diff --git a/package-lock.json b/package-lock.json index aa5d75a4..251bf2a5 100644 --- a/package-lock.json +++ b/package-lock.json @@ -7,7 +7,7 @@ "name": "fathomdb-dev-tooling", "devDependencies": { "markdownlint-cli2": "^0.23.0", - "prettier": "^3.9.4" + "prettier": "^3.9.6" } }, "node_modules/@nodelib/fs.scandir": { @@ -1205,9 +1205,9 @@ } }, "node_modules/prettier": { - "version": "3.9.4", - "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.9.4.tgz", - "integrity": "sha512-yWG/o/4oJfo036EKAfK6ACAoDOfHeRHx4tuxkfBZiauURiaSmYwlpOr5LQqKtIkRD2z1PLteme2WoxEnj4tHTg==", + "version": "3.9.6", + "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.9.6.tgz", + "integrity": "sha512-OpN0zzVdiaiAhxpuuj5efpIS4sY9j7bY6uR5mnj5yPzGkdkjNKSJeUThPb60Jw29QuAZgA4o+/iB49kFiaBX6g==", "dev": true, "license": "MIT", "bin": { diff --git a/package.json b/package.json index 4c4fe174..60617531 100644 --- a/package.json +++ b/package.json @@ -9,7 +9,7 @@ "comment-scripts": "0.8.9.1: prettier removed from the markdown path (lint:md-format / format:md). prettier's non-configurable *->_ emphasis reflow corrupts fragile markdown (see dev/tools/md-fix-corruption-ledger.md); markdownlint-cli2 --fix via the AST-guarded scripts/md-safe-fix.sh is the safe fixer. prettier kept as a devDependency only for any non-markdown use; remove if unused.", "devDependencies": { "markdownlint-cli2": "^0.23.0", - "prettier": "^3.9.4" + "prettier": "^3.9.6" }, "comment-overrides": "0.8.9 R-DEP-1: force transitive security patches for markdown-it (GHSA-6v5v-wf23-fmfq) and js-yaml (GHSA-h67p-54hq-rp68). markdownlint-cli2@0.22.1 pins the vulnerable 14.1.1/4.1.1 exactly and has no patched release yet; `npm audit fix --force` would downgrade markdownlint-cli2 (breaking). Both are backward-compatible minor bumps. Remove when markdownlint-cli2 ships patched deps.", "overrides": {