fix(deps): scope @babel/core to 7.29.7 via override (security #241) #242

Merged

maximus merged 1 commit from issue-241-babel-override into main

2026-07-04 20:12:28 +00:00

Author	SHA1	Message	Date
le king fu	54ef0f0229	fix(deps): scope @babel/core to 7.29.7 via override (fixes #241 ) All checks were successful PR Check / rust (pull_request) Successful in 23m2s Details PR Check / frontend (pull_request) Successful in 2m30s Details @babel/core@7.29.0 (pulled transitively by @vitejs/plugin-react, build-only) was flagged by GHSA-4x5r-pxfx-6jf8 (arbitrary file read via sourceMappingURL, low, CVSS 3.2). npm audit fix cannot resolve it — the version is pinned by the parent — so a scoped overrides entry forces the patched 7.29.7 within the parent's accepted 7.x range (non-breaking). npm audit now reports 0. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-02 16:43:28 -04:00

Author

SHA1

Message

Date

le king fu

54ef0f0229

fix(deps): scope @babel/core to 7.29.7 via override (fixes #241 )

PR Check / rust (pull_request) Successful in 23m2s

Details

PR Check / frontend (pull_request) Successful in 2m30s

Details

@babel/core@7.29.0 (pulled transitively by @vitejs/plugin-react, build-only)
was flagged by GHSA-4x5r-pxfx-6jf8 (arbitrary file read via sourceMappingURL,
low, CVSS 3.2). npm audit fix cannot resolve it — the version is pinned by the
parent — so a scoped overrides entry forces the patched 7.29.7 within the
parent's accepted 7.x range (non-breaking). npm audit now reports 0.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-02 16:43:28 -04:00