b6a4f17cbe
- requests: bump minimum to >=2.33.0 (CVE temp file reuse) - streamlit: bump minimum to >=1.54.0 (SSRF/NTLM exposure) - picomatch: add npm override for >=2.3.2/<3 || >=4.0.4 (ReDoS + method injection) - flatted: tighten override to >=3.4.2 (prototype pollution) - yaml: add npm override for >=1.10.3 (stack overflow) - rustls-webpki: cargo update to 0.103.10 (CRL distribution point) - Also fix pre-existing ty lint error in metrics.py (type: ignore for Windows resource import) - Pygments: no patch available (<=2.19.2 vulnerable, no fix released)
34 lines
752 B
JSON
34 lines
752 B
JSON
{
|
|
"name": "hindsight",
|
|
"private": true,
|
|
"workspaces": [
|
|
"hindsight-clients/typescript",
|
|
"hindsight-control-plane",
|
|
"hindsight-docs"
|
|
],
|
|
"scripts": {
|
|
"prepare": "./scripts/setup-hooks.sh"
|
|
},
|
|
"overrides": {
|
|
"qs": "^6.14.2",
|
|
"fast-xml-parser": ">=5.5.6",
|
|
"serialize-javascript": "^7.0.3",
|
|
"minimatch": "^3.1.4",
|
|
"undici": ">=7.24.0",
|
|
"flatted": ">=3.4.2",
|
|
"picomatch": ">=2.3.2 <3.0.0 || >=4.0.4",
|
|
"yaml": ">=1.10.3",
|
|
"svgo": ">=3.3.3",
|
|
"dompurify": ">=3.3.2",
|
|
"@redocly/openapi-core": {
|
|
"minimatch": "^5.1.8"
|
|
},
|
|
"@typescript-eslint/typescript-estree": {
|
|
"minimatch": "^9.0.7"
|
|
},
|
|
"ajv": "^6.14.0",
|
|
"ajv-formats": {
|
|
"ajv": "^8.18.0"
|
|
}
|
|
}
|
|
}
|