Files
sencho/backend
Anso e33eda3c38 fix: pin postcss override to clear backend audit vulnerability (#1701)
vitest pulls in vite, which pulls in postcss@8.5.15, flagged high
severity for a source-map path traversal advisory. Pin postcss via
npm overrides (same pattern already used for brace-expansion) so the
fix is scoped to the vulnerable transitive dependency instead of
letting a broad npm audit fix churn unrelated packages.
2026-07-24 15:21:22 -04:00
..