turborepo
a330a689 - fix: Upgrade tsup to fix rollup and glob vulnerabilities (#11601)

Commit
43 days ago
fix: Upgrade tsup to fix rollup and glob vulnerabilities (#11601) ## Summary - Upgrades tsup from 5.12.9/6.7.0 to 8.5.1 in turbo-ignore, create-turbo, @turbo/codemod, and @turbo/releaser - Fixes TURBO-5138, TURBO-5139: rollup DOM Clobbering vulnerability (now uses rollup ^4.34.8) - Fixes TURBO-5142: glob command injection vulnerability (tsup 8.x uses sucrase 3.35.1 which replaced glob with tinyglobby) ## Testing All affected packages build and pass tests.
Author
Parents
Loading