itlxrd/psysonic
1
0
Fork 0
mirror of https://github.com/kilyabin/psysonic.git synced 2026-07-21 22:15:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(deps): bump transitive form-data to 4.0.6 (GHSA-hmw2-7cc7-3qxx) (#1118)

Browse Source 
* fix(deps): bump transitive form-data to 4.0.6 (GHSA-hmw2-7cc7-3qxx)

Close Dependabot alert #18: axios pulls form-data for multipart bodies;
lockfile now pins the patched 4.0.6 release (CVE-2026-12143).

* docs: changelog and credits for form-data security bump (PR #1118)

* revert: drop settingsCredits entry for form-data bump

* chore(nix): sync npmDepsHash with package-lock.json

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
This commit is contained in:
cucadmuh
2026-06-17 19:10:52 +03:00
committed by GitHub
parent 44d373d7bb
commit ccb2d11fc4
3 changed files with 15 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nix/upstream-sources.json
+1 -1
View File
@@ -1,3 +1,3 @@
{
"npmDepsHash": "sha256-9S/oq66FBCHK7tj5fbcPPawDeETpbSC2JDqU66Ln6aQ="
"npmDepsHash": "sha256-oYSc00guRNrZhWTkRXYlqwSeVZ7tkz+/rA+XOF3NUvw="
}