scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-10-13 03:59:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 103

fix(ui): restore security override pins clobbered by the date-fns override

Browse source 
The date-fns 4 override was written by replacing the whole overrides
object, dropping the ten security pins (prismjs, js-yaml, glob,
minimatch, lodash, ws, braces, axios, postcss, esbuild) that keep
patched versions in the lockfile; osv-scan caught the vulnerable
versions resurfacing. Restores the pins alongside date-fns and
regenerates the lockfile.
This commit is contained in:
ryan-crabbe-berri 2026-07-06 09:21:17 -07:00
parent 5d2615856d
commit f06ada2284
2 changed files with 551 additions and 1178 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1719
ui/litellm-dashboard/package-lock.json generated
View file

File diff suppressed because it is too large Load diff

10
ui/litellm-dashboard/package.json
View file

@ -87,6 +87,16 @@
"vitest": "3.2.6"
},
"overrides": {
"prismjs": "1.30.0",
"js-yaml": "4.2.0",
"glob": "13.0.0",
"minimatch": "10.2.4",
"lodash": "4.18.1",
"ws": "8.21.0",
"braces": "3.0.3",
"axios": "1.13.6",
"postcss": "8.5.13",
"esbuild": "0.28.1",
"date-fns": "^4.4.0"
},
"engines": {