Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@
"devDependencies": {
"@commitlint/cli": "^19.7.1",
"@commitlint/config-conventional": "^19.7.1",
"@openapitools/openapi-generator-cli": "2.17.0",
"@openapitools/openapi-generator-cli": "2.23.2",
"@release-it/bumper": "^7.0.1",
Comment on lines 23 to 27

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[P1] Update yarn.lock to keep dependency upgrade effective

Changing @openapitools/openapi-generator-cli to 2.23.2 in devDependencies without regenerating yarn.lock leaves the lock file still pinning 2.17.0. On Yarn 4 installs run with --immutable (commonly used in CI) this mismatch will error out, and if installs proceed locally the dependency remains at the vulnerable 2.17.0 so the security fix never applies. Re-run yarn up @openapitools/openapi-generator-cli and commit the updated lockfile/cache.

Useful? React with 👍 / 👎.

"@release-it/conventional-changelog": "^10.0.0",
"husky": "^9.0.11",
Expand Down
Loading