From 9cc9ed016516e8b0f270d3f1e4af786c87481c7b Mon Sep 17 00:00:00 2001 From: Simon Woolf Date: Wed, 7 Oct 2026 00:18:55 +0100 Subject: [PATCH] Bump http-cache-semantics to 4.3.0 to fix npm audit failure Fixes GHSA-ch52-4w7c-c8xp, a high-severity advisory against http-cache-semantics <=4.2.0, pulled in transitively via got > cacheable-request. This was failing the npm audit step of the lint CI job. Co-Authored-By: Claude Opus 5.5 (1M context) --- package-lock.json | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index fc49fefda2..c09fd60f44 100644 --- a/package-lock.json +++ b/package-lock.json @@ -6115,9 +6115,10 @@ } }, "node_modules/http-cache-semantics": { - "version": "4.1.1", - "resolved": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.1.1.tgz", - "integrity": "sha512-er295DKPVsV82j5kw1Gjt+ADA/XYHsajl82cGNQG2eyoPkvgUhX+nDIyelzhIWbbsXP39EHcI6l5tYs2FYqYXQ==" + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.3.0.tgz", + "integrity": "sha512-M5t5LlJpS1UHMjvwRQVdFHvPISGeLAxNcrWuJkeGh0KxsqCHZ1O3NXZU/8x7cD0BDcGW8kapxMKTvwlqrNkHkA==", + "license": "BSD-2-Clause" }, "node_modules/http-errors": { "version": "2.0.1", @@ -16279,9 +16280,9 @@ } }, "http-cache-semantics": { - "version": "4.1.1", - "resolved": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.1.1.tgz", - "integrity": "sha512-er295DKPVsV82j5kw1Gjt+ADA/XYHsajl82cGNQG2eyoPkvgUhX+nDIyelzhIWbbsXP39EHcI6l5tYs2FYqYXQ==" + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.3.0.tgz", + "integrity": "sha512-M5t5LlJpS1UHMjvwRQVdFHvPISGeLAxNcrWuJkeGh0KxsqCHZ1O3NXZU/8x7cD0BDcGW8kapxMKTvwlqrNkHkA==" }, "http-errors": { "version": "2.0.1",