From 872d5b78949b21decea582bff05def4f044924a0 Mon Sep 17 00:00:00 2001 From: IFGGit <162738418+IFGGit@users.noreply.github.com> Date: Thu, 14 Mar 2024 18:20:49 +0200 Subject: [PATCH] chore(deps): Add integrity for the xlsx tarball (#7835) We are building nocodb using pnpm2nix-nzbr [1], and that library requires all dependencies to have integrities. And it's more secure anyway, since if someone hijacks that website and replaces that tarball with something malicious, pnpm will refuse to use that. [1]: https://github.com/nzbr/pnpm2nix-nzbr --- pnpm-lock.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 3b6cd43a73..1104586c55 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -27502,7 +27502,7 @@ packages: dev: true '@cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz': - resolution: {tarball: https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz} + resolution: {integrity: sha512-8IfgFctB7fkvqkTGF2MnrDrC6vzE28Wcc1aSbdDQ+4/WFtzfS73YuapbuaPZwGqpR2e0EeDMIrFOJubQVLWFNA==, tarball: https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz} name: xlsx version: 0.19.3 engines: {node: '>=0.8'}