Read-only mirror — the public repositories of the Forgejo instance, refreshed every 10 minutes. The live instance (fg.dieschoenewolke.de) is reachable only over the VPN; clone here with https://git.dieschoenewolke.de/git/<owner>/<repo>.git.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>2026-06-16 16:23:29 +0000
committerGitHub <noreply@github.com>2026-06-16 16:23:29 +0000
commite1a21d3f414abb3935947518456d2b8686f7154b (patch)
tree235fbe1ea12a5489393533434a2416b99bebefc4
parentcbbc8e14e44b23c14b136efbeb7b982f1b25b65d (diff)
fix: update flatted to 3.4.2 to fix prototype pollution (GHSA-rf6f-7fwh-wjgh)copilot/fix-prototype-pollution-vulnerability
-rw-r--r--package-lock.json9
-rw-r--r--package.json1
2 files changed, 6 insertions, 4 deletions
diff --git a/package-lock.json b/package-lock.json
index 98eb420..083425e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,6 +14,7 @@
"@actions/github": "^6.0.0",
"@actions/io": "^1.1.3",
"@actions/tool-cache": "^2.0.1",
+ "flatted": "^3.4.2",
"uuid": "^9.0.1"
},
"devDependencies": {
@@ -3590,10 +3591,10 @@
}
},
"node_modules/flatted": {
- "version": "3.3.1",
- "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.3.1.tgz",
- "integrity": "sha512-X8cqMLLie7KsNUDSdzeN8FYK9rEt4Dt67OsG/DNGnYTSDBG4uFAJFBnUeiV+zCVAvwFy56IjM9sH51jVaEhNxw==",
- "dev": true
+ "version": "3.4.2",
+ "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.4.2.tgz",
+ "integrity": "sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==",
+ "license": "ISC"
},
"node_modules/for-each": {
"version": "0.3.3",
diff --git a/package.json b/package.json
index 4b2b58a..2586d89 100644
--- a/package.json
+++ b/package.json
@@ -33,6 +33,7 @@
"@actions/github": "^6.0.0",
"@actions/io": "^1.1.3",
"@actions/tool-cache": "^2.0.1",
+ "flatted": "^3.4.2",
"uuid": "^9.0.1"
},
"devDependencies": {