Skip to content

Commit 66f4768

Browse files
committed
chore: upgrade dependencies to fix Trivy security vulnerabilities @W-20203809@
- Upgrade axios from 1.11.0 to 1.12.0 (fixes CVE-2025-58754) - Force path-to-regexp to 0.1.12 via resolutions (fixes CVE-2024-52798) - Force esbuild to 0.24.0+ via resolutions (fixes multiple Go stdlib CVEs)
1 parent db7354b commit 66f4768

File tree

2 files changed

+169
-305
lines changed

2 files changed

+169
-305
lines changed

package.json

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@
1515
"@salesforce/kit": "^3.1.6",
1616
"@salesforce/lwc-dev-mobile-core": "4.0.0-alpha.12",
1717
"@salesforce/sf-plugins-core": "^11.2.4",
18-
"axios": "^1.11.0",
18+
"axios": "^1.12.0",
1919
"glob": "^10.4.5",
2020
"lwc": "~8.20.5",
2121
"node-fetch": "^3.3.2",
@@ -112,7 +112,9 @@
112112
"access": "public"
113113
},
114114
"resolutions": {
115-
"cliui": "7.0.4"
115+
"cliui": "7.0.4",
116+
"express/path-to-regexp": "0.1.12",
117+
"esbuild": "^0.24.0"
116118
},
117119
"wireit": {
118120
"build": {

0 commit comments

Comments
 (0)