Add a pnpm override so next's transitive sharp resolves to >=0.35.0, clearing GHSA-f88m-g3jw-g9cj after direct bumps in D20510 left .>next>sharp on 0.34.5.
Details
Details
- Reviewers
Fabien - Group Reviewers
Restricted Project - Commits
- rABCc10e6c9be215: [monorepo] Override sharp to >=0.35.0 for next transitive libvips CVEs
- pnpm install
- pnpm audit --audit-level high # sharp advisory gone; high 4→3
- rg 'sharp@0.34' pnpm-lock.yaml # no matches
Diff Detail
Diff Detail
- Repository
- rABC Bitcoin ABC
- Lint
Lint Not Applicable - Unit
Tests Not Applicable
Event Timeline
Comment Actions
Build Bitcoin ABC Diffs / Diff Testing (ai-review) failed.
Tail of the build log:
/work /work/abc-ci-builds/ai-review Connecting to CodeRabbit... 0s elapsed ✗ Review error Review failed: Failed to start review. Please try again. Build ai-review failed with exit code 1