Skip to content

Commit 3890e9f

Browse files
amanstepamanstep
committed
fix: fixed vulnerability
1 parent 1aeea8f commit 3890e9f

2 files changed

Lines changed: 56 additions & 73 deletions

File tree

‎eval/osv-scanner.toml‎

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,11 @@
11
[[IgnoredVulns]]
2-
id = "GHSA-g7r4-m6w7-qqqr"
3-
reason = "esbuild@0.28.0 is a transitive dependency of braintrust; ExperimentSummary is a type-only import erased at bundle time, so braintrust's esbuild is never exercised"
2+
id = "GHSA-82fw-gwwq-j7x9"
3+
reason = "dev dependency (@vitest/mocker, vitest) — not bundled into the action runtime"
44

55
[[IgnoredVulns]]
6-
id = "GHSA-w5hq-g745-h8pq"
7-
reason = "uuid@9.0.1 is a transitive dependency of @braintrust/core; only uuid.parse/stringify are called (not the vulnerable generators), and this action only uses capitalize() which has no uuid code path"
6+
id = "GHSA-5gmw-xhrv-c9v3"
7+
reason = "dev dependency (tinypool) — not bundled into the action runtime"
8+
9+
[[IgnoredVulns]]
10+
id = "GHSA-85c8-ppgw-ccpr"
11+
reason = "dev dependency (tinypool) — not bundled into the action runtime"

‎eval/package-lock.json‎

Lines changed: 48 additions & 69 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)