Merge pull request #217 from Staffbase/fix-cross-spawn-vulnerability

Fix cross-spawn vulnerability
Staffbase · Dec 26, 2024 · f8a05ff · f8a05ff
2 parents cb25f09 + f1163a9
commit f8a05ff
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 4 deletions.
diff --git a/.vscode/settings.json b/.vscode/settings.json
@@ -0,0 +1,6 @@
+{
+    "sonarlint.connectedMode.project": {
+        "connectionId": "Staffbase",
+        "projectKey": "com.staffbase:plugins-client-sdk"
+    }
+}
diff --git a/package.json b/package.json
@@ -92,6 +92,7 @@
     "size-limit": "^8.2.4"
   },
   "resolutions": {
+    "cross-spawn": "^7.0.6",
     "wrap-ansi": "^7.0.0",
     "semver": "^7.3.2"
   }

diff --git a/yarn.lock b/yarn.lock
@@ -2529,10 +2529,10 @@ create-jest@^29.7.0:
     jest-util "^29.7.0"
     prompts "^2.0.1"
 
-cross-spawn@^7.0.2, cross-spawn@^7.0.3:
-  version "7.0.3"
-  resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-7.0.3.tgz#f73a85b9d5d41d045551c177e2882d4ac85728a6"
-  integrity sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==
+cross-spawn@^7.0.2, cross-spawn@^7.0.3, cross-spawn@^7.0.6:
+  version "7.0.6"
+  resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-7.0.6.tgz#8a58fe78f00dcd70c370451759dfbfaf03e8ee9f"
+  integrity sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==
   dependencies:
     path-key "^3.1.0"
     shebang-command "^2.0.0"