mirror of
https://github.com/gradle/actions.git
synced 2026-06-14 07:30:41 +00:00
d8631e959e
The shell-quote, fast-xml-parser, fast-xml-builder and eslint>brace-expansion overrides added in #980 are no-ops: npm's natural resolution already lands on the same patched versions, so they upgrade nothing. The vulnerabilities were actually resolved by regenerating the lockfile. Verified `npm audit` still reports 0 vulnerabilities after removal. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>