Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cross-spawn vulnerability fix #512

Merged
merged 1 commit into from
Nov 25, 2024
Merged

Conversation

rBangay
Copy link
Contributor

@rBangay rBangay commented Nov 25, 2024

What does this change?

Update peer dependency changesets and use the package.json resolutions to force a patched version of cross-spawn

Should fix vulnerability reported by dependabot and snyk:

https://github.com/guardian/braze-components/security/dependabot/129
https://app.snyk.io/org/guardian-value/project/6b66bea2-df18-4202-b559-ec65eecba4ad?fromGitHubAuth=true

…ts and use the package.json resolutions to force a patched version of cross-spawn
Copy link

changeset-bot bot commented Nov 25, 2024

⚠️ No Changeset found

Latest commit: 9fa6a18

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@rBangay rBangay requested a review from a team November 25, 2024 14:50
@rBangay rBangay merged commit 972684b into main Nov 25, 2024
9 checks passed
@rBangay rBangay deleted the cross-spawn-dep--vuln-mitigation branch November 25, 2024 15:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants