From eb51739b1457aa4ef6fa164125dead4726642679 Mon Sep 17 00:00:00 2001
From: "dd-octo-sts-4caf68[bot]"
 <266798483+dd-octo-sts-4caf68[bot]@users.noreply.github.com>
Date: Tue, 13 Oct 2026 19:27:27 +0000
Subject: [PATCH] ADMS: vuln patch: source-map-js, tinypool [package.json]

Co-authored-by: gh-worker-campaigns-3e9aa4[bot] <244854796+gh-worker-campaigns-3e9aa4[bot]@users.noreply.github.com>
---
 package.json |  3 ++-
 yarn.lock    | 14 +++++++-------
 2 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/package.json b/package.json
index 1e480588..e3a3ee25 100644
--- a/package.json
+++ b/package.json
@@ -44,6 +44,7 @@
     "js-yaml": "^4.3.2",
     "lodash": "^4.18.1",
     "brace-expansion": "^5.0.9",
-    "undici": "^7.28.0"
+    "undici": "^7.28.0",
+    "tinypool@npm:2.1.0": "npm:^2.1.2"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index 0bec6d08..fa5d78e4 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -6748,9 +6748,9 @@ __metadata:
   linkType: hard
 
 "source-map-js@npm:^1.2.1":
-  version: 1.2.1
-  resolution: "source-map-js@npm:1.2.1"
-  checksum: 10c0/7bda1fc4c197e3c6ff17de1b8b2c20e60af81b63a52cb32ec5a5d67a20a7d42651e2cb34ebe93833c5a2a084377e17455854fee3e21e7925c64a51b6a52b0faf
+  version: 1.2.2
+  resolution: "source-map-js@npm:1.2.2"
+  checksum: 10c0/d5d6dec62266834f83dd4f8a2606a196fb1a006ca5d53b0ef80ee513b7eba2f4e2ae241f4bc129ae7e9b80dea24f6e3d92b446b7e6e96be7653cab8888168a94
   languageName: node
   linkType: hard
 
@@ -7057,10 +7057,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tinypool@npm:2.1.0":
-  version: 2.1.0
-  resolution: "tinypool@npm:2.1.0"
-  checksum: 10c0/9fb1c760558c6264e0f4cfde96a63b12450b43f1730fbe6274aa24ddbdf488745c08924d0dea7a1303b47d555416a6415f2113898c69b6ecf731e75ac95238a5
+"tinypool@npm:^2.1.2":
+  version: 2.2.0
+  resolution: "tinypool@npm:2.2.0"
+  checksum: 10c0/93b2ce0e0cf1a83f003f577d05b0f9860d490d9c082d30687134f4724ea67501847a308c659f658f3cfa545a4cc4b3cd8a8d100d715245988989be6fb0acdcc4
   languageName: node
   linkType: hard