Skip to content

Conversation

@chrispader
Copy link
Member

@chrispader chrispader commented Nov 28, 2025

typeorm version 0.3.20 has an insecure sub dependency:

[email protected]
    └── [email protected]
        └── [email protected] ⚠️ CRITICAL

Updating the dependency to the latest version


Note

Upgrades typeorm to 0.3.27 across the workspace and adds a patch to expose its package.json; updates the example to use the local react-native-nitro-sqlite via *.

  • Dependencies:
    • Bump typeorm to 0.3.27 in package.json, package/package.json, and example/package.json.
    • Change example dependency react-native-nitro-sqlite to *.
  • Patches:
    • Add patches/typeorm+0.3.27+001+expose-package-json-file.patch to export ./package.json from node_modules/typeorm/package.json.

Written by Cursor Bugbot for commit d3eb704. This will update automatically on new commits. Configure here.

@chrispader chrispader merged commit 00184ad into main Nov 28, 2025
3 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants