Merge pull request #457 from roggervalf/minimatch

roggervalf · web-flow · commit b63ed12e8793 · 2026-02-24T17:25:31.000-08:00
fix(deps): upgrade @typescript-eslint/utils to fix minimatch vulnerability
diff --git a/common/changes/eslint-plugin-tsdoc/minimatch_2026-02-23-03-19.json b/common/changes/eslint-plugin-tsdoc/minimatch_2026-02-23-03-19.json
@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "eslint-plugin-tsdoc",
+      "comment": "Update the `@typescript-eslint/utils` dependency to `~8.56.0` to address CVE-2026-26996.",
+      "type": "patch"
+    }
+  ],
+  "packageName": "eslint-plugin-tsdoc"
+}
diff --git a/common/config/rush/pnpm-lock.yaml b/common/config/rush/pnpm-lock.yaml
diff --git a/eslint-plugin/package.json b/eslint-plugin/package.json
@@ -29,7 +29,7 @@
   "dependencies": {
     "@microsoft/tsdoc-config": "workspace:*",
     "@microsoft/tsdoc": "workspace:*",
-    "@typescript-eslint/utils": "~8.46.0"
+    "@typescript-eslint/utils": "~8.56.0"
   },
   "devDependencies": {
     "tsdoc-build-rig": "workspace:*",
