From e5932e9839a5bd90a0716e907a8b7cb789a34f3d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 30 Jan 2026 05:14:52 +0000 Subject: [PATCH 1/2] fix: workspaces/libnpmorg/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TAR-15032660 - https://snyk.io/vuln/SNYK-JS-TAR-15127355 - https://snyk.io/vuln/SNYK-JS-UNDICI-14943963 --- workspaces/libnpmorg/package.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/workspaces/libnpmorg/package.json b/workspaces/libnpmorg/package.json index d60d03a5c7203..3fef9c81d09f9 100644 --- a/workspaces/libnpmorg/package.json +++ b/workspaces/libnpmorg/package.json @@ -28,10 +28,10 @@ ], "devDependencies": { "@npmcli/eslint-config": "^4.0.0", - "@npmcli/template-oss": "4.21.3", + "@npmcli/template-oss": "4.29.0", "minipass": "^7.0.4", "nock": "^13.3.3", - "tap": "^18.0.0" + "tap": "^21.1.1" }, "repository": { "type": "git", @@ -42,7 +42,7 @@ "homepage": "https://npmjs.com/package/libnpmorg", "dependencies": { "aproba": "^2.0.0", - "npm-registry-fetch": "^16.0.0" + "npm-registry-fetch": "^18.0.1" }, "engines": { "node": "^16.14.0 || >=18.0.0" From f0d4e639cbd23683bdc7df30414f916d6d3a58bd Mon Sep 17 00:00:00 2001 From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com> Date: Fri, 30 Jan 2026 17:01:31 +0000 Subject: [PATCH 2/2] fix: workspaces/libnpmorg/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TAR-15032660 - https://snyk.io/vuln/SNYK-JS-TAR-15127355 - https://snyk.io/vuln/SNYK-JS-UNDICI-14943963