Skip to content

Commit

Permalink
Force immer resolution to ^9.0.6
Browse files Browse the repository at this point in the history
This is following up on a vulnerability reported here:
https://github.com/glints-dev/glints-aries/security/dependabot/yarn.lock/immer/open

See the related discussion here:
facebook/create-react-app#10411

From what I found online, this issue is quite irrelevant:
facebook/create-react-app#10411 (comment)
  • Loading branch information
marco authored and westwood846 committed Sep 9, 2021
1 parent 6efa892 commit 29f10ad
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 4 deletions.
3 changes: 3 additions & 0 deletions package.json
Expand Up @@ -142,5 +142,8 @@
},
"optionalDependencies": {
"@glints/poppins": "^1.0.2"
},
"resolutions": {
"immer": "^9.0.6"
}
}
8 changes: 4 additions & 4 deletions yarn.lock
Expand Up @@ -8819,10 +8819,10 @@ ignore@^5.0.6, ignore@^5.1.4:
resolved "https://registry.yarnpkg.com/ignore/-/ignore-5.1.8.tgz#f150a8b50a34289b33e22f5889abd4d8016f0e57"
integrity sha512-BMpfD7PpiETpBl/A6S498BaIJ6Y/ABT93ETbby2fP00v4EbvPBXWEoaR1UBPKs3iR53pJY7EtZk5KACI57i1Uw==

immer@8.0.1:
version "8.0.1"
resolved "https://registry.yarnpkg.com/immer/-/immer-8.0.1.tgz#9c73db683e2b3975c424fb0572af5889877ae656"
integrity sha512-aqXhGP7//Gui2+UrEtvxZxSquQVXTpZ7KDxfCcKAF3Vysvw0CViVaW9RZ1j1xlIYqaaaipBoqdqeibkc18PNvA==
immer@8.0.1, immer@^9.0.6:
version "9.0.6"
resolved "https://registry.yarnpkg.com/immer/-/immer-9.0.6.tgz#7a96bf2674d06c8143e327cbf73539388ddf1a73"
integrity sha512-G95ivKpy+EvVAnAab4fVa4YGYn24J1SpEktnJX7JJ45Bd7xqME/SCplFzYFmTbrkwZbQ4xJK1xMTUYBkN6pWsQ==

immutable@^4.0.0-rc.9:
version "4.0.0-rc.12"
Expand Down

0 comments on commit 29f10ad

Please sign in to comment.