Skip to content

Commit 1ec1cdb

Browse files
committed
fix(deps): high 취약점 전량 해소 — pnpm overrides + @typescript-eslint 업데이트
tar, axios, svgo, minimatch, rollup, flatted, undici, picomatch, lodash, h3, fast-xml-parser, smol-toml 등 transitive 의존성 패치. high 10+ → 0, 남은 moderate/low는 upstream 패치 대기.
1 parent 23393a1 commit 1ec1cdb

2 files changed

Lines changed: 439 additions & 328 deletions

File tree

package.json

Lines changed: 23 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@
4646
"@tailwindcss/typography": "^0.5.16",
4747
"@types/react": "^19.2.7",
4848
"@types/react-dom": "^19.2.3",
49-
"@typescript-eslint/parser": "^8.36.0",
49+
"@typescript-eslint/parser": "^8.58.0",
5050
"eslint": "^9.30.1",
5151
"eslint-plugin-astro": "^1.3.1",
5252
"globals": "^16.3.0",
@@ -55,6 +55,27 @@
5555
"prettier-plugin-astro": "^0.14.1",
5656
"prettier-plugin-tailwindcss": "^0.6.13",
5757
"typescript": "^5.8.3",
58-
"typescript-eslint": "^8.36.0"
58+
"typescript-eslint": "^8.58.0"
59+
},
60+
"pnpm": {
61+
"overrides": {
62+
"astro>svgo": "4.0.1",
63+
"@iconify/tools>svgo": "3.3.3",
64+
"tar": ">=7.5.8",
65+
"axios": ">=1.13.5",
66+
"minimatch@<3.1.4": "3.1.4",
67+
"rollup": ">=4.59.0",
68+
"flatted": ">=3.4.0",
69+
"undici": ">=6.24.0",
70+
"anymatch>picomatch": "2.3.2",
71+
"micromatch>picomatch": "2.3.2",
72+
"tinyglobby>picomatch": "4.0.4",
73+
"vite>picomatch": "4.0.4",
74+
"astro>picomatch": "4.0.4",
75+
"lodash": ">=4.17.23",
76+
"h3": ">=1.15.9",
77+
"fast-xml-parser": ">=5.5.7",
78+
"smol-toml": ">=1.6.1"
79+
}
5980
}
6081
}

0 commit comments

Comments
 (0)