@artsy/palette-mobile 24.6.0 → 24.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1) hide show
  1. package/package.json +10 -5
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@artsy/palette-mobile",
3
- "version": "24.6.0",
3
+ "version": "24.7.0",
4
4
  "description": "Artsy's design system for React Native",
5
5
  "workspaces": [
6
6
  "Example"
@@ -35,10 +35,11 @@
35
35
  "test": "jest --maxWorkers=2",
36
36
  "type-check": "tsc --noEmit"
37
37
  },
38
- "dependenciesComments": [
39
- "ONLY ADD DEPS THAT ARE OK TO SHIP WITH THIS LIBRARY.",
40
- "FOR DEPS NEEDED FOR THE STORYBOOK APP, ADD THEM AS DEV DEPS BELOW."
41
- ],
38
+ "dependenciesComments": {
39
+ "ONLY ADD DEPS THAT ARE OK TO SHIP WITH THIS LIBRARY.": "FOR DEPS NEEDED FOR THE STORYBOOK APP, ADD THEM AS DEV DEPS BELOW.",
40
+ "tmp": "Pinned to 0.2.7 to fix GHSA-ph9p-34f9-6g65 (arbitrary file/directory write via symlink). @artsy/update-repo@0.8.2 (latest) exact-pins tmp@^0.1.0 with no patched release on that line; remove this once @artsy/update-repo bumps its tmp dependency upstream.",
41
+ "postcss": "Pinned to fix GHSA-6g55-p6wh-862q and GHSA-r28c-9q8g-f849 (path traversal / arbitrary file disclosure via sourceMappingURL). expo (via @expo/metro-config@55.0.21) exact-pins postcss@~8.4.32, and styled-components@6.1.19 exact-pins postcss@8.4.49, neither of which is patched; remove this once expo/styled-components bump their postcss dependency upstream."
42
+ },
42
43
  "dependencies": {
43
44
  "@artsy/palette-tokens": "7.0.0",
44
45
  "@react-spring/native": "10.0.3",
@@ -64,6 +65,10 @@
64
65
  "react-native-worklets": "*",
65
66
  "styled-components": ">= 5"
66
67
  },
68
+ "resolutions": {
69
+ "postcss": "^8.5.18",
70
+ "tmp": "^0.2.6"
71
+ },
67
72
  "devDependencies": {
68
73
  "@artsy/auto-config": "1.2.0",
69
74
  "@artsy/icons": "3.67.0",