setup-python/xml-naming-0.1.0.dep.yml at 8549b9f8f590ad24eab7482f36f6e1e24d34597b - setup-python - Homeinfra - Git

actions/setup-python

mirror of https://github.com/actions/setup-python.git synced 2026-08-04 19:18:30 +08:00

Haritha 8549b9f8f5

fix: resolve npm audit high severity vulnerabilities (#1347 )

- Upgrade fast-xml-parser to 5.10.1 (fixes GHSA-8r6m-32jq-jx6q)
- Add package.json override to force brace-expansion >=5.0.8 across
  all transitive dependencies (fixes GHSA-mh99-v99m-4gvg) without
  downgrading jest/ts-jest
- Refresh .licenses/npm cache to match updated dependency tree
- Rebuild dist/setup and dist/cache-save

npm audit now reports 0 vulnerabilities. Pre-existing test suite
failures (7 suites, ESM/jest teardown issue) verified unrelated to
this change - identical on unmodified main with node 24.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-08-03 11:18:19 -05:00

13 lines

233 B

YAML

Generated

Raw Blame History

 ---
 name: xml-naming
 version: 0.1.0
 type: npm
 summary: Validates XML name productions — Name, NCName, QName, NMToken, NMTokens —
   for XML 1.0 and 1.1
 homepage:
 license: mit
 licenses:
 - sources: README.md
   text: MIT
 notices: []