Commit b0caca5
committed
fix(deps): surgical yarn.lock pin for get-func-name CVE-2023-43646
Pin get-func-name@^2.0.0 to 2.0.2 in solidity/ecdsa and
solidity/random-beacon yarn.lock files using the resolved URL and
integrity hash from the yarn registry.
The npm `overrides` field in package.json is ignored by Yarn Classic
(1.22.x); a direct yarn.lock pin is required instead.
Note: token-stakedrop/merkle-distributor yarn.lock contains the same
pattern but is a git submodule of keep-network/merkle-distributor
where push access is required. That fix needs a separate PR.1 parent 58f8656 commit b0caca5
2 files changed
Lines changed: 6 additions & 6 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
6394 | 6394 | | |
6395 | 6395 | | |
6396 | 6396 | | |
6397 | | - | |
6398 | | - | |
6399 | | - | |
| 6397 | + | |
| 6398 | + | |
| 6399 | + | |
6400 | 6400 | | |
6401 | 6401 | | |
6402 | 6402 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5789 | 5789 | | |
5790 | 5790 | | |
5791 | 5791 | | |
5792 | | - | |
5793 | | - | |
5794 | | - | |
| 5792 | + | |
| 5793 | + | |
| 5794 | + | |
5795 | 5795 | | |
5796 | 5796 | | |
5797 | 5797 | | |
| |||
0 commit comments