Skip to content

Commit 64982b0

Browse files
chore: fix changeset and remove unnecessary hono resolution
- Update changeset to show correct js-yaml version (3.14.2, not 4.1.1) - Remove hono from root resolutions (not in yarn.lock, only used by expo-multichain via npm) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
1 parent b5400aa commit 64982b0

File tree

2 files changed

+2
-3
lines changed

2 files changed

+2
-3
lines changed

.changeset/fix-security-vulnerabilities.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,6 @@ Patched 9 vulnerable packages via resolutions/overrides:
1919
- qs 6.14.1 (arrayLimit DoS)
2020
- undici 6.23.0 (Decompression DoS)
2121
- preact 10.28.2 (VNode Injection)
22-
- js-yaml 4.1.1 (Prototype Pollution)
22+
- js-yaml 3.14.2 (Prototype Pollution)
2323
- valibot 1.2.0 (CVE-2025-66020 EMOJI_REGEX ReDoS)
2424
- hono 4.11.4 (JWT Algorithm Confusion)

package.json

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -103,7 +103,6 @@
103103
"undici": "6.23.0",
104104
"preact": "10.28.2",
105105
"js-yaml": "3.14.2",
106-
"valibot": "1.2.0",
107-
"hono": "4.11.4"
106+
"valibot": "1.2.0"
108107
}
109108
}

0 commit comments

Comments
 (0)