Skip to content

Conversation

@tido64
Copy link
Member

@tido64 tido64 commented Feb 9, 2026

Description

fsevents does not depend on node-gyp but Yarn still installs it for some reason. In any case, it is (one of several packages) pulling in an old version of node-tar and causing security alerts.

Test plan

n/a

@github-actions github-actions bot added the chore Improvements that don't directly affect features label Feb 9, 2026
@tido64 tido64 enabled auto-merge (squash) February 10, 2026 07:52
@tido64 tido64 merged commit db39429 into main Feb 10, 2026
24 of 26 checks passed
@tido64 tido64 deleted the tido/remove-node-gyp branch February 10, 2026 08:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore Improvements that don't directly affect features

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants