n0ctal 7eacce6a46 chore(frontend): resolve the high-severity brace-expansion advisory (#6180) ...

npm audit --omit=dev --audit-level=high is a CI gate and it currently fails on
main: swagger-ui-react pulls @swagger-api/apidom-reference, which pins
minimatch, which resolves brace-expansion to 5.0.8 — the range covered by
GHSA-rgw5-rvv9-x895.

Pin the patched 5.0.9 through the existing swagger-ui-react overrides block
rather than globally: minimatch@3 under eslint-plugin-jsx-a11y still needs the
1.x line, and a blanket override would force v5 there too.

2026-08-06 16:29:03 +02:00

3.1 KiB

Raw Blame History

View Raw