From b7633be6fbd13e09f7da5d798d3fb328a318feed Mon Sep 17 00:00:00 2001 From: Chris Bartholomew Date: Sat, 31 Oct 2026 11:35:12 -0400 Subject: [PATCH] chore(security): bump source-map-js to 1.2.2 (HIGH) Pins source-map-js >=1.2.2 via a scoped npm override to close a HIGH Dependabot alert in a nested transitive (peer of postcss). Closes Dependabot alert #54 (source-map-js, vuln >=1.0.0 <1.2.2). Claude-Session: https://claude.ai/code/session_014J7s5yzoVEqoZ8LmnD8bQd --- package-lock.json | 6 +++--- package.json | 3 ++- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 4661993..566dbd9 100644 --- a/package-lock.json +++ b/package-lock.json @@ -2585,9 +2585,9 @@ } }, "node_modules/source-map-js": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz", - "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==", + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz", + "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==", "license": "BSD-3-Clause", "peer": true, "engines": { diff --git a/package.json b/package.json index f31f2bb..4c5b583 100644 --- a/package.json +++ b/package.json @@ -35,6 +35,7 @@ "postcss": "^8.5.23", "nanoid": "^3.3.18", "sharp": "^0.35.0", - "brace-expansion": "^2.1.2" + "brace-expansion": "^2.1.2", + "source-map-js": "^1.2.2" } }