From a7317db2f74c5c0a424ea12e1313e3ecab2cbb7b Mon Sep 17 00:00:00 2001 From: Pigbibi <20649888+Pigbibi@users.noreply.github.com> Date: Tue, 25 Aug 2026 19:48:24 +0800 Subject: [PATCH 1/2] fix: override vulnerable protobufjs dependency Co-Authored-By: Codex --- package-lock.json | 7 +++---- package.json | 3 +++ 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 15e0f4e..cedd5d2 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1489,11 +1489,10 @@ } }, "node_modules/protobufjs": { - "version": "7.6.4", - "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.4.tgz", - "integrity": "sha512-RJJPTTpvFfHcWLkIa2JFWK4XvtSzS0yEWDmunqHXli1h3JlkbcQZXDZdcWxv+JK3Xsl5/UFDPZ0iGm7DAengYw==", + "version": "7.6.5", + "resolved": "http://mirrors.tencentyun.com/npm/protobufjs/-/protobufjs-7.6.5.tgz", + "integrity": "sha512-/FPD0nUc9jH6rfFjji9IBqOz4pcSE3CsT1m7Ep6Mdb0LxSUMj8hgl6GomOvZzpNpAqqGaXA0P3VSrZLFzIhQrw==", "hasInstallScript": true, - "license": "BSD-3-Clause", "dependencies": { "@protobufjs/aspromise": "^1.1.2", "@protobufjs/base64": "^1.1.2", diff --git a/package.json b/package.json index ed03fcb..fd19440 100644 --- a/package.json +++ b/package.json @@ -16,5 +16,8 @@ "playwright": "^1.61.1", "playwright-extra": "^4.3.6", "puppeteer-extra-plugin-stealth": "^2.11.2" + }, + "overrides": { + "protobufjs": "7.6.5" } } From 050f99a8b901525db0ff6615cb5d663a6a7188fc Mon Sep 17 00:00:00 2001 From: Pigbibi <20649888+Pigbibi@users.noreply.github.com> Date: Tue, 25 Aug 2026 19:50:51 +0800 Subject: [PATCH 2/2] build: use public registry for protobufjs lock Co-Authored-By: Codex --- package-lock.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package-lock.json b/package-lock.json index cedd5d2..152d171 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1490,7 +1490,7 @@ }, "node_modules/protobufjs": { "version": "7.6.5", - "resolved": "http://mirrors.tencentyun.com/npm/protobufjs/-/protobufjs-7.6.5.tgz", + "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.5.tgz", "integrity": "sha512-/FPD0nUc9jH6rfFjji9IBqOz4pcSE3CsT1m7Ep6Mdb0LxSUMj8hgl6GomOvZzpNpAqqGaXA0P3VSrZLFzIhQrw==", "hasInstallScript": true, "dependencies": {