Resolve GHSA-pmh2-wpjm-fj45 (#6812)

iTwin · Jun 8, 2024 · 2ac0667 · 2ac0667
1 parent 2383ca0
commit 2ac0667
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 8 deletions.
diff --git a/common/changes/@itwin/core-common/mike-resolve-mysql2_2024-06-08-00-07.json b/common/changes/@itwin/core-common/mike-resolve-mysql2_2024-06-08-00-07.json
@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@itwin/core-common",
+      "comment": "udpate mysql2",
+      "type": "none"
+    }
+  ],
+  "packageName": "@itwin/core-common"
+}
diff --git a/common/config/rush/pnpm-config.json b/common/config/rush/pnpm-config.json
@@ -6,7 +6,7 @@
     "ignoreMissing": ["@babel/core", "@types/node", "@typescript-eslint/parser"]
   },
   "globalOverrides": {
-    "mysql2": "^3.9.7" // /~https://github.com/advisories/GHSA-4rch-2fh8-94vw>azurite>mysql2
+    "mysql2": "^3.9.8" // /~https://github.com/advisories/GHSA-4rch-2fh8-94vw>azurite>mysql2, /~https://github.com/advisories/GHSA-pmh2-wpjm-fj45
   },
   // A list of temporary advisories excluded from the High and Critical list.
   // Warning this should only be used as a temporary measure to avoid build failures

diff --git a/common/config/rush/pnpm-lock.yaml b/common/config/rush/pnpm-lock.yaml