Skip to content

Commit 5e2e091

Browse files
Bump vulnerable npm dependencies (#171)
## Summary - pin ESLint's transitive `minimatch` resolution to `3.1.3` - bump direct `uuid` dependency to `11.1.1` - refresh the lockfile to capture both patched versions Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent 8eb88a5 commit 5e2e091

2 files changed

Lines changed: 17 additions & 10 deletions

File tree

package-lock.json

Lines changed: 7 additions & 9 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@
7070
"tailwind-merge": "^3.0.2",
7171
"three": "^0.175.0",
7272
"tw-animate-css": "^1.2.4",
73-
"uuid": "^11.1.0",
73+
"uuid": "^11.1.1",
7474
"vaul": "^1.1.2",
7575
"zod": "^3.25.76"
7676
},
@@ -98,6 +98,15 @@
9898
"picomatch": "4.0.4",
9999
"path-to-regexp": "8.4.0",
100100
"lodash": "4.18.0",
101+
"eslint": {
102+
"minimatch": "3.1.3"
103+
},
104+
"@eslint/config-array": {
105+
"minimatch": "3.1.3"
106+
},
107+
"@eslint/eslintrc": {
108+
"minimatch": "3.1.3"
109+
},
101110
"@typescript-eslint/typescript-estree": {
102111
"minimatch": "9.0.7"
103112
}

0 commit comments

Comments
 (0)