fix(security): fix qs - CVE-2025-15284 (#113)

* fix(security): fix qs - CVE-2025-15284

* fix
This commit is contained in:
Nicolò Boschi 2026-01-07 15:33:07 +01:00 committed by GitHub
parent 67b273de69
commit b3becb6e9a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 5847 additions and 898 deletions

View file

@ -26,7 +26,7 @@
"directory": "hindsight-clients/typescript"
},
"devDependencies": {
"@hey-api/openapi-ts": "^0.88.0",
"@hey-api/openapi-ts": "0.88.0",
"@types/jest": "^29.0.0",
"@types/node": "^20.0.0",
"jest": "^29.0.0",

6736
package-lock.json generated

File diff suppressed because it is too large Load diff

View file

@ -8,5 +8,8 @@
],
"scripts": {
"prepare": "./scripts/setup-hooks.sh"
},
"overrides": {
"qs": "^6.14.1"
}
}

View file

@ -324,9 +324,11 @@ rm -rf "$TYPESCRIPT_CLIENT_DIR/services"
rm -f "$TYPESCRIPT_CLIENT_DIR/index.ts"
# Generate new client using @hey-api/openapi-ts
# Use npm run generate to use the locally installed version (pinned in package.json)
# instead of npx --yes which would fetch the latest version
echo "Generating from $OPENAPI_SPEC..."
cd "$TYPESCRIPT_CLIENT_DIR"
npx --yes @hey-api/openapi-ts
npm run generate
echo "✓ TypeScript client generated at $TYPESCRIPT_CLIENT_DIR"
echo ""