From 96c8d444c6c8a660face2ed6c1a199faa6005b18 Mon Sep 17 00:00:00 2001 From: Alex Waygood Date: Tue, 20 Oct 2026 16:10:06 -0700 Subject: [PATCH] Update ws (#29526) The playground's locked `ws` 8.18.2 has security advisories. Update this transitive dependency to 8.22.0, which is outside the affected ranges. Codex's analysis is that Renovate's missing [support for targeted updates of transitive dependencies in `package-lock.json`](https://github.com/renovatebot/renovate/issues/46379) may explain why it did not open a security update for the locked `ws` version. Split from #29518. --- playground/package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/playground/package-lock.json b/playground/package-lock.json index 3cdea90b05..cf59c825bc 100644 --- a/playground/package-lock.json +++ b/playground/package-lock.json @@ -5006,9 +5006,9 @@ } }, "node_modules/ws": { - "version": "8.18.2", - "resolved": "https://registry.npmjs.org/ws/-/ws-8.18.2.tgz", - "integrity": "sha512-DMricUmwGZUVr++AEAe2uiVM7UoO9MAVZMDu05UQOaUII0lp+zOzLLU4Xqh/JvTqklB1T4uELaaPBKyjE1r4fQ==", + "version": "8.22.0", + "resolved": "https://registry.npmjs.org/ws/-/ws-8.22.0.tgz", + "integrity": "sha512-Ydggc987+RO0AnWtZ/7Wq9FtNvcrL1b/RO0ud9mWjUPgDrsAAwQSF51sm2hm1XofbU/4jkpGEsLFsZZxU+1DOg==", "license": "MIT", "engines": { "node": ">=10.0.0"