microsoft / rushstack-websites

Doc content for the Rush Stack websites.
Creative Commons Attribution 4.0 International
24 stars 72 forks source link

Resolve Dependabot security warning for minimatch@3.0.4 #193

Closed octogonz closed 1 year ago

octogonz commented 1 year ago

Dependabot https://github.com/microsoft/rushstack-websites/pull/188 complains about minimatch@3.0.4

We can't merge that PR because Dependabot is inappropriately upgrading the PNPM lockfile format to version 6.0.

I tried running rush update-autoinstaller --name rush-prettier but it fails to update due to a bug in that command. I fixed that in https://github.com/microsoft/rushstack/pull/4300, which was used to generate the lockfile in this PR.