mirror of
https://github.com/PX4/PX4-Autopilot.git
synced 2026-05-20 20:03:54 +08:00
fix(build): resolve Dependabot security alerts (#26729)
Fix 4 Dependabot alerts: - CVE-2021-34141: remove duplicate vulnerable numpy==1.21.5 pin - markdown-it ReDoS (>= 13.0.0, < 14.1.1): add yarn resolution to 14.1.1 - preact JSON VNode injection: resolved by yarn upgrade to 10.29.0 - esbuild dev server request leak (<= 0.24.2): add yarn resolution to 0.25.0 Signed-off-by: Ramon Roche <mrpollo@gmail.com>
This commit is contained in:
@@ -27,5 +27,9 @@
|
||||
},
|
||||
"devDependencies": {
|
||||
"prettier": "^3.2.0"
|
||||
},
|
||||
"resolutions": {
|
||||
"markdown-it": "^14.1.1",
|
||||
"esbuild": "^0.25.0"
|
||||
}
|
||||
}
|
||||
|
||||
+487
-445
File diff suppressed because it is too large
Load Diff
-1
@@ -1,6 +1,5 @@
|
||||
matplotlib==3.5.1
|
||||
numpy==1.22.2
|
||||
numpy==1.21.5
|
||||
numpy_quaternion==2022.4.3
|
||||
pyulog==0.9.0
|
||||
scipy==1.8.0
|
||||
|
||||
Reference in New Issue
Block a user