Skip to content

Commit 8fd073f

Browse files
committed
Specify async resolution
This papers over the following vulnerability: https://app.snyk.io/vuln/SNYK-JS-ASYNC-2441827 We shouldn't be impacted given we don't use the ejs CLI. mde/ejs#645
1 parent ae70fd4 commit 8fd073f

File tree

2 files changed

+5
-4
lines changed

2 files changed

+5
-4
lines changed

package.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -100,6 +100,7 @@
100100
},
101101
"resolutions": {
102102
"**/@types/node": ">=14.18",
103+
"ejs/jake/async": "3.2.3",
103104
"semantic-release/@semantic-release/npm/npm/**/ansi-regex": "5.0.1"
104105
},
105106
"scripts": {

yarn.lock

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1963,10 +1963,10 @@ async-lock@^1.1.0:
19631963
resolved "https://registry.yarnpkg.com/async-lock/-/async-lock-1.3.1.tgz#f2301c200600cde97acc386453b7126fa8aced3c"
19641964
integrity sha512-zK7xap9UnttfbE23JmcrNIyueAn6jWshihJqA33U/hEnKprF/lVGBDsBv/bqLm2YMMl1DnpHhUY044eA0t1TUw==
19651965

1966-
async@0.9.x:
1967-
version "0.9.2"
1968-
resolved "https://registry.yarnpkg.com/async/-/async-0.9.2.tgz#aea74d5e61c1f899613bf64bda66d4c78f2fd17d"
1969-
integrity sha1-rqdNXmHB+JlhO/ZL2mbUx48v0X0=
1966+
async@0.9.x, async@3.2.3:
1967+
version "3.2.3"
1968+
resolved "https://registry.yarnpkg.com/async/-/async-3.2.3.tgz#ac53dafd3f4720ee9e8a160628f18ea91df196c9"
1969+
integrity sha512-spZRyzKL5l5BZQrr/6m/SqFdBN0q3OCI0f9rjfBzCMBIP4p75P620rR3gTmaksNOhmzgdxcaxdNfMy6anrbM0g==
19701970

19711971
asynckit@^0.4.0:
19721972
version "0.4.0"

0 commit comments

Comments
 (0)