Skip to content

Commit 8a69e1d

Browse files
authored
[Dependencies] Override glob dependency version (#841)
The vulnerability in the `test-exclude` package (which was pulling in the old glob version) has been resolved by updating `c8` to the latest version and applying package overrides to ensure glob 11.1.0 is used throughout the dependency tree. 1. Updated codegen/package.json: - Updated `c8` from `^9.1.0` to `^10.1.3` (latest version) - Updated other dependencies too. 2. Updated package.json: - Added an `overrides` section to force `glob` to version `^11.1.0` Verification: ✅ `npm audit` now reports 0 vulnerabilities ✅ `glob` has been updated from 7.2.3 (vulnerable) to 11.1.0 (secure) ✅ All transitive dependencies have been properly updated
1 parent 3be7414 commit 8a69e1d

File tree

3 files changed

+818
-1262
lines changed

3 files changed

+818
-1262
lines changed

codegen/package.json

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -28,20 +28,19 @@
2828
"dist/**"
2929
],
3030
"dependencies": {
31-
"@open-ai/plugin": "file:",
3231
"@azure-tools/typespec-client-generator-core": "0.62.0",
33-
"@typespec/http-client-csharp": "1.0.0-alpha.20251113.2",
32+
"@open-ai/plugin": "file:",
3433
"@typespec/http": "1.6.0",
34+
"@typespec/http-client-csharp": "1.0.0-alpha.20251113.2",
3535
"@typespec/openapi": "1.6.0"
3636
},
3737
"devDependencies": {
3838
"@types/node": "^22.8.1",
39-
"@vitest/coverage-v8": "^1.4.0",
40-
"@vitest/ui": "^1.4.0",
41-
"c8": "^9.1.0",
42-
"copyfiles": "^2.4.1",
43-
"rimraf": "~5.0.5",
39+
"@vitest/coverage-v8": "^4.0.10",
40+
"@vitest/ui": "^4.0.10",
41+
"c8": "^10.1.3",
42+
"rimraf": "^6.1.0",
4443
"typescript": "^5.6.3",
45-
"vitest": "^1.4.0"
44+
"vitest": "^4.0.10"
4645
}
4746
}

0 commit comments

Comments
 (0)