Fix npm security alerts and drop useless overrides
Regenerate the stale package-lock and pin patched versions for the Dependabot-flagged packages (@vitest/browser, form-data, undici, brace-expansion, js-yaml, esbuild, dompurify, @babel/core, vite, @opentelemetry/core via posthog-js). Remove the harmful langsmith override (it forced the vulnerable 0.5.x line) and the zero-effect lodash-es override. Signed-off-by: Sacha Al Himdani <sacha@probo.com>
This commit is contained in:
@@ -27,6 +27,7 @@
|
||||
"@eslint/js": "^10.0.1",
|
||||
"@probo/eslint-plugin-relay-types": "^1.0.0",
|
||||
"@stylistic/eslint-plugin": "^5.10.0",
|
||||
"eslint-import-resolver-typescript": "^4.4.5",
|
||||
"eslint-plugin-import-x": "^4.16.2",
|
||||
"eslint-plugin-react-hooks": "^7.1.1",
|
||||
"eslint-plugin-react": "^7.37.5",
|
||||
|
||||
Reference in New Issue
Block a user