Request for Release Timeline for Vulnerability Fixes (ts-deepmerge & js-yaml)

[khushigupta0625]

Hello Team,

We noticed that the dependency vulnerabilities reported in the project include issues related to ts-deepmerge and js-yaml.

The ts-deepmerge vulnerability appears to have already been addressed, and the corresponding PR has been merged.
The js-yaml vulnerability, however, does not appear to be fixed yet.

Could you please provide an estimated timeline for the next release that will include:

The merged ts-deepmerge fix.
A fix for the js-yaml vulnerability (if one is planned or currently in progress).

We would appreciate any update on the release schedule, as these vulnerabilities are impacting our dependency compliance requirements.

Thank you for your support.

[IzaakGough]

Hi @khushigupta0625, thanks for raising this.

I’m checking internally on the timeline for the next release and will follow up here once I have an update.

Regarding the js-yaml vulnerability, PR #322 is intended to address the remaining js-yaml path in this repo. If it is merged in time, that fix should be included in the next release.

[khushigupta0625]

Hi, is there any update on this?