update query-string (#1319)

FormidableLabs · Mar 11, 2024 · bdd4999 · bdd4999
1 parent 8f4e74e
commit bdd4999
Show file tree

Hide file tree

Showing 4 changed files with 14 additions and 9 deletions.
diff --git a/.changeset/four-trainers-fly.md b/.changeset/four-trainers-fly.md
@@ -0,0 +1,5 @@
+---
+'spectacle': patch
+---
+
+security update: update query-string to fix decode-uri-component vulnerability in 0.2.0
diff --git a/examples/one-page/index.html b/examples/one-page/index.html
@@ -22,7 +22,7 @@
           "mdast-zone": "https://esm.sh/v121/mdast-zone@^4.0.0?deps=react@18.2.0",
           "merge-anything": "https://esm.sh/v121/merge-anything@^3.0.3?deps=react@18.2.0",
           "mousetrap": "https://esm.sh/v121/mousetrap@^1.6.5?deps=react@18.2.0",
-          "query-string": "https://esm.sh/v121/query-string@^7.1.1?deps=react@18.2.0",
+          "query-string": "https://esm.sh/v121/query-string@^7.1.3?deps=react@18.2.0",
           "react": "https://esm.sh/v121/react@18.2.0?deps=react@18.2.0",
           "react/jsx-runtime": "https://esm.sh/v121/react@18.2.0/jsx-runtime?deps=react@18.2.0",
           "react-dom": "https://esm.sh/v121/react-dom@>=18.0.0?deps=react@18.2.0",

diff --git a/packages/spectacle/package.json b/packages/spectacle/package.json
@@ -24,7 +24,7 @@
     "mdast-zone": "^4.0.0",
     "merge-anything": "^3.0.3",
     "mousetrap": "^1.6.5",
-    "query-string": "^7.1.1",
+    "query-string": "^7.1.3",
     "react-fast-compare": "^3.2.0",
     "react-is": "^18.1.0",
     "react-spring": "^9.5.5",

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml