.0.6) (2026-03-04)
## [1.0.5](https://github.com/ivuorinen/base-configs/compare/v1.0.4...v1.0.5) (2026-03-03)

View File

@@ -1,6 +1,6 @@
{
"name": "@ivuorinen/base-configs",
"version": "1.0.6",
"version": "1.0.7",
"type": "module",
"description": "ivuorinen's shareable configurations meta package",
"author": {
@@ -48,17 +48,23 @@
"prettier:fix": "./node_modules/.bin/prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --write",
"prettier:report": "./node_modules/.bin/prettier '**/*.{js,tsx,ts,json,mjs,cjs}' '.*.{js,mjs,cjs,json}' --check"
},
"devDependencies": {
"dependencies": {
"@ivuorinen/browserslist-config": "^1.0.1",
"@ivuorinen/commitlint-config": "^1.0.0",
"@ivuorinen/eslint-config": "^1.0.0",
"@ivuorinen/markdownlint-config": "^1.0.1",
"@ivuorinen/prettier-config": "^1.0.0",
"@ivuorinen/semantic-release-config": "^1.1.1",
"@ivuorinen/stylelint-config": "^1.0.6"
},
"devDependencies": {
"@types/node": "*",
"npm-run-all2": "^8.0.4",
"simple-git-hooks": "^2.13.1",
"typescript": ">=4.2.0"
},
"resolutions": {
"minimatch": "^10.2.4"
},
"packageManager": "yarn@4.12.0"
}

753
yarn.lock

File diff suppressed because it is too large Load Diff