Skip to content

chore(deps): bump smol-toml to >=1.9.0 - #21401

Open
mozilla-blender[bot] wants to merge 1 commit into
mainfrom
blender/security-bump-smol-toml
Open

mozilla-blender[bot] wants to merge 1 commit into
mainfrom
blender/security-bump-smol-toml

Conversation

@mozilla-blender

Copy link
Copy Markdown
Contributor

Summary

Resolves a flagged transitive dependency advisory.

This is a transitive dependency update. Only yarn.lock (and possibly package.json) changed.


Created by BLEnder investigation via BLEnder

@mozilla-blender

Copy link
Copy Markdown
Contributor Author

BLEnder could not fix this PR automatically. Workflow run

@toufali
toufali force-pushed the blender/security-bump-smol-toml branch from 30a9ad0 to dfa2f24 Compare October 7, 2026 20:15
@vbudhram
vbudhram requested a review from a team as a code owner October 9, 2026 16:16
Resolves Dependabot alert #1016. The bump installs the highest
version satisfying the dependency range; the title uses >=<min> when the
advisory provides a minimum patched version — see the lockfile diff for the exact resolved version.
Created by BLEnder (https://github.com/mozilla/blender)
@vbudhram
vbudhram force-pushed the blender/security-bump-smol-toml branch from 013c1cb to 11c9343 Compare October 9, 2026 16:58

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants