Skip to content

Commit fe20b3a

Browse files
committed
bump js-yaml; address GHSA-5p4m-2wfm-xmqj
1 parent 6fbdf7f commit fe20b3a

4 files changed

Lines changed: 62 additions & 58 deletions

File tree

.changeset/big-moons-vanish.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
---
2+
'hive': patch
3+
---
4+
5+
Address vulnerability [GHSA-5p4m-2wfm-xmqj](https://github.com/advisories/GHSA-5p4m-2wfm-xmqj).

deployment/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@
1717
"@pulumi/pulumi": "3.214.0",
1818
"@pulumi/random": "4.18.2",
1919
"@pulumiverse/grafana": "2.35.0",
20-
"js-yaml": "4.3.0",
20+
"js-yaml": "4.3.1",
2121
"pg-connection-string": "2.9.1",
2222
"prettier": "3.4.2"
2323
},

package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -183,7 +183,8 @@
183183
"@opentelemetry/propagator-jaeger@<2.9.0": "2.9.0",
184184
"sharp@<0.35.0": "0.35.0",
185185
"body-parser@1.x.x": "1.20.6",
186-
"prettier-plugin-sh": "0.19.0"
186+
"prettier-plugin-sh": "0.19.0",
187+
"js-yaml": "3.15.1"
187188
},
188189
"patchedDependencies": {
189190
"mjml-core@4.14.0": "patches/mjml-core@4.14.0.patch",

pnpm-lock.yaml

Lines changed: 54 additions & 56 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)