Merge pull request #519 from VirtualLiveLab/avoid-prettier-config-supply-chain-atk

sushichan044 · web-flow · commit 8ac8de32bcb0 · 2025-07-20T20:00:07.000+09:00
fix(security): update eslint-config-prettier to latest to avoid supply chain attack
diff --git a/.changeset/loud-dolphins-guess.md b/.changeset/loud-dolphins-guess.md
@@ -0,0 +1,5 @@
+---
+"@virtual-live-lab/eslint-config": patch
+---
+
+fix(security): update eslint-config-prettier to latest to avoid supply chain attack
diff --git a/packages/eslint-config/package.json b/packages/eslint-config/package.json
@@ -44,7 +44,7 @@
     "astrojs-compiler-sync": "1.1.1",
     "defu": "6.1.4",
     "eslint-config-flat-gitignore": "2.1.0",
-    "eslint-config-prettier": "10.1.5",
+    "eslint-config-prettier": "10.1.8",
     "eslint-plugin-astro": "1.3.1",
     "eslint-plugin-jsx-a11y": "6.10.2",
     "eslint-plugin-perfectionist": "4.15.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +"@virtual-live-lab/eslint-config": patch
 +---
++
 +fix(security): update eslint-config-prettier to latest to avoid supply chain attack