From 1e3fb954c7fd683c66bd13d100821065e7253663 Mon Sep 17 00:00:00 2001 From: jwfing Date: Mon, 4 May 2026 15:33:41 -0700 Subject: [PATCH] fix: add postcss override to ^8.5.10 to resolve CVE-2026-41305 Co-Authored-By: Claude Opus 4.7 (1M context) --- package-lock.json | 6 +++--- package.json | 1 + 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 40a065d..1ec0786 100644 --- a/package-lock.json +++ b/package-lock.json @@ -4987,9 +4987,9 @@ } }, "node_modules/postcss": { - "version": "8.5.8", - "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.8.tgz", - "integrity": "sha512-OW/rX8O/jXnm82Ey1k44pObPtdblfiuWnrd8X7GJ7emImCOstunGbXUpp7HdBrFQX6rJzn3sPT397Wp5aCwCHg==", + "version": "8.5.14", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.14.tgz", + "integrity": "sha512-SoSL4+OSEtR99LHFZQiJLkT59C5B1amGO1NzTwj7TT1qCUgUO6hxOvzkOYxD+vMrXBM3XJIKzokoERdqQq/Zmg==", "dev": true, "funding": [ { diff --git a/package.json b/package.json index a93cacc..af23744 100644 --- a/package.json +++ b/package.json @@ -64,6 +64,7 @@ "@hono/node-server": "^1.19.13", "hono": "^4.12.14", "lodash": "^4.18.0", + "postcss": "^8.5.10", "rollup": "^4.59.0" }, "devDependencies": {