fix: pin simple-swizzle (#14327)

ascorbic · web-flow · commit c1033beafa33 · 2025-09-08T19:00:41.000+01:00
* fix: pin simple-swizzle

* Config
diff --git a/.changeset/public-ears-laugh.md b/.changeset/public-ears-laugh.md
@@ -0,0 +1,5 @@
+---
+'astro': patch
+---
+
+Pins simple-swizzle to avoid compromised version
diff --git a/knip.js b/knip.js
@@ -38,6 +38,7 @@ export default {
 				'rehype-toc',
 				'remark-code-titles',
 				'@types/http-cache-semantics',
+				'simple-swizzle', // Pinned dep to avoid a vulnerability
 			],
 		},
 		'packages/db': {
diff --git a/packages/astro/package.json b/packages/astro/package.json
@@ -159,6 +159,7 @@
     "rehype": "^13.0.2",
     "semver": "^7.7.2",
     "shiki": "^3.12.0",
+    "simple-swizzle": "0.2.2",
     "smol-toml": "^1.4.2",
     "tinyexec": "^0.3.2",
     "tinyglobby": "^0.2.14",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +'astro': patch
 +---
++
 +Pins simple-swizzle to avoid compromised version