From cc009be588fe9fe5ff8532423b5b96432ec8245e Mon Sep 17 00:00:00 2001 From: Paul Derscheid Date: Fri, 9 Jan 2026 17:21:43 +0000 Subject: [PATCH] Bug 41587: Fix moderate severity node dependency vulnerabilities - Add resolution for micromatch ^4.0.8 - Add resolution for @cypress/request ^3.0.0 - Add resolution for js-yaml ^4.1.1 Test plan: - yarn audit --level moderate should show reduced vulnerability count - yarn build && yarn build:prod should complete without errors - yarn cypress run should complete without (or currently expected) errors @RM: You will need to push yarn.lock as well Signed-off-by: David Nind Signed-off-by: Kyle M Hall --- package.json | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index 893d57d5d39..5796c3774f0 100644 --- a/package.json +++ b/package.json @@ -72,7 +72,10 @@ "lodash": "^4.17.12", "form-data": "^2.5.4", "braces": "^3.0.3", - "qs": "^6.14.1" + "qs": "^6.14.1", + "micromatch": "^4.0.8", + "@cypress/request": "^3.0.0", + "js-yaml": "^4.1.1" }, "author": "", "license": "GPL-3.0", -- 2.50.1 (Apple Git-155)