Bump octokit plugin-paginate-rest to address ReDoS vulnerability

GHSA-h5c3-5r3r-rr8q Note that `npm audit` will still show the updated version as vulnerable, even though it is patched. npm/cli#8125
actions · Mar 4, 2025 · 15b08c5 · 15b08c5
1 parent ec9716b
commit 15b08c5
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 25 deletions.
diff --git a/packages/github/package-lock.json b/packages/github/package-lock.json
diff --git a/packages/github/package.json b/packages/github/package.json
@@ -40,7 +40,7 @@
   "dependencies": {
     "@actions/http-client": "^2.2.0",
     "@octokit/core": "^5.0.1",
-    "@octokit/plugin-paginate-rest": "^9.0.0",
+    "@octokit/plugin-paginate-rest": "^9.2.2",
     "@octokit/plugin-rest-endpoint-methods": "^10.0.0",
     "undici": "^5.28.5"
   },