Skip to content

Commit c6b3383

Browse files
authored
chore: override markdown-it version (#18723)
We have a dependency chain of: ``` build-tools -> markdownlint-cli -> markdownlint -> markdown-it ^^^ straggler ^^^ CVE ``` Override the dependency to get rid of a CVE warning. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
1 parent 4491014 commit c6b3383

File tree

2 files changed

+6
-5
lines changed

2 files changed

+6
-5
lines changed

package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,8 @@
3232
},
3333
"resolutions": {
3434
"colors": "1.4.0",
35-
"string-width": "^4.2.3"
35+
"string-width": "^4.2.3",
36+
"markdown-it": "^12.3.2"
3637
},
3738
"repository": {
3839
"type": "git",

yarn.lock

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6469,10 +6469,10 @@ map-obj@^4.0.0:
64696469
resolved "https://registry.npmjs.org/map-obj/-/map-obj-4.3.0.tgz#9304f906e93faae70880da102a9f1df0ea8bb05a"
64706470
integrity sha512-hdN1wVrZbb29eBGiGjJbeP8JbKjq1urkHJ/LIP/NY48MZ1QVXUsQBV1G1zvYFHn1XE06cwjBsOI2K3Ulnj1YXQ==
64716471

6472-
6473-
version "12.2.0"
6474-
resolved "https://registry.npmjs.org/markdown-it/-/markdown-it-12.2.0.tgz#091f720fd5db206f80de7a8d1f1a7035fd0d38db"
6475-
integrity sha512-Wjws+uCrVQRqOoJvze4HCqkKl1AsSh95iFAeQDwnyfxM09divCBSXlDR1uTvyUP3Grzpn4Ru8GeCxYPM8vkCQg==
6472+
[email protected], markdown-it@^12.3.2:
6473+
version "12.3.2"
6474+
resolved "https://registry.npmjs.org/markdown-it/-/markdown-it-12.3.2.tgz#bf92ac92283fe983fe4de8ff8abfb5ad72cd0c90"
6475+
integrity sha512-TchMembfxfNVpHkbtriWltGWc+m3xszaRD0CZup7GFFhzIgQqxIfn3eGj1yZpfuflzPvfkt611B2Q/Bsk1YnGg==
64766476
dependencies:
64776477
argparse "^2.0.1"
64786478
entities "~2.1.0"

0 commit comments

Comments
 (0)