Skip to content

fix: resolve all 10 Dependabot security vulnerabilities#64

Merged
amina-deriv merged 1 commit intoderiv-com:masterfrom
shayan-deriv:shayan/fix-dependabot-alerts
Mar 26, 2026
Merged

fix: resolve all 10 Dependabot security vulnerabilities#64
amina-deriv merged 1 commit intoderiv-com:masterfrom
shayan-deriv:shayan/fix-dependabot-alerts

Conversation

@shayan-deriv
Copy link
Copy Markdown
Contributor

  • Upgrade lint-staged from ^4 to ^16.4.0 (fixes cross-spawn ReDoS)
  • Upgrade prettier-eslint-cli from ^5 to ^8.0.1 (fixes semver ReDoS)
  • Add overrides for flatted, tmp, semver, cross-spawn, minimatch to patch remaining transitive vulnerable versions

- Upgrade lint-staged from ^4 to ^16.4.0 (fixes cross-spawn ReDoS)
- Upgrade prettier-eslint-cli from ^5 to ^8.0.1 (fixes semver ReDoS)
- Add overrides for flatted, tmp, semver, cross-spawn, minimatch
  to patch remaining transitive vulnerable versions

Made-with: Cursor
@amina-deriv amina-deriv merged commit bb1960a into deriv-com:master Mar 26, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants