Raise the existing qs pnpm override from >=6.15.2 to >=6.16.0 so transitive qs (notably alp-dex>supertest>superagent) picks up patches for GHSA-x5fp-wj9c-mxmx and GHSA-4mjr-xmp4-gh2g.
Details
Details
- Reviewers
Fabien - Group Reviewers
Restricted Project - Commits
- rABC49bd5010e591: [monorepo] Override qs >=6.16.0 for array-limit and isBuffer DoS fixes
- pnpm install --lockfile-only
- rg 'qs@6\.' pnpm-lock.yaml # 6.16.0 only
- pnpm audit # qs GHSAs gone; moderate 9→7
Diff Detail
Diff Detail
- Repository
- rABC Bitcoin ABC
- Lint
Lint Not Applicable - Unit
Tests Not Applicable
Event Timeline
Comment Actions
Build Bitcoin ABC Diffs / Diff Testing (ai-review) passed.
CodeRabbit Review
Diff : committed changes only
Compare : HEAD → master
Directory : work
────────────────────────────────────────
(\(\
(• .•) Paging Dr. CodeRabbit. Dr. CodeRabbit to the code review room.
────────────────────────────────────────
Review complete
No findings ✔
2 files reviewed:
- pnpm-lock.yaml
- pnpm-workspace.yaml
────────────────────────────────────────
Comment Actions
Build Bitcoin ABC Diffs / Diff Testing (ai-review) passed.
CodeRabbit Review
Diff : committed changes only
Compare : HEAD → master
Directory : work
────────────────────────────────────────
(\(\
(• .•) RabbitMQ is just my side hustle.
────────────────────────────────────────
Review complete
No findings ✔
2 files reviewed:
- pnpm-lock.yaml
- pnpm-workspace.yaml
────────────────────────────────────────