actions/setup-python
5
0
Fork 0
mirror of https://gitea.com/actions/setup-python.git synced 2026-08-05 02:31:29 +00:00
Code Activity

fix: resolve npm audit high severity vulnerabilities (#1347)

Browse Source 
- Upgrade fast-xml-parser to 5.10.1 (fixes GHSA-8r6m-32jq-jx6q)
- Add package.json override to force brace-expansion >=5.0.8 across
  all transitive dependencies (fixes GHSA-mh99-v99m-4gvg) without
  downgrading jest/ts-jest
- Refresh .licenses/npm cache to match updated dependency tree
- Rebuild dist/setup and dist/cache-save

npm audit now reports 0 vulnerabilities. Pre-existing test suite
failures (7 suites, ESM/jest teardown issue) verified unrelated to
this change - identical on unmodified main with node 24.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This commit is contained in:
Haritha
2026-08-03 11:18:19 -05:00
committed by GitHub
parent 5fda3b95a4
commit 8549b9f8f5
15 changed files with 2247 additions and 1490 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.licenses/npm/@nodable/entities.dep.yml
Generated
+2 -2
View File
@@ -1,9 +1,9 @@
---
name: "@nodable/entities"
version: 2.2.0
version: 3.0.0
type: npm
summary: Entity parser for XML, HTML, External entites with security and NCR control
homepage:
homepage:
license: mit
licenses:
- sources: README.md