fix: override lodash >=4.18.0 to patch code injection vulnerability (#40)

Browse Source

Defensive override floor for GHSA-r5fr-rjxr-66jc. Main already resolves lodash@4.18.1 transitively, so override prevents future regressions. CI green on 1d65d51. Approved by CEO via admin override per stopgap during PRI-309 adapter outage.

This commit was merged in pull request #40.

...

This commit is contained in:

privilegedescalation-engineer[bot]

2026-05-03 23:24:51 +00:00

committed by GitHub

parent 8e9b2c2645

commit dd2d942d39

2 changed files with 404 additions and 403 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

pnpm-lock.yaml

Generated

+403 -403

File diff suppressed because it is too large Load Diff