Compare commits

..

2 Commits

Author SHA1 Message Date
Chris Farhood c77ddc99c4 fix: remove JSON-invalid comments from pnpm overrides
The // comment syntax is not valid in JSON and causes pnpm install
to fail with 'Invalid package.json in package.json'.

Issue: PRI-803
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-06 00:42:16 +00:00
Chris Farhood 12a1bbb750 docs: add explanatory comment above elliptic pnpm override
// elliptic >=6.6.1: no patched version exists yet (GHSA-848j-6mx2-7j84).
// This override prevents regression and will auto-resolve once upstream publishes a fix.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-05 18:17:51 +00:00
-2
View File
@@ -40,8 +40,6 @@
"vite-plugin-svgr": "^4.5.0",
"vitest": "^3.0.5"
},
// Override for GHSA-848j-6mx2-7j84 (transitive via vite-plugin-node-polyfills → crypto-browserify → browserify-sign → elliptic).
// No patched version exists yet; this is a forward-looking safeguard that auto-resolves when upstream publishes 6.6.2+.
"pnpm": {
"overrides": {
"elliptic": ">=6.6.1"