chore(ci): force braces>=3.0.3 to address CVE-2024-4068

dgrebb · Jun 18, 2024 · bf09a94 · bf09a94
1 parent bcf3edf
commit bf09a94
Show file tree

Hide file tree

Showing 10 changed files with 6,740 additions and 7,535 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,16 +2,6 @@
 
 All notable changes to this project will be documented in this file.
 
-## [4.2.0] - 2024-06-17
-
-### 💡 Features
-
-- ***(utils)*** Add ECS start/stop commands to dg (#1292)
-
-### ⚙️  Miscellaneous Tasks
-
-- ***(backstop)*** Update gh-stg refs
-
 ## [4.1.2] - 2024-06-05
 
 ### ♻️  Refactor

diff --git a/_ci/backstop/package.json b/_ci/backstop/package.json
@@ -41,6 +41,7 @@
   },
   "pnpm": {
     "overrides": {
+      "braces@<3.0.3": ">=3.0.3",
       "proxy-agent@<6.4.0": "^6.4.0"
     }
   }

diff --git a/_ci/backstop/pnpm-lock.yaml b/_ci/backstop/pnpm-lock.yaml
diff --git a/_ci/perf/package.json b/_ci/perf/package.json
@@ -35,6 +35,7 @@
   },
   "pnpm": {
     "overrides": {
+      "braces@<3.0.3": ">=3.0.3",
       "node-forge@<1.3.0": ">=1.3.0",
       "got@<11.8.5": ">=11.8.5",
       "json-bigint@<1.0.0": ">=1.0.0",

diff --git a/_ci/perf/pnpm-lock.yaml b/_ci/perf/pnpm-lock.yaml
diff --git a/_ci/spell/package-lock.json b/_ci/spell/package-lock.json
diff --git a/_ci/spell/package.json b/_ci/spell/package.json
@@ -20,5 +20,10 @@
     "@html-to/text-cli": "^0.5.4",
     "cspell-cli": "github:streetsidesoftware/cspell-cli",
     "gramma": "^1.6.0"
+  },
+  "pnpm": {
+    "overrides": {
+      "braces@<3.0.3": ">=3.0.3"
+    }
   }
 }
diff --git a/_ci/spell/pnpm-lock.yaml b/_ci/spell/pnpm-lock.yaml
diff --git a/back/package.json b/back/package.json
@@ -43,6 +43,7 @@
   },
   "pnpm": {
     "overrides": {
+      "braces@<3.0.3": ">=3.0.3",
       "vite@<5.1.7": ">=5.1.7",
       "webpack-dev-middleware@<6.1.2": ">=6.1.2",
       "follow-redirects@<1.15.6": ">=1.15.6",

diff --git a/back/pnpm-lock.yaml b/back/pnpm-lock.yaml