From cd3dd702c3a7d2b0f42c63b85cb221b8a8142cc3 Mon Sep 17 00:00:00 2001 From: "Claude (Webhook)" Date: Mon, 12 Oct 2026 20:16:33 +0300 Subject: [PATCH] fix(deps): bump source-map-js to 1.2.2 (GHSA-68fv-2mgg-jv7q) The scheduled Security workflow (run #231, Dependency Audit) failed on npm audit: source-map-js 1.0.0-1.2.1 has a high-severity event-loop DoS via indexed source-map section offsets. It is a dev-only transitive dependency; bump the lockfile to the patched 1.2.2. Co-Authored-By: Claude Opus 5.5 --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 36da8fb..f02790f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -3136,9 +3136,9 @@ } }, "node_modules/source-map-js": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz", - "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==", + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz", + "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==", "dev": true, "license": "BSD-3-Clause", "engines": {