fix: updates nyc version and ignores undici vuln flag (#366)

* fix: upgrade's nyc version in lock to fix audit * fix: ignores undici audit flag
OffchainLabs · Oct 17, 2023 · d2a38b8 · d2a38b8
1 parent a3f36ec
commit d2a38b8
Show file tree

Hide file tree

Showing 2 changed files with 283 additions and 249 deletions.
diff --git a/audit-ci.jsonc b/audit-ci.jsonc
@@ -112,6 +112,11 @@
     // from: @arbitrum/nitro-contracts>@openzeppelin/contracts-upgradeable
     // from @arbitrum/nitro-contracts>@openzeppelin/contracts
     // We don't use ERC2771Context
-    "GHSA-g4vp-m682-qqmp"
+    "GHSA-g4vp-m682-qqmp",
+    // https://github.com/advisories/GHSA-wqq4-5wpv-mx2g
+    // Undici's cookie header not cleared on cross-origin redirect in fetch
+    // from: hardhat>undici
+    // hardhat is only used in dev
+    "GHSA-wqq4-5wpv-mx2g"
   ]
 }