From c9a881a313083c7b5d914a27a9d69ed939ffef15 Mon Sep 17 00:00:00 2001 From: Rob Zolkos Date: Fri, 24 Jul 2026 12:08:14 -0400 Subject: [PATCH] Override js-yaml to ^4.3.0 to fix npm audit failure @redocly/openapi-core pins js-yaml 4.2.0, which is vulnerable to GHSA-52cp-r559-cp3m (high). Force ^4.3.0 via npm overrides until Redocly picks up the fix. --- typescript/package-lock.json | 6 +++--- typescript/package.json | 3 ++- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/typescript/package-lock.json b/typescript/package-lock.json index de2d051..e72b388 100644 --- a/typescript/package-lock.json +++ b/typescript/package-lock.json @@ -2187,9 +2187,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "4.2.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz", - "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==", + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz", + "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==", "dev": true, "funding": [ { diff --git a/typescript/package.json b/typescript/package.json index f53bd9b..0917667 100644 --- a/typescript/package.json +++ b/typescript/package.json @@ -62,6 +62,7 @@ "typescript": ">=5.0.0" }, "overrides": { - "minimatch": ">=10.2.1" + "minimatch": ">=10.2.1", + "js-yaml": "^4.3.0" } }