From 847559167b8952395e236a812728a8a8160400dc Mon Sep 17 00:00:00 2001 From: Charly Gomez Date: Fri, 6 Nov 2026 12:40:05 +0100 Subject: [PATCH] chore(deps): Bump path-to-regexp to fix CVE-2026-4867 Bumps path-to-regexp 0.1.12 -> 0.1.13 (within express 4's ~0.1.12 range). Fixes Dependabot alert: - https://github.com/getsentry/sentry-javascript/security/dependabot/3189 Co-Authored-By: Claude Opus 5.5 --- pnpm-lock.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index de50736bca0c..e1535b88d501 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -15626,8 +15626,8 @@ packages: resolution: {integrity: sha512-1pTbQqH1wIwMi/eleQ5leFTTCkzFsPcgXNjwOA8YGGW/W4/kHT3dssE7Z6NH+zuqNLOzOB0uaD61yl7cAcVhgg==} engines: {node: 18 || 20 || >=22} - path-to-regexp@0.1.12: - resolution: {integrity: sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==} + path-to-regexp@0.1.13: + resolution: {integrity: sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==} path-to-regexp@1.9.0: resolution: {integrity: sha512-xIp7/apCFJuUHdDLWe8O1HIkb0kQrOMb/0u6FXQjemHn/ii5LrIzU6bdECnsiTF/GjZkMEKg1xdiZwNqDYlZ6g==} @@ -32005,7 +32005,7 @@ snapshots: methods: 1.1.2 on-finished: 2.4.1 parseurl: 1.3.3 - path-to-regexp: 0.1.12 + path-to-regexp: 0.1.13 proxy-addr: 2.0.8 qs: 6.14.2 range-parser: 1.2.1 @@ -36875,7 +36875,7 @@ snapshots: lru-cache: 11.4.0 minipass: 7.1.3 - path-to-regexp@0.1.12: {} + path-to-regexp@0.1.13: {} path-to-regexp@1.9.0: dependencies: