diff options
| author | Leitwolf11 | 2026-10-03 13:48:23 +0300 |
|---|---|---|
| committer | Leitwolf11 | 2026-10-03 13:48:23 +0300 |
| commit | 328ef42c31b5127b8e5b24e00bbeca5360acd2e8 (patch) | |
| tree | 4d32979211eb2e661eaeff2cea9dea3b01740450 | |
| parent | ef8875267978042cf91a16062630ec583cac8eba (diff) | |
| parent | 7b51cee94448139988a4843eb5598d69016451bf (diff) | |
| download | progmaweb-feature/hebrew-locale.tar.gz | |
Merge remote-tracking branch 'origin/main' into feature/hebrew-localefeature/hebrew-locale
| -rw-r--r-- | pnpm-workspace.yaml | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 68deb25..7b3dd1b 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -12,3 +12,13 @@ overrides: # published denial-of-service advisories fixed by 5.0.12. Remove this once # minimatch depends on a fixed release itself. "brace-expansion@>=5.0.0 <5.0.12": 5.0.12 +auditConfig: + ignoreGhsas: + # braces <= 3.0.3: stack exhaustion on deeply nested brace patterns. No + # fixed release exists (3.0.3 is the latest). The package is reached only + # through the lint toolchain (eslint-config-next > @next/eslint-plugin-next + # > fast-glob > micromatch), is not part of the built or deployed + # application, and only ever receives the glob patterns of this + # repository. Remove this entry as soon as braces or the Next.js lint + # plugin publishes a release without the advisory. + - GHSA-vfj7-8cjw-p6xm |