Skip to content

chore(deps): resolve sharp to 0.35.4 - #177

Draft
schematic-orbit wants to merge 1 commit into
mainfrom
orbit-security-2026-09-09-root
Draft

chore(deps): resolve sharp to 0.35.4#177
schematic-orbit wants to merge 1 commit into
mainfrom
orbit-security-2026-09-09-root

Conversation

@schematic-orbit

Copy link
Copy Markdown
Contributor

Adds a sharp resolution so the copy miniflare pins exactly (sharp "0.35.2") moves to the patched release. Every miniflare 4.x release, up to the current 4.20260730.0, still pins 0.35.2, so bumping the direct dependency would not clear it.

GHSA Package Severity Version How
GHSA-rgj7-g3m4-5g8c sharp high 0.35.2 → 0.35.4 yarn resolution

@bpapillon bpapillon self-assigned this Sep 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants