From 5323200a356a53eba0cb58f68c981b696538adef Mon Sep 17 00:00:00 2001 From: Peter Downey Date: Thu, 29 Oct 2026 14:49:12 -0400 Subject: [PATCH] Override re2js with 2.8.7 for its denial-of-service advisory markdownlint 0.42.0 pins re2js to 2.8.6, so Dependabot cannot update it. Remove the override once a markdownlint release depends on 2.8.7 or later. Co-Authored-By: Claude Opus 5.5 --- CHANGELOG.md | 2 +- package-lock.json | 8 ++++---- package.json | 3 ++- 3 files changed, 7 insertions(+), 6 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1bb9b17..2f6f417 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -14,7 +14,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - The translation template names the GitHub issue tracker as its bug report address, in place of a WordPress.org support forum the plugin does not have, and its source references were refreshed - The code uses PHP 8 forms: short arrays, constructor property promotion, `readonly` classes and properties for the optimization and admin classes, and a null-coalescing assignment. Behavior is unchanged - A new Rector job fails when PHP 8.3 or Rector's dead-code, code-quality, type-declaration, or early-return rules would change the code; `rector.php` skips the rules that conflict with WordPress, each with its reason. PHPCS requires the short array syntax -- ESLint applies modern-JavaScript rules, and ESLint and Stylelint fail on a browser feature that WordPress's supported browsers lack. `package.json` overrides `smol-toml` and `katex` for their advisories; one advisory remains in `braces`, which the Markdown and CSS linters use, until a fixed release exists +- ESLint applies modern-JavaScript rules, and ESLint and Stylelint fail on a browser feature that WordPress's supported browsers lack. `package.json` overrides `smol-toml`, `katex`, and `re2js` (used by the Markdown linter) for their advisories ## [1.6.1] - 2026-10-09 diff --git a/package-lock.json b/package-lock.json index 72cfd77..02d4df8 100644 --- a/package-lock.json +++ b/package-lock.json @@ -7948,13 +7948,13 @@ "license": "MIT" }, "node_modules/re2js": { - "version": "2.8.6", - "resolved": "https://registry.npmjs.org/re2js/-/re2js-2.8.6.tgz", - "integrity": "sha512-xLgQil4kIUCrAzVk9fRSkxkFNwmygLFjVxXrLc65aE1F0+Zsb8rxumFBy4XKyvgMCTL6kilDq3EZ0piE2dP/Dg==", + "version": "2.8.7", + "resolved": "https://registry.npmjs.org/re2js/-/re2js-2.8.7.tgz", + "integrity": "sha512-bRSL/vn3KAmlGfGNoVpcsBXLaVvl6AbuvMMWbz0m3vBj60nj+p2/biozfBUOSBP+5XTduF6mr6IO/ZVjmqqkVQ==", "dev": true, "license": "MIT", "engines": { - "node": ">=18.0.0" + "node": ">=20.0.0" } }, "node_modules/react": { diff --git a/package.json b/package.json index 308e541..401bf86 100644 --- a/package.json +++ b/package.json @@ -31,6 +31,7 @@ ], "overrides": { "smol-toml": "1.9.1", - "katex": "0.19.0" + "katex": "0.19.0", + "re2js": "2.8.7" } }