Skip to content

Commit a9fdb74

Browse files
authored
fix(build-system-tests): remove undici resolutions, resolve to 6.27.0 (#7048)
Removes the exact-pin undici resolutions from e2e package.json that blocked Dependabot from fixing 3 open alerts (GHSA-p88m-4jfj-68fv, GHSA-g8m3-5g58-fq7m, GHSA-35p6-xmwp-9g52). undici now floats within @actions/http-client's ^6.23.0 range and resolves to 6.27.0, which patches all three advisories.
1 parent e77e064 commit a9fdb74

2 files changed

Lines changed: 4 additions & 6 deletions

File tree

build-system-tests/e2e/package.json

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,8 +28,6 @@
2828
"resolutions": {
2929
"esbuild": "^0.25.0",
3030
"qs": "^6.15.2",
31-
"undici": "6.24.0",
32-
"@actions/http-client/undici": "6.24.0",
3331
"diff": "8.0.3",
3432
"serialize-javascript": "^7.0.5",
3533
"**/find-cypress-specs/minimatch": "^10.2.4",

build-system-tests/e2e/yarn.lock

Lines changed: 4 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)