From dffdb814896b93e66989ad1960183ea7708d923c Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Wed, 7 Oct 2026 14:13:56 +0000 Subject: [PATCH] build(deps): override katex 0.18.2 and smol-toml 1.9.0 The smol-toml 1.7.1 pin from alert #3 still matches GHSA-r4xh-jqrq-34v2, and katex 0.16.47 is below GHSA-238p-pmpm-9mq7. Force the patched releases through npm overrides so markdownlint-cli2 0.23.3 stays put. Co-authored-by: John Osumi --- package-lock.json | 12 ++++++------ package.json | 3 ++- 2 files changed, 8 insertions(+), 7 deletions(-) diff --git a/package-lock.json b/package-lock.json index 3124cdc..2868642 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1059,9 +1059,9 @@ } }, "node_modules/katex": { - "version": "0.16.47", - "resolved": "https://registry.npmjs.org/katex/-/katex-0.16.47.tgz", - "integrity": "sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg==", + "version": "0.18.2", + "resolved": "https://registry.npmjs.org/katex/-/katex-0.18.2.tgz", + "integrity": "sha512-3snve4y0SXTMequLim1FMiPvLGElySam0blN5xQZBqEY3lOJz1TnuaaiugnBZBqHzlSAGmFTYL7MCQkORuLKCA==", "dev": true, "funding": [ "https://opencollective.com/katex", @@ -1991,9 +1991,9 @@ } }, "node_modules/smol-toml": { - "version": "1.7.1", - "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.7.1.tgz", - "integrity": "sha512-PPlsspAZ4jbMBu5DMFhfUGDQLu/vrL4SyBROVS37x8ynnVmFIs1VPBz1Co8Xks3TvpIaZXmU85y4DrQ+UyVFoQ==", + "version": "1.9.0", + "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.9.0.tgz", + "integrity": "sha512-hpd+HLON7HdZXqYchMM/+LaTTbdK0AU3NngIJ4KVyWbY9bfQqdL9cD+4yf6dUoU2Ap4VsU0JkQi6FxAI1B2mXQ==", "dev": true, "license": "BSD-3-Clause", "engines": { diff --git a/package.json b/package.json index 359246d..0605980 100644 --- a/package.json +++ b/package.json @@ -24,7 +24,8 @@ }, "overrides": { "uuid": "11.1.1", - "smol-toml": "1.7.1" + "katex": "0.18.2", + "smol-toml": "1.9.0" }, "devDependencies": { "markdownlint-cli2": "0.23.3"