Diego Rodrigues de Sa e Souza a14bbccf17 chore(deps): bump omniglyph to ^1.0.2 (security: ReDoS fixes) (#6661) ...

The lockfile pinned omniglyph@1.0.0, which carries the polynomial-ReDoS regex
paths fixed in 1.0.1/1.0.2 (all upstream CodeQL alerts resolved). Bump the range
to ^1.0.2 and refresh the lock so `npm ci` installs 1.0.2. No change to the
omniglyph engine behavior — 1.0.1/1.0.2 touched only regex hot paths and docs;
the dependency tree is unchanged (gpt-tokenizer ^3.4.0).

Co-authored-by: diegosouzapw <souzamiriamrodrigues790@gmail.com>

2026-07-08 11:31:18 -03:00

1008 KiB

Raw Blame History

View Raw