Skip to content

Commit 3dc3ce7

Browse files
sunnywuclaude
andcommitted
fix(deps): upgrade @grpc/grpc-js to >=1.13.5 to fix CVE-2026-48068, CVE-2026-48069
Adds override/resolution for @grpc/grpc-js >=1.13.5 (resolves to 1.14.4). Regenerates package-lock.json and yarn.lock. See: UID2-7294 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent 18c1608 commit 3dc3ce7

3 files changed

Lines changed: 186 additions & 177 deletions

File tree

package-lock.json

Lines changed: 21 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,8 @@
8686
"path-to-regexp@0": "0.1.13",
8787
"picomatch": "^2.3.2",
8888
"lodash": ">=4.18.1",
89-
"protobufjs": ">=8.0.2"
89+
"protobufjs": ">=8.0.2",
90+
"@grpc/grpc-js": ">=1.13.5"
9091
},
9192
"resolutions": {
9293
"jws": "4.0.1",
@@ -97,6 +98,7 @@
9798
"picomatch": "^2.3.2",
9899
"path-to-regexp": "0.1.13",
99100
"lodash": ">=4.18.1",
100-
"protobufjs": ">=8.0.2"
101+
"protobufjs": ">=8.0.2",
102+
"@grpc/grpc-js": ">=1.13.5"
101103
}
102104
}

0 commit comments

Comments
 (0)