Commit 81e1ff4
committed
build(deps): bump js-yaml to 4.3.2 in the TypeScript lockfile
js-yaml below 4.3.2 lets an empty merge source bypass the
maxTotalMergeKeys CPU bound (GHSA-2883-xcg3-v3hh). The package is a
transitive development dependency of the TypeScript SDK; only the
lockfile changes.
Signed-off-by: MohammadHaroonAbuomar <40180927+MohammadHaroonAbuomar@users.noreply.github.com>1 parent e511297 commit 81e1ff4
1 file changed
Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments