Bump octokit plugin-paginate-rest to address ReDoS vulnerability

GHSA-h5c3-5r3r-rr8q Note that `npm audit` will still show the updated version as vulnerable, even though it is patched. npm/cli#8125
actions · Mar 7, 2025 · b68cdad · b68cdad
1 parent dc22dc7
commit b68cdad
Show file tree

Hide file tree

Showing 2 changed files with 40 additions and 36 deletions.
diff --git a/packages/github/package-lock.json b/packages/github/package-lock.json
diff --git a/packages/github/package.json b/packages/github/package.json
@@ -40,8 +40,8 @@
   "dependencies": {
     "@actions/http-client": "^2.2.0",
     "@octokit/core": "^5.0.1",
-    "@octokit/plugin-paginate-rest": "^9.0.0",
-    "@octokit/plugin-rest-endpoint-methods": "^10.0.0",
+    "@octokit/plugin-paginate-rest": "^9.2.2",
+    "@octokit/plugin-rest-endpoint-methods": "^10.4.1",
     "undici": "^5.28.5"
   },
   "devDependencies": {