Force joi past vulnerable 17.x/18.x so marlin-wallet React Native CLI and wait-on pick up patches for GHSA-q7cg-457f-vx79 (moderate).
Details
Details
- Reviewers
PiRK - Group Reviewers
Restricted Project - Commits
- rABC38b1a7f1b996: [monorepo] Override joi 17.13.4 / 18.2.1 for nested link() DoS fixes
- pnpm install --lockfile-only
- rg 'joi@' pnpm-lock.yaml # 17.13.4 and 18.2.1 only
- pnpm audit # joi GHSAs gone; moderate 8→6
Diff Detail
Diff Detail
- Repository
- rABC Bitcoin ABC
- Lint
Lint Not Applicable - Unit
Tests Not Applicable
Event Timeline
Comment Actions
Build Bitcoin ABC Diffs / Diff Testing (ai-review) passed.
CodeRabbit Review
Diff : committed changes only
Compare : HEAD → master
Directory : work
────────────────────────────────────────
(\(\
(• .•) Digging deeper than a Minecraft player.
────────────────────────────────────────
Review complete
No findings ✔
2 files reviewed:
- pnpm-lock.yaml
- pnpm-workspace.yaml
────────────────────────────────────────