Commit c117307
committed
fix: add npm override for js-yaml to resolve security vulnerability
- Add js-yaml ^4.1.1 to package.json overrides
- Fixes prototype pollution vulnerability (GHSA-mh29-5h37-fv8m) in js-yaml <4.1.1
- Forces all transitive dependencies to use the patched version
- Resolves conflict between js-yaml 3.x (via @codeceptjs/detox-helper) and 4.x
- All tests passing (unit and runner tests verified)1 parent f217ab8 commit c117307
1 file changed
+2
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
198 | 198 | | |
199 | 199 | | |
200 | 200 | | |
201 | | - | |
| 201 | + | |
| 202 | + | |
202 | 203 | | |
203 | 204 | | |
0 commit comments