pjandro/OmniRoute
1
0
Fork 0
mirror of https://github.com/diegosouzapw/OmniRoute.git synced 2026-07-26 09:52:11 +03:00
Code Issues Packages Projects Releases Wiki Activity

chore(deps): bump omniglyph to ^1.0.2 (security: ReDoS fixes) (#6661)

Browse Source 
The lockfile pinned omniglyph@1.0.0, which carries the polynomial-ReDoS regex
paths fixed in 1.0.1/1.0.2 (all upstream CodeQL alerts resolved). Bump the range
to ^1.0.2 and refresh the lock so `npm ci` installs 1.0.2. No change to the
omniglyph engine behavior — 1.0.1/1.0.2 touched only regex hot paths and docs;
the dependency tree is unchanged (gpt-tokenizer ^3.4.0).

Co-authored-by: diegosouzapw <souzamiriamrodrigues790@gmail.com>
This commit is contained in:
Diego Rodrigues de Sa e Souza
2026-07-08 11:31:18 -03:00
committed by GitHub
parent fd7e4c10e5
commit a14bbccf17
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
package-lock.json generated
View File

@@ -58,7 +58,7 @@
"next-intl": "^4.12.0",
"next-themes": "^0.4.6",
"node-machine-id": "^1.1.12",
"omniglyph": "^1.0.0",
"omniglyph": "^1.0.2",
"open": "^11.0.0",
"ora": "^9.4.1",
"parse5": "^8.0.1",
@@ -22298,9 +22298,9 @@
"license": "MIT"
},
"node_modules/omniglyph": {
"version": "1.0.0",
"resolved": "https://registry.npmjs.org/omniglyph/-/omniglyph-1.0.0.tgz",
"integrity": "sha512-Jz48LVU4UOtQ++kad4Pa5bNqJEqa0OfYRR7iJtsLoMgpNmnAqjAnQao/VIsh2anTurC+BLPhCthzmAjIo746iA==",
"version": "1.0.2",
"resolved": "https://registry.npmjs.org/omniglyph/-/omniglyph-1.0.2.tgz",
"integrity": "sha512-GGLet99n3HVxOx3WuNPda4B0ETptX9SA8h1fnm/AYSXmvsKXE3mN11Ae2jfX8ldAOA/rVJRXHzPhNkXsRHzMsg==",
"license": "MIT",
"dependencies": {
"gpt-tokenizer": "^3.4.0"

2
package.json
View File

@@ -261,7 +261,7 @@
"next-intl": "^4.12.0",
"next-themes": "^0.4.6",
"node-machine-id": "^1.1.12",
"omniglyph": "^1.0.0",
"omniglyph": "^1.0.2",
"open": "^11.0.0",
"ora": "^9.4.1",
"parse5": "^8.0.1",