actions/setup-python
5
0
Fork 0
mirror of https://gitea.com/actions/setup-python.git synced 2026-08-05 02:31:29 +00:00
Code Activity

fix: resolve npm audit high severity vulnerabilities (#1347)

Browse Source 
- Upgrade fast-xml-parser to 5.10.1 (fixes GHSA-8r6m-32jq-jx6q)
- Add package.json override to force brace-expansion >=5.0.8 across
  all transitive dependencies (fixes GHSA-mh99-v99m-4gvg) without
  downgrading jest/ts-jest
- Refresh .licenses/npm cache to match updated dependency tree
- Rebuild dist/setup and dist/cache-save

npm audit now reports 0 vulnerabilities. Pre-existing test suite
failures (7 suites, ESM/jest teardown issue) verified unrelated to
this change - identical on unmodified main with node 24.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This commit is contained in:
Haritha
2026-08-03 11:18:19 -05:00
committed by GitHub
parent 5fda3b95a4
commit 8549b9f8f5
15 changed files with 2247 additions and 1490 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.licenses/npm/fast-xml-parser.dep.yml
Generated
+1 -1
View File
@@ -1,6 +1,6 @@
---
name: fast-xml-parser
version: 5.9.3
version: 5.10.1
type: npm
summary: Validate XML, Parse XML, Build XML without C/C++ based libraries
homepage: