mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-07-26 11:49:16 +00:00
e33eda3c38
vitest pulls in vite, which pulls in postcss@8.5.15, flagged high severity for a source-map path traversal advisory. Pin postcss via npm overrides (same pattern already used for brace-expansion) so the fix is scoped to the vulnerable transitive dependency instead of letting a broad npm audit fix churn unrelated packages.