[Snyk] Security upgrade @actions/cache from 3.2.213 to 4.0.0 - #16
[Snyk] Security upgrade @actions/cache from 3.2.213 to 4.0.0#16adityamaru wants to merge 1 commit into
Conversation
Sorry, something went wrong.
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-FORMDATA-10841150
There was a problem hiding this comment.
Bug: Cache Version Pinning Causes Update Issues
The @actions/cache dependency has an inconsistent version specification: package.json pins it to 4.0.0, while package-lock.json uses ^4.0.0. This deviates from the project's convention of using caret ranges for other dependencies, preventing automatic patch/minor updates and potentially causing different versions to be installed across environments or with npm install vs npm ci.
package.json#L28-L29Lines 28 to 29 in af14dda
Lines 11 to 12 in af14dda
Was this report helpful? Give feedback by reacting with 👍 or 👎
Sorry, something went wrong.
Reviewers
1 more reviewerAt least 1 approving review is required to merge this pull request.
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
Vulnerabilities that will be fixed with an upgrade:
SNYK-JS-FORMDATA-10841150
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.