Skip to content

Commit baeb2eb

Browse files
committed
chore(deps): force patched tinypool, uuid and postcss-selector-parser
Docusaurus pins vulnerable ranges of these transitive dependencies, so Dependabot cannot update them. Override them through resolutions. Output of `yarn build` is unchanged apart from minifier renaming. Signed-off-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com>
1 parent 4a475c1 commit baeb2eb

2 files changed

Lines changed: 13 additions & 18 deletions

File tree

‎website/package.json‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,9 @@
4949
"node": ">=20.0.0"
5050
},
5151
"resolutions": {
52-
"serialize-javascript": ">=7.0.5"
52+
"postcss-selector-parser": "^7.1.6",
53+
"serialize-javascript": ">=7.0.5",
54+
"tinypool": "^2.1.2",
55+
"uuid": "^11.1.1"
5356
}
5457
}

‎website/yarn.lock‎

Lines changed: 9 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -8205,15 +8205,7 @@ postcss-selector-not@^8.0.1:
82058205
dependencies:
82068206
postcss-selector-parser "^7.0.0"
82078207

8208-
postcss-selector-parser@^6.0.11, postcss-selector-parser@^6.0.16:
8209-
version "6.1.5"
8210-
resolved "https://registry.yarnpkg.com/postcss-selector-parser/-/postcss-selector-parser-6.1.5.tgz#20e988ce8eab87575d54824d9800236c5fd872ca"
8211-
integrity sha512-TEHFzb5KRDKaOgJ4TYE+0jyJtFbjLvkdVOu0fZ2b6MTWzoqZd4Le+61aEppWkvTlYePgOX4ATL1wsAIPMLTw6Q==
8212-
dependencies:
8213-
cssesc "^3.0.0"
8214-
util-deprecate "^1.0.2"
8215-
8216-
postcss-selector-parser@^7.0.0:
8208+
postcss-selector-parser@^6.0.11, postcss-selector-parser@^6.0.16, postcss-selector-parser@^7.0.0, postcss-selector-parser@^7.1.6:
82178209
version "7.1.7"
82188210
resolved "https://registry.yarnpkg.com/postcss-selector-parser/-/postcss-selector-parser-7.1.7.tgz#70e353032ced41529d70b7662227a74eb001d31b"
82198211
integrity sha512-wWBro/7hJ40ye6TPiXkUQoXKCw23xSsjriUvqd7Uls9Sso3oLiON1flc18cCdnjgCRXw4fBVqUJJeOdDTh3P3g==
@@ -9376,10 +9368,10 @@ tiny-warning@^1.0.0:
93769368
resolved "https://registry.yarnpkg.com/tiny-warning/-/tiny-warning-1.0.3.tgz#94a30db453df4c643d0fd566060d60a875d84754"
93779369
integrity sha512-lBN9zLN/oAf68o3zNXYrdCt1kP8WsiGW8Oo2ka41b2IM5JL/S1CTyX1rW0mb/zSuJun0ZUrDxx4sqvYS2FWzPA==
93789370

9379-
tinypool@^1.0.2:
9380-
version "1.1.1"
9381-
resolved "https://registry.yarnpkg.com/tinypool/-/tinypool-1.1.1.tgz#059f2d042bd37567fbc017d3d426bdd2a2612591"
9382-
integrity sha512-Zba82s87IFq9A9XmjiX5uZA/ARWDrB03OHlq+Vw1fSdt0I+4/Kutwy8BP4Y/y/aORMo61FQ0vIb5j44vSo5Pkg==
9371+
tinypool@^1.0.2, tinypool@^2.1.2:
9372+
version "2.2.0"
9373+
resolved "https://registry.yarnpkg.com/tinypool/-/tinypool-2.2.0.tgz#cbd3f850b02f132ad288546bbc14c42cd93b32e5"
9374+
integrity sha512-jBrmx4lYmaC9k/mgPbylxs7kBUxHtD8256up+HjLaDFfXScKJQyil+SWXSvhAtT7XHo+yTVlpB81PGmHP8oLSQ==
93839375

93849376
to-regex-range@^5.0.1:
93859377
version "5.0.1"
@@ -9658,10 +9650,10 @@ utils-merge@1.0.1:
96589650
resolved "https://registry.yarnpkg.com/utils-merge/-/utils-merge-1.0.1.tgz#9f95710f50a267947b2ccc124741c1028427e713"
96599651
integrity sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==
96609652

9661-
uuid@^8.3.2:
9662-
version "8.3.2"
9663-
resolved "https://registry.yarnpkg.com/uuid/-/uuid-8.3.2.tgz#80d5b5ced271bb9af6c445f21a1a04c606cefbe2"
9664-
integrity sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==
9653+
uuid@^11.1.1, uuid@^8.3.2:
9654+
version "11.1.1"
9655+
resolved "https://registry.yarnpkg.com/uuid/-/uuid-11.1.1.tgz#f6d81d2e1c65d00762e5e29b16c5d2d995e208ad"
9656+
integrity sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==
96659657

96669658
value-equal@^1.0.1:
96679659
version "1.0.1"

0 commit comments

Comments
 (0)