From ac0fc8952492322c4417b82610157871174d5779 Mon Sep 17 00:00:00 2001 From: Jonathan Norris Date: Mon, 28 Sep 2026 09:47:35 -0400 Subject: [PATCH 1/2] chore: resolve open dependabot security alerts - image-size -> 2.0.4 (high, alerts #277, #278) --- package.json | 3 ++- yarn.lock | 8 ++++---- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index b3b2b135..71033e5a 100644 --- a/package.json +++ b/package.json @@ -110,6 +110,7 @@ "postcss-selector-parser@^6.1.0": "^6.1.3", "postcss-selector-parser@^6.1.1": "^6.1.3", "postcss-selector-parser@^6.1.2": "^6.1.3", - "postcss-selector-parser@^7.0.0": "^7.1.3" + "postcss-selector-parser@^7.0.0": "^7.1.3", + "image-size": "^2.0.3" } } diff --git a/yarn.lock b/yarn.lock index b30334dc..e030ce36 100644 --- a/yarn.lock +++ b/yarn.lock @@ -8484,12 +8484,12 @@ __metadata: languageName: node linkType: hard -"image-size@npm:^2.0.2": - version: 2.0.2 - resolution: "image-size@npm:2.0.2" +"image-size@npm:^2.0.3": + version: 2.0.4 + resolution: "image-size@npm:2.0.4" bin: image-size: bin/image-size.js - checksum: 10/d15203279fe7ada01252d8c56ba97516385d6d5ac2cbf3d734580fc88db4f5272b9b3f7f378ad63abc7d06b5500c43b90d9f84626e2bda1cab403c16eb469592 + checksum: 10/a9db27f55c77869fad3420e6e614b64ab1af3fb425e4c3136c5dbb4fefd9346864fa69a1ff1706acab54ea766b01fb015cd2cbed90b122d2dbaa20f785a90e2f languageName: node linkType: hard From 266a21e2e705f8d3d016d093ce6f9c801a3b4a7a Mon Sep 17 00:00:00 2001 From: Jonathan Norris Date: Mon, 28 Sep 2026 09:52:33 -0400 Subject: [PATCH 2/2] chore: pin image-size resolution to 2.0.4 per copilot review --- package.json | 2 +- yarn.lock | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 71033e5a..9a996ad5 100644 --- a/package.json +++ b/package.json @@ -111,6 +111,6 @@ "postcss-selector-parser@^6.1.1": "^6.1.3", "postcss-selector-parser@^6.1.2": "^6.1.3", "postcss-selector-parser@^7.0.0": "^7.1.3", - "image-size": "^2.0.3" + "image-size": "^2.0.4" } } diff --git a/yarn.lock b/yarn.lock index e030ce36..c2f25d60 100644 --- a/yarn.lock +++ b/yarn.lock @@ -8484,7 +8484,7 @@ __metadata: languageName: node linkType: hard -"image-size@npm:^2.0.3": +"image-size@npm:^2.0.4": version: 2.0.4 resolution: "image-size@npm:2.0.4" bin: