Skip to content

override pacote transitive dependency#7264

Merged
janechu merged 2 commits intomainfrom
users/radium-v/override-pacote-dep
Feb 10, 2026
Merged

override pacote transitive dependency#7264
janechu merged 2 commits intomainfrom
users/radium-v/override-pacote-dep

Conversation

@radium-v
Copy link
Collaborator

Pull Request

📖 Description

Adds an npm override for the pacote transitive dependency, pinning it to version 21.3.0. This resolves the outdated transitive version pulled in by other dependencies, ensuring a consistent and up-to-date resolution across the lockfile.

👩‍💻 Reviewer Notes

The only code change is a single line added to the overrides field in the root package.json. The rest of the diff is the lockfile re-resolving pacote and its dependency tree accordingly.

The package rollup-plugin-filesize uses pacote, and its functionality is unaffected by the major version overrides.

📑 Test Plan

No functional changes; existing tests should be unaffected. Verify that npm install completes successfully and that no new audit warnings are introduced.

✅ Checklist

General

  • I have tested my changes.
  • I have read the CONTRIBUTING documentation and followed the standards for this project.

@radium-v radium-v self-assigned this Feb 10, 2026
@janechu janechu merged commit 87ae171 into main Feb 10, 2026
8 checks passed
@janechu janechu deleted the users/radium-v/override-pacote-dep branch February 10, 2026 23:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants