Skip to content

Commit 727a872

Browse files
bakerboy448claude
andcommitted
fix(devvit): override protobufjs to ^7.6.5
@devvit/protos pins protobufjs exactly (7.5.8 here, 7.6.3 in the latest release), so Dependabot security updates cannot resolve the open advisories. Force a patched 7.x through npm overrides. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 parent be0c505 commit 727a872

2 files changed

Lines changed: 9 additions & 13 deletions

File tree

‎devvit/package-lock.json‎

Lines changed: 6 additions & 13 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎devvit/package.json‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,5 +22,8 @@
2222
"devvit": "1.0.0",
2323
"typescript": "5.8.3",
2424
"vitest": "4.1.11"
25+
},
26+
"overrides": {
27+
"protobufjs": "^7.6.5"
2528
}
2629
}

0 commit comments

Comments
 (0)