vrr/open-code-review
2
0
Fork 0
mirror of https://github.com/alibaba/open-code-review.git synced 2026-07-09 17:28:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

fix(vscode): upgrade minimatch to >=9.0.7 for CVE-2026-27903 (#220)

Browse source 
Add yarn resolution for minimatch and refresh yarn.lock to resolve
Dependabot alert #11 (ReDoS in minimatch <9.0.7).
This commit is contained in:
xyJen 2026-06-25 21:04:48 +08:00 • committed by GitHub
parent 034d512b15
commit 52da795902
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 811 additions and 848 deletions
Download patch file Download diff file Expand all files Collapse all files

1
extensions/vscode/package.json
View file

@ -110,6 +110,7 @@
"undici": ">=7.28.0",
"form-data": ">=4.0.6",
"js-yaml": "^4.2.0",
"minimatch": "^9.0.7",
"@typescript-eslint/typescript-estree/minimatch": "^9.0.7"
},
"dependencies": {

1658
extensions/vscode/yarn.lock
View file

File diff suppressed because it is too large Load diff