[PR #5288] [MERGED] chore: security patches for the dependency chain (second iteration) #5142

Closed
opened 2026-03-17 02:37:07 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/hoppscotch/hoppscotch/pull/5288
Author: @mirarifhasan
Created: 7/29/2025
Status: Merged
Merged: 7/29/2025
Merged by: @jamesgeorge007

Base: nextHead: chore/security-update


📝 Commits (1)

  • 52e071d chore: pin form-data in pnpm override

📊 Changes

2 files changed (+39 additions, -74 deletions)

View changed files

📝 package.json (+2 -1)
📝 pnpm-lock.yaml (+37 -73)

📄 Description

What's changed

  • Pin form-data in the root package.json file to avoid vulnerability.

Notes to reviewers

Nil


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/hoppscotch/hoppscotch/pull/5288 **Author:** [@mirarifhasan](https://github.com/mirarifhasan) **Created:** 7/29/2025 **Status:** ✅ Merged **Merged:** 7/29/2025 **Merged by:** [@jamesgeorge007](https://github.com/jamesgeorge007) **Base:** `next` ← **Head:** `chore/security-update` --- ### 📝 Commits (1) - [`52e071d`](https://github.com/hoppscotch/hoppscotch/commit/52e071d4f1fec6ee9506818091e969f63e6c4b81) chore: pin form-data in pnpm override ### 📊 Changes **2 files changed** (+39 additions, -74 deletions) <details> <summary>View changed files</summary> 📝 `package.json` (+2 -1) 📝 `pnpm-lock.yaml` (+37 -73) </details> ### 📄 Description <!-- Thanks for creating this pull request 🤗 Please make sure that the pull request is limited to one type (docs, feature, etc.) and keep it as small as possible. You can open multiple prs instead of opening a huge one. --> <!-- If this pull request closes an issue, please mention the issue number below --> <!-- Issue # here --> <!-- Add an introduction into what this PR tries to solve in a couple of sentences --> ### What's changed <!-- Describe point by point the different things you have changed in this PR --> - Pin `form-data` in the root `package.json` file to avoid vulnerability. <!-- You can also choose to add a list of changes and if they have been completed or not by using the markdown to-do list syntax - [ ] Not Completed - [x] Completed --> ### Notes to reviewers <!-- Any information you feel the reviewer should know about when reviewing your PR --> Nil --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-03-17 02:37:07 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/hoppscotch#5142
No description provided.