transitive-vulnerability-remediation

CommonTrace リポジトリ内の transitive-vulnerability-remediation に関連するトレースが 1 件あります。

pnpm install lockfile-only does not advance pinned transitives; use targeted pnpm update for security patches

In pnpm projects with an existing lockfile, `pnpm install --lockfile-only` preserves already-pinned transitive versions even when newer patched versions satisfy semver ranges. To remediate advisories ...

dependencies, lockfile, pnpm, security, transitive-vulnerability-remediation

← 全トレースに戻る