From 974b210efe6d682104a2bc3c76098ffccc6cabf5 Mon Sep 17 00:00:00 2001
From: "gh-worker-campaigns-3e9aa4[bot]"
 <244854796+gh-worker-campaigns-3e9aa4[bot]@users.noreply.github.com>
Date: Mon, 12 Oct 2026 08:51:08 +0000
Subject: [PATCH] =?UTF-8?q?ADMS:=20vuln=20sprintf-js=20(minor=20=E2=86=92?=
 =?UTF-8?q?=201.1.3)=20[package.json]?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 package.json | 3 +++
 yarn.lock    | 8 ++++----
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/package.json b/package.json
index 725a584..4127c27 100644
--- a/package.json
+++ b/package.json
@@ -69,5 +69,8 @@
         "lint": "eslint --ext .js,.ts lib/ test/",
         "fix": "yarn lint --fix",
         "build": "yarn tsc"
+    },
+    "resolutions": {
+        "sprintf-js": "^1.1.3"
     }
 }
diff --git a/yarn.lock b/yarn.lock
index 4570084..af895c7 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4152,10 +4152,10 @@ spdx-license-ids@^3.0.0:
   resolved "https://registry.yarnpkg.com/spdx-license-ids/-/spdx-license-ids-3.0.17.tgz#887da8aa73218e51a1d917502d79863161a93f9c"
   integrity sha512-sh8PWc/ftMqAAdFiBu6Fy6JUOYjqDJBJvIhpfDMyHrr0Rbp5liZqd4TjtQ/RgfLjKFZb+LMx5hpml5qOWy0qvg==
 
-sprintf-js@~1.0.2:
-  version "1.0.3"
-  resolved "https://registry.yarnpkg.com/sprintf-js/-/sprintf-js-1.0.3.tgz#04e6926f662895354f3dd015203633b857297e2c"
-  integrity sha1-BOaSb2YolTVPPdAVIDYzuFcpfiw=
+sprintf-js@^1.1.3, sprintf-js@~1.0.2:
+  version "1.1.3"
+  resolved "https://registry.yarnpkg.com/sprintf-js/-/sprintf-js-1.1.3.tgz#4914b903a2f8b685d17fdf78a70e917e872e444a"
+  integrity sha512-Oo+0REFV59/rz3gfJNKQiBlwfHaSESl1pcGyABQsnnIfWOFt6JNj5gCog2U6MLZ//IGYD+nA8nI+mTShREReaA==
 
 stack-utils@^2.0.3:
   version "2.0.5"