Skip to content

Resolve Dependabot security-update deadlock caused by transitive undici@5.x #44

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
dcapslock merged 2 commits into from
Jun 5, 2026
Merged

Resolve Dependabot security-update deadlock caused by transitive undici@5.x #44

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
7d1dada
Initial plan
Copilot Jun 5, 2026
de52c47
fix: force secure semantic-release npm resolution
Copilot Jun 5, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -66,6 +66,7 @@
"yarn-audit-fix": "^10.1.1"
},
"resolutions": {
"@semantic-release/npm": "^13.1.5",
"lodash": "^4.18.0"
},
"dependencies": {
Expand Down
84 changes: 0 additions & 84 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,16 +5,6 @@ __metadata:
version: 8
cacheKey: 10c0

"@actions/core@npm:^1.11.1":
version: 1.11.1
resolution: "@actions/core@npm:1.11.1"
dependencies:
"@actions/exec": "npm:^1.1.1"
"@actions/http-client": "npm:^2.0.1"
checksum: 10c0/9aa30b397d8d0dbc74e69fe46b23fb105cab989beb420c57eacbfc51c6804abe8da0f46973ca9f639d532ea4c096d0f4d37da0223fbe94f304fa3c5f53537c30
languageName: node
linkType: hard

"@actions/core@npm:^3.0.0":
version: 3.0.1
resolution: "@actions/core@npm:3.0.1"
Expand All @@ -25,15 +15,6 @@ __metadata:
languageName: node
linkType: hard

"@actions/exec@npm:^1.1.1":
version: 1.1.1
resolution: "@actions/exec@npm:1.1.1"
dependencies:
"@actions/io": "npm:^1.0.1"
checksum: 10c0/4a09f6bdbe50ce68b5cf8a7254d176230d6a74bccf6ecc3857feee209a8c950ba9adec87cc5ecceb04110182d1c17117234e45557d72fde6229b7fd3a395322a
languageName: node
linkType: hard

"@actions/exec@npm:^3.0.0":
version: 3.0.0
resolution: "@actions/exec@npm:3.0.0"
Expand All @@ -43,16 +24,6 @@ __metadata:
languageName: node
linkType: hard

"@actions/http-client@npm:^2.0.1":
version: 2.2.3
resolution: "@actions/http-client@npm:2.2.3"
dependencies:
tunnel: "npm:^0.0.6"
undici: "npm:^5.25.4"
checksum: 10c0/13141b66a42aa4afd8c50f7479e13a5cdb5084ccb3c73ec48894b8029743389a3d2bf8cdc18e23fb70cd33995740526dd308815613907571e897c3aa1e5eada6
languageName: node
linkType: hard

"@actions/http-client@npm:^4.0.0":
version: 4.0.1
resolution: "@actions/http-client@npm:4.0.1"
Expand All @@ -63,13 +34,6 @@ __metadata:
languageName: node
linkType: hard

"@actions/io@npm:^1.0.1":
version: 1.1.3
resolution: "@actions/io@npm:1.1.3"
checksum: 10c0/5b8751918e5bf0bebd923ba917fb1c0e294401e7ff0037f32c92a4efa4215550df1f6633c63fd4efb2bdaae8711e69b9e36925857db1f38935ff62a5c92ec29e
languageName: node
linkType: hard

"@actions/io@npm:^3.0.2":
version: 3.0.2
resolution: "@actions/io@npm:3.0.2"
Expand Down Expand Up @@ -497,13 +461,6 @@ __metadata:
languageName: node
linkType: hard

"@fastify/busboy@npm:^2.0.0":
version: 2.1.1
resolution: "@fastify/busboy@npm:2.1.1"
checksum: 10c0/6f8027a8cba7f8f7b736718b013f5a38c0476eea67034c94a0d3c375e2b114366ad4419e6a6fa7ffc2ef9c6d3e0435d76dd584a7a1cbac23962fda7650b579e3
languageName: node
linkType: hard

"@humanfs/core@npm:^0.19.1":
version: 0.19.1
resolution: "@humanfs/core@npm:0.19.1"
Expand Down Expand Up @@ -1459,31 +1416,6 @@ __metadata:
languageName: node
linkType: hard

"@semantic-release/npm@npm:^13.1.1":
version: 13.1.1
resolution: "@semantic-release/npm@npm:13.1.1"
dependencies:
"@actions/core": "npm:^1.11.1"
"@semantic-release/error": "npm:^4.0.0"
aggregate-error: "npm:^5.0.0"
env-ci: "npm:^11.2.0"
execa: "npm:^9.0.0"
fs-extra: "npm:^11.0.0"
lodash-es: "npm:^4.17.21"
nerf-dart: "npm:^1.0.0"
normalize-url: "npm:^8.0.0"
npm: "npm:^11.6.2"
rc: "npm:^1.2.8"
read-pkg: "npm:^9.0.0"
registry-auth-token: "npm:^5.0.0"
semver: "npm:^7.1.2"
tempy: "npm:^3.0.0"
peerDependencies:
semantic-release: ">=20.1.0"
checksum: 10c0/4b74d46d4ee7ec0e4487b23fdb1a1dad7974a75e7dd8cccbab0238c4e513367927860069ea22678c9e4373418cf0279f26bbb668c4d4308ac68d92f1e14c1ebf
languageName: node
linkType: hard

"@semantic-release/npm@npm:^13.1.5":
version: 13.1.5
resolution: "@semantic-release/npm@npm:13.1.5"
Expand Down Expand Up @@ -4841,13 +4773,6 @@ __metadata:
languageName: node
linkType: hard

"normalize-url@npm:^8.0.0":
version: 8.1.0
resolution: "normalize-url@npm:8.1.0"
checksum: 10c0/e9b68db5f0264ce74fc083e2120b4a40fb3248e5dceec5f795bddcee0311b3613f858c9a65f258614fac2776b8e9957023bea8fe7299db1496b3cd1c75976cfe
languageName: node
linkType: hard

"normalize-url@npm:^9.0.0":
version: 9.0.1
resolution: "normalize-url@npm:9.0.1"
Expand Down Expand Up @@ -6698,15 +6623,6 @@ __metadata:
languageName: node
linkType: hard

"undici@npm:^5.25.4":
version: 5.29.0
resolution: "undici@npm:5.29.0"
dependencies:
"@fastify/busboy": "npm:^2.0.0"
checksum: 10c0/e4e4d631ca54ee0ad82d2e90e7798fa00a106e27e6c880687e445cc2f13b4bc87c5eba2a88c266c3eecffb18f26e227b778412da74a23acc374fca7caccec49b
languageName: node
linkType: hard

"undici@npm:^6.23.0, undici@npm:^6.25.0":
version: 6.26.0
resolution: "undici@npm:6.26.0"
Expand Down
Loading