From 9c4962fbe03287cfb00ffa01e6aade9210425ebf Mon Sep 17 00:00:00 2001 From: Kevin Adametz Date: Thu, 8 Oct 2026 13:02:49 +0000 Subject: [PATCH] =?UTF-8?q?build:=20npm-Advisories=20f=C3=BCr=20shell-quot?= =?UTF-8?q?e=20und=20source-map-js=20behoben?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit source-map-js 1.2.1 → 1.2.2 (GHSA-68fv-2mgg-jv7q). shell-quote per overrides auf ^1.11.0 (installiert 1.12.0, GHSA-pqg4-j6r4-53mv u. a.): concurrently legt 1.9.0 fest, auch in Version 10, und `npm audit fix` stufte concurrently nur auf eine andere verwundbare Version herab. Beide Pakete laufen nur in Entwicklung und Build, nichts davon im Browser. `npm audit`: 0 Schwachstellen, Build unverändert. Co-Authored-By: Claude Opus 5.5 --- package-lock.json | 12 ++++++------ package.json | 3 +++ 2 files changed, 9 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index c7a25e1f..560288c4 100644 --- a/package-lock.json +++ b/package-lock.json @@ -2583,9 +2583,9 @@ } }, "node_modules/shell-quote": { - "version": "1.9.0", - "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.9.0.tgz", - "integrity": "sha512-Iov+JwFv/2HcTpcwNMKd8+IWNb8tboQJNQTkAY/LLVK7gGH9jy+LGkVqPxfekHl+yMmiqXszdGWXgkfml7hjqA==", + "version": "1.12.0", + "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.12.0.tgz", + "integrity": "sha512-PcByqNyT/38F2kDNi006HAMRJaULuBzq/FOsw3qdZvX/GA9W/jamDaRskgHjubHiftXK5sIFxLNkvrXUwcof6Q==", "license": "MIT", "engines": { "node": ">= 0.4" @@ -2595,9 +2595,9 @@ } }, "node_modules/source-map-js": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz", - "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==", + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz", + "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==", "license": "BSD-3-Clause", "engines": { "node": ">=0.10.0" diff --git a/package.json b/package.json index ff849492..83c0edfa 100644 --- a/package.json +++ b/package.json @@ -32,5 +32,8 @@ }, "devDependencies": { "cross-env": "^10.1.0" + }, + "overrides": { + "shell-quote": "^1.11.0" } }