Skip to content

address simple-git dependency vulnerability#8358

Merged
etrepum merged 1 commit intomainfrom
fix/simple-git-security-vulnerability
Apr 15, 2026
Merged

address simple-git dependency vulnerability#8358
etrepum merged 1 commit intomainfrom
fix/simple-git-security-vulnerability

Conversation

@potatowagon
Copy link
Copy Markdown
Contributor

Package Dependency
Repository: facebook/lexical
Manifest file: pnpm-lock.yaml
Package name: simple-git
Affected versions: < 3.32.0
Fixed in version: 3.32.0

@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 15, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
lexical Ready Ready Preview, Comment Apr 15, 2026 7:23am
lexical-playground Ready Ready Preview, Comment Apr 15, 2026 7:23am

Request Review

@meta-cla meta-cla Bot added the CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. label Apr 15, 2026
@potatowagon potatowagon marked this pull request as draft April 15, 2026 07:23
@potatowagon potatowagon marked this pull request as ready for review April 15, 2026 08:26
@etrepum etrepum added this pull request to the merge queue Apr 15, 2026
Merged via the queue into main with commit dfedcae Apr 15, 2026
41 checks passed
@etrepum etrepum mentioned this pull request Apr 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants