Skip to content

Security - Update tmp#33745

Open
bit-byte0 wants to merge 1 commit into
DevExpress:26_1from
bit-byte0:security-tmp-26_1
Open

Security - Update tmp#33745
bit-byte0 wants to merge 1 commit into
DevExpress:26_1from
bit-byte0:security-tmp-26_1

Conversation

@bit-byte0
Copy link
Copy Markdown
Contributor

No description provided.

@bit-byte0 bit-byte0 self-assigned this May 27, 2026
Copilot AI review requested due to automatic review settings May 27, 2026 10:55
@bit-byte0 bit-byte0 added the 26_1 label May 27, 2026
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Security update bumping the tmp package via a pnpm override to >=0.2.6 to remediate a known vulnerability in older versions. The override is widened from tmp@<=0.2.3 to tmp@<0.2.6, ensuring all transitive consumers (devextreme-exceljs-fork, karma, nx, testcafe) resolve to tmp@0.2.6.

Changes:

  • Update pnpm override for tmp from tmp@<=0.2.3: ^0.2.4 to tmp@<0.2.6: '>=0.2.6'.
  • Regenerate lockfile so all transitive tmp references collapse to a single 0.2.6 resolution.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Widens the tmp pnpm override to force >=0.2.6 across the dependency graph.
pnpm-lock.yaml Removes tmp@0.2.4 / tmp@0.2.5 entries and updates all consumers to tmp@0.2.6.
Files not reviewed (1)
  • pnpm-lock.yaml: Language not supported

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants