Raise the nanoid pnpm override past 3.3.17 so cashtab postcss picks up the patch for GHSA-2v37-7h3g-55p8 (high).
Details
Details
- Reviewers
Fabien - Group Reviewers
Restricted Project - Commits
- rABCc91a427aa275: [monorepo] Override nanoid 3.3.18 for postcss infinite-loop fix
- pnpm install --lockfile-only
- rg 'nanoid@' pnpm-lock.yaml # 3.3.18 only
- pnpm audit --audit-level high # GHSA-2v37 gone; high 11→10
Diff Detail
Diff Detail
- Repository
- rABC Bitcoin ABC
- Lint
Lint Not Applicable - Unit
Tests Not Applicable
Event Timeline
Comment Actions
Build Bitcoin ABC Diffs / Diff Testing (ai-review) passed.
CodeRabbit Review
Diff : committed changes only
Compare : HEAD → master
Directory : work
────────────────────────────────────────
(\(\
(• .•) The first 90% of the code accounts for the first 90% of the development time. The remaining 10% of the code accounts for the other 90% of the development time. - Tom Cargill
────────────────────────────────────────
Review complete
No findings ✔
2 files reviewed:
- pnpm-lock.yaml
- pnpm-workspace.yaml
────────────────────────────────────────