Skip to content

Commit 208322b

Browse files
committed
package.json(fix[resolutions]) Pin ranges to prevent version drift
why: Bugbot review flagged unbounded >= ranges that cross major versions and risk future drift on yarn install without --frozen-lockfile. what: - Replace all >= resolution ranges with ^ caret ranges - Pin cross-major resolutions to their actual resolved major: js-yaml ^4.1.1, http-proxy-middleware ^3.0.5, debug ^4.4.3, diff ^8.0.3, minimatch ^10.1.2, brace-expansion ^4.0.1 - Same-major resolutions stay at minimum patched version: webpack ^5.104.1, lodash ^4.17.23, qs ^6.14.1, etc. - No lockfile changes: all resolved versions satisfy new ranges Verification: yarn install --frozen-lockfile passes, yarn lint passes
1 parent 3fc4dbc commit 208322b

1 file changed

Lines changed: 16 additions & 16 deletions

File tree

package.json

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -62,22 +62,22 @@
6262
},
6363
"resolutions": {
6464
"tar": "^7.5.3",
65-
"webpack": ">=5.104.1",
66-
"lodash": ">=4.17.23",
67-
"lodash-es": ">=4.17.23",
68-
"qs": ">=6.14.1",
69-
"node-forge": ">=1.3.2",
70-
"js-yaml": ">=3.14.2",
71-
"tmp": ">=0.2.4",
72-
"on-headers": ">=1.1.0",
73-
"webpack-dev-server": ">=5.2.1",
74-
"http-proxy-middleware": ">=2.0.8",
75-
"cross-spawn": ">=7.0.5",
76-
"brace-expansion": ">=2.0.2",
77-
"debug": ">=3.2.7",
78-
"diff": ">=4.0.4",
79-
"minimatch": ">=3.0.5",
80-
"@babel/helpers": ">=7.26.10"
65+
"webpack": "^5.104.1",
66+
"lodash": "^4.17.23",
67+
"lodash-es": "^4.17.23",
68+
"qs": "^6.14.1",
69+
"node-forge": "^1.3.2",
70+
"js-yaml": "^4.1.1",
71+
"tmp": "^0.2.4",
72+
"on-headers": "^1.1.0",
73+
"webpack-dev-server": "^5.2.1",
74+
"http-proxy-middleware": "^3.0.5",
75+
"cross-spawn": "^7.0.5",
76+
"brace-expansion": "^4.0.1",
77+
"debug": "^4.4.3",
78+
"diff": "^8.0.3",
79+
"minimatch": "^10.1.2",
80+
"@babel/helpers": "^7.26.10"
8181
},
8282
"scripts": {
8383
"build:dist": "node ./scripts/build-dist.mjs",

0 commit comments

Comments
 (0)