mirror of
https://github.com/stablyai/orca.git
synced 2026-10-30 16:47:34 +00:00
Neil
2078db93ec
* ci: audit dependency security without gating releases * ci: audit stable release tags instead of running daily * ci: isolate release audit data and fix integration checks * ci: require exact audit inputs and ignore candidate archive attributes
55 lines
2.1 KiB
JSON
55 lines
2.1 KiB
JSON
[
|
|
{
|
|
"workspace": "mobile",
|
|
"package": "braces",
|
|
"version": "3.0.3",
|
|
"advisory": "GHSA-vfj7-8cjw-p6xm",
|
|
"owner": "Orca maintainers",
|
|
"reason": "Parser and AST walkers reject excessive nesting via the patch merged in #31681, covered by dependency-security-patches.test.mjs. Remove when a fixed upstream release is available.",
|
|
"expires": "2026-11-20",
|
|
"patch": {
|
|
"path": "patches/braces@3.0.3.patch",
|
|
"sha256": "c07bb14cec04bc891e1fe529720444cc9729a25117f9aaf24253cfe3132a34fd"
|
|
}
|
|
},
|
|
{
|
|
"workspace": "docs/site",
|
|
"package": "braces",
|
|
"version": "3.0.3",
|
|
"advisory": "GHSA-vfj7-8cjw-p6xm",
|
|
"owner": "Orca maintainers",
|
|
"reason": "Parser and AST walkers reject excessive nesting via the patch merged in #31681, covered by dependency-security-patches.test.mjs. Remove when a fixed upstream release is available.",
|
|
"expires": "2026-11-20",
|
|
"patch": {
|
|
"path": "../../config/patches/braces@3.0.3.patch",
|
|
"sha256": "c07bb14cec04bc891e1fe529720444cc9729a25117f9aaf24253cfe3132a34fd"
|
|
}
|
|
},
|
|
{
|
|
"workspace": "config/audit-tools",
|
|
"package": "braces",
|
|
"version": "3.0.3",
|
|
"advisory": "GHSA-vfj7-8cjw-p6xm",
|
|
"owner": "Orca maintainers",
|
|
"reason": "Parser and AST walkers reject excessive nesting via the patch merged in #31681, covered by dependency-security-patches.test.mjs. Remove when a fixed upstream release is available.",
|
|
"expires": "2026-11-20",
|
|
"patch": {
|
|
"path": "../patches/braces@3.0.3.patch",
|
|
"sha256": "c07bb14cec04bc891e1fe529720444cc9729a25117f9aaf24253cfe3132a34fd"
|
|
}
|
|
},
|
|
{
|
|
"workspace": "mobile",
|
|
"package": "node-forge",
|
|
"version": "1.4.0",
|
|
"advisory": "GHSA-86w9-cpqp-85rv",
|
|
"owner": "Orca maintainers",
|
|
"reason": "RSA DigestAlgorithm rejects extra nested elements via the patch merged in #31681, covered by mobile/scripts/dependency-security-patches.test.ts. Remove when a fixed upstream release is available.",
|
|
"expires": "2026-11-20",
|
|
"patch": {
|
|
"path": "patches/node-forge@1.4.0.patch",
|
|
"sha256": "2798686e4488058ad81c3b8e32eb763c0feff21f4c717ce4d13b6ef2432cd5b8"
|
|
}
|
|
}
|
|
]
|