Skip to content

Commit 53bb601

Browse files
Bump dset dependency handling the CVE-2024-21529 (#6822)
* dset bump and changeset * chore(dependencies): updated changesets for modified dependencies --------- Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
1 parent 49732ab commit 53bb601

File tree

4 files changed

+14
-2
lines changed

4 files changed

+14
-2
lines changed
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
---
2+
"@graphql-tools/utils": patch
3+
---
4+
dependencies updates:
5+
- Updated dependency [`dset@^3.1.4` ↗︎](https://www.npmjs.com/package/dset/v/3.1.4) (from `^3.1.2`, in `dependencies`)

.changeset/new-squids-cheat.md

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
'@graphql-tools/utils': patch
3+
---
4+
5+
Bump dset dependency handling the CVE-2024-21529
6+
7+
https://security.snyk.io/vuln/SNYK-JS-DSET-7116691

packages/utils/package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@
3939
"dependencies": {
4040
"@graphql-typed-document-node/core": "^3.1.1",
4141
"cross-inspect": "1.0.1",
42-
"dset": "^3.1.2",
42+
"dset": "^3.1.4",
4343
"tslib": "^2.4.0"
4444
},
4545
"devDependencies": {

yarn.lock

+1-1
Original file line numberDiff line numberDiff line change
@@ -5395,7 +5395,7 @@ dotenv@^8.1.0:
53955395
resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-8.6.0.tgz#061af664d19f7f4d8fc6e4ff9b584ce237adcb8b"
53965396
integrity sha512-IrPdXQsk2BbzvCBGBOTmmSH5SodmqZNt4ERAZDmW4CT+tL8VtvinqywuANaFu4bOMWki16nqf0e4oC0QIaDr/g==
53975397

5398-
dset@^3.1.1, dset@^3.1.2:
5398+
dset@^3.1.1, dset@^3.1.2, dset@^3.1.4:
53995399
version "3.1.4"
54005400
resolved "https://registry.yarnpkg.com/dset/-/dset-3.1.4.tgz#f8eaf5f023f068a036d08cd07dc9ffb7d0065248"
54015401
integrity sha512-2QF/g9/zTaPDc3BjNcVTGoBbXBgYfMTTceLaYcFJ/W9kggFUkhxD/hMEeuLKbugyef9SqAx8cpgwlIP/jinUTA==

0 commit comments

Comments
 (0)