Skip to content

v1.5.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Jul 07:54
v1.5.3
732563e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

1.5.3 (2026-07-02)

Bug Fixes

  • security: pin the transitive form-data dependency to 4.0.6 via an npm overrides entry, resolving the HIGH-severity CRLF-injection advisory GHSA-hmw2-7cc7-3qxx (affecting >=4.0.0 <4.0.6) that osv-scanner flagged in package-lock.json. form-data is a dev-only transitive dependency (via jest-environment-jsdom → jsdom) and is not part of the shipped plugin bundle; npm audit now reports 0 high/critical vulnerabilities. No plugin runtime changes from 1.5.2.
Assets 4
Loading