From dbc4c07b30bb56526812f25bb1c7c9eab2dc20be Mon Sep 17 00:00:00 2001 From: Charly Gomez Date: Tue, 17 Mar 2026 16:45:24 +0100 Subject: [PATCH] fix(deps): bump devalue 5.6.3 to 5.6.4 to fix CVE-2026-30226 Fixes Dependabot alerts #1142 and #1145. Co-Authored-By: Claude Sonnet 4.6 --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index 8b037c404496..d14dd89f2d6e 100644 --- a/yarn.lock +++ b/yarn.lock @@ -14756,9 +14756,9 @@ devalue@^4.3.2: integrity sha512-UH8EL6H2ifcY8TbD2QsxwCC/pr5xSwPvv85LrLXVihmHVC3T3YqTCIwnR5ak0yO1KYqlxrPVOA/JVZJYPy2ATg== devalue@^5.1.1, devalue@^5.6.2, devalue@^5.6.3: - version "5.6.3" - resolved "https://registry.yarnpkg.com/devalue/-/devalue-5.6.3.tgz#fee7b50bf072f4a4cdf18d1f27de3ce92131f699" - integrity sha512-nc7XjUU/2Lb+SvEFVGcWLiKkzfw8+qHI7zn8WYXKkLMgfGSHbgCEaR6bJpev8Cm6Rmrb19Gfd/tZvGqx9is3wg== + version "5.6.4" + resolved "https://registry.npmjs.org/devalue/-/devalue-5.6.4.tgz" + integrity sha512-Gp6rDldRsFh/7XuouDbxMH3Mx8GMCcgzIb1pDTvNyn8pZGQ22u+Wa+lGV9dQCltFQ7uVw0MhRyb8XDskNFOReA== devlop@^1.0.0: version "1.1.0"