From 62867648a7b6286225d9a945866d99cff54327a9 Mon Sep 17 00:00:00 2001 From: harsh mahajan Date: Wed, 22 Jul 2026 16:15:51 +0530 Subject: [PATCH] fix: bump immutable override to clear high-severity audit bun audit --audit-level high was failing on immutable (pulled in via sass) for two DoS advisories (32-bit trie overflow, hash-collision complexity). Bumped the override from ^5.1.5 to ^5.1.8. --- bun.lock | 4 ++-- package.json | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/bun.lock b/bun.lock index 8db6da9fae..664450fbeb 100644 --- a/bun.lock +++ b/bun.lock @@ -94,7 +94,7 @@ "cookie": "^0.7.0", "devalue": "^5.8.1", "flatted": "^3.4.2", - "immutable": "^5.1.5", + "immutable": "^5.1.8", "js-yaml": "^4.3.0", "minimatch": "10.2.3", "picomatch": "^4.0.4", @@ -959,7 +959,7 @@ "ignore": ["ignore@6.0.2", "", {}, "sha512-InwqeHHN2XpumIkMvpl/DCJVrAHgCsG5+cn1XlnLWGwtZBm8QJfSusItfrwx81CTp5agNZqpKU2J/ccC5nGT4A=="], - "immutable": ["immutable@5.1.5", "", {}, "sha512-t7xcm2siw+hlUM68I+UEOK+z84RzmN59as9DZ7P1l0994DKUWV7UXBMQZVxaoMSRQ+PBZbHCOoBt7a2wxOMt+A=="], + "immutable": ["immutable@5.1.9", "", {}, "sha512-m8nVez3rwrgmWxtLMt1ZYXB2Lv7OKYn/disyxAlSDYAlKSlFoPPfIAmAM/M5xqL4m4C/wAPw7S2/CNaUii1Hxg=="], "import-fresh": ["import-fresh@3.3.1", "", { "dependencies": { "parent-module": "^1.0.0", "resolve-from": "^4.0.0" } }, "sha512-TR3KfrTZTYLPB6jUjfx6MF9WcWrHL9su5TObK4ZkYgBdWKPOFoSoQIdEuTuR82pmtxH2spWG9h6etwfr1pLBqQ=="], diff --git a/package.json b/package.json index ccde1e9adc..38942e9616 100644 --- a/package.json +++ b/package.json @@ -106,7 +106,7 @@ "minimatch": "10.2.3", "brace-expansion": ">=5.0.7", "js-yaml": "^4.3.0", - "immutable": "^5.1.5", + "immutable": "^5.1.8", "flatted": "^3.4.2", "devalue": "^5.8.1", "yaml": "^1.10.3",