diff options
| author | Nikhil Ashoka <a.nikhil@ibm.com> | 2026-08-17 18:39:41 +0300 |
|---|---|---|
| committer | Nikhil Ashoka <a.nikhil@ibm.com> | 2026-08-31 17:19:17 +0300 |
| commit | 1bb0ea03be00cd8df686771491f33d5b1b363298 (patch) | |
| tree | a0baabd70b68d704598c95d3513f59c74d0b09a6 /src/api | |
| parent | 5c139d53429a8309418a19f226d0c3d4c0c6b8be (diff) | |
| download | webui-vue-master.tar.xz | |
- Remove ^ from the two packages that allowed silent auto-updates
on every npm install, closing the door on ChainDrop-style npm
supply-chain attacks where a compromised higher patch/minor
version is pulled in without review:
- @typescript-eslint/eslint-plugin: ^8.55.0 → 8.56.1
- @typescript-eslint/parser: ^8.55.0 → 8.56.1
Change-Id: Ie8b3878ce2aeaee6a89ee9e4681a6088aa3de770
Signed-off-by: Nikhil Ashoka <a.nikhil@ibm.com>
Diffstat (limited to 'src/api')
0 files changed, 0 insertions, 0 deletions