From 08c8b9bbc3f25e113dc308d63709e182dfbd7265 Mon Sep 17 00:00:00 2001 From: Abimael Martell Date: Mon, 10 Nov 2025 14:13:05 -0800 Subject: [PATCH] Fix CI Dependency Audit (#2386) --- apps/api/audit-ci.jsonc | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/apps/api/audit-ci.jsonc b/apps/api/audit-ci.jsonc index ec4744025..ce94c39c5 100644 --- a/apps/api/audit-ci.jsonc +++ b/apps/api/audit-ci.jsonc @@ -8,6 +8,7 @@ "GHSA-qj3p-xc97-xw74|@coinbase/x402>x402>wagmi>@wagmi/connectors>@metamask/sdk>@metamask/sdk-communication-layer", // we don't use the Metamask SDK in the browser "GHSA-ffrw-9mx8-89p8|@coinbase/x402>x402>wagmi>@wagmi/connectors>@walletconnect/ethereum-provider>@reown/appkit>@reown/appkit-utils>@walletconnect/logger>pino>fast-redact", // unused "GHSA-m732-5p4w-x69g|@coinbase/x402>x402>wagmi>@wagmi/connectors>porto>hono", // we don't use hono - "GHSA-q7jf-gf43-6x6p|@coinbase/x402>x402>wagmi>@wagmi/connectors>porto>hono" // we don't use hono + "GHSA-q7jf-gf43-6x6p|@coinbase/x402>x402>wagmi>@wagmi/connectors>porto>hono", // we don't use hono + "GHSA-rwvc-j5jr-mgvh|ai" // file upload vulnerability - not exposed in our usage ] }