fix(build): resolve Dependabot security alerts (#26729)

Browse Source

Fix 4 Dependabot alerts:
- CVE-2021-34141: remove duplicate vulnerable numpy==1.21.5 pin
- markdown-it ReDoS (>= 13.0.0, < 14.1.1): add yarn resolution to 14.1.1
- preact JSON VNode injection: resolved by yarn upgrade to 10.29.0
- esbuild dev server request leak (<= 0.24.2): add yarn resolution to 0.25.0

Signed-off-by: Ramon Roche <mrpollo@gmail.com>

...

This commit is contained in:

Ramon Roche

2026-03-12 12:40:35 -07:00

committed by GitHub

parent ab6c9b7909

commit 3ed2f23d9c

3 changed files with 491 additions and 446 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

docs/yarn.lock

+487 -445

File diff suppressed because it is too large Load Diff