yarn.lock: refresh the transitive dependencies with open advisories

Browse Source

All 56 open Dependabot alerts matched versions the lockfile still held
after the eslint 10 move: tar, fast-uri, brace-expansion, minimatch,
ip-address, picomatch, ws, browserslist and others, each with a fixed
version inside the range its dependents ask for. `yarn up -R` moves
them there; terser-webpack-plugin 5.6 also drops serialize-javascript.

Left open: braces 3.0.3, for which no fixed version exists.

...

This commit is contained in:

Satoshi Qazi Muhammed committed 2026-10-10 02:11:20 +04:00

1 parent 57ff56641b

commit b883f44361

1 file changed

+257 -420

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

yarn.lock

+257 -420

File diff suppressed because it is too large. Load diff