fix: add resolution for cross-spawn to fix vuln (#490)

DevCycleHQ · Dec 17, 2024 · 10da152 · 10da152
1 parent fb24c00
commit 10da152
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 4 deletions.
diff --git a/package.json b/package.json
@@ -66,5 +66,8 @@
         "classNameTemplate": "{classname}",
         "titleTemplate": "{title}"
     },
-    "packageManager": "[email protected]"
+    "packageManager": "[email protected]",
+    "resolutions": {
+        "cross-spawn@^7.0.*": "^7.0.5"
+    }
 }
diff --git a/yarn.lock b/yarn.lock
@@ -2718,13 +2718,13 @@ __metadata:
   linkType: hard
 
 "cross-spawn@npm:^7.0.0, cross-spawn@npm:^7.0.2, cross-spawn@npm:^7.0.3":
-  version: 7.0.3
-  resolution: "cross-spawn@npm:7.0.3"
+  version: 7.0.6
+  resolution: "cross-spawn@npm:7.0.6"
   dependencies:
     path-key: "npm:^3.1.0"
     shebang-command: "npm:^2.0.0"
     which: "npm:^2.0.1"
-  checksum: 10/e1a13869d2f57d974de0d9ef7acbf69dc6937db20b918525a01dacb5032129bd552d290d886d981e99f1b624cb03657084cc87bd40f115c07ecf376821c729ce
+  checksum: 10/0d52657d7ae36eb130999dffff1168ec348687b48dd38e2ff59992ed916c88d328cf1d07ff4a4a10bc78de5e1c23f04b306d569e42f7a2293915c081e4dfee86
   languageName: node
   linkType: hard