From fc0b279e24c57064a42fab9cd705b6d450f72697 Mon Sep 17 00:00:00 2001 From: "Gavin Barron (from Dev Box)" Date: Mon, 20 Jul 2026 16:51:40 -0700 Subject: [PATCH] Bump pnpm to 10.34.4 for CVEs Addresses pnpm advisories CVE-2026-55487, CVE-2026-55698, CVE-2026-55697, CVE-2026-50015, GHSA-fr4h-3cph-29xv, GHSA-72r4-9c5j-mj57, and GHSA-qrv3-253h-g69c. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: b925a358-5d34-4537-8327-fe1fa580d903 --- rush.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rush.json b/rush.json index 6d7833c936..f7422b4be7 100644 --- a/rush.json +++ b/rush.json @@ -24,7 +24,7 @@ * Specify one of: "pnpmVersion", "npmVersion", or "yarnVersion". See the Rush documentation * for details about these alternatives. */ - "pnpmVersion": "10.32.1", + "pnpmVersion": "10.34.4", /** * Options that are only used when the PNPM package manager is selected */