Update vulnerable path-to-regexp dependency

opennextjs · Sep 11, 2024 · 91e186d · 91e186d
1 parent f38372e
commit 91e186d
Show file tree

Hide file tree

Showing 4 changed files with 10 additions and 9 deletions.
diff --git a/package.json b/package.json
@@ -17,14 +17,13 @@
     "version": "./.changeset/version",
     "release": "./.changeset/release",
     "release-snapshot": "./.changeset/snapshot"
-
   },
   "devDependencies": {
     "@changesets/changelog-github": "^0.4.4",
     "@changesets/cli": "^2.22.0",
     "@sladg/eslint-config-base": "1.4.1",
     "eslint": "^8.47.0",
-     "turbo": "1.10.12"
+    "turbo": "1.10.12"
   },
   "engines": {
     "node": ">=16",

diff --git a/packages/open-next/package.json b/packages/open-next/package.json
@@ -45,7 +45,7 @@
     "aws4fetch": "^1.0.18",
     "chalk": "^5.3.0",
     "esbuild": "0.19.2",
-    "path-to-regexp": "^6.2.1",
+    "path-to-regexp": "^8.1.0",
     "promise.series": "^0.2.0",
     "urlpattern-polyfill": "^10.0.0"
   },

diff --git a/packages/open-next/src/core/routing/matcher.ts b/packages/open-next/src/core/routing/matcher.ts
@@ -4,6 +4,7 @@ import {
   Match,
   match,
   MatchFunction,
+  ParamData,
   PathFunction,
 } from "path-to-regexp";
 import type {
@@ -115,8 +116,8 @@ const computeParamHas =
   };
 
 function convertMatch(
-  match: Match,
-  toDestination: PathFunction,
+  match: Match<ParamData>,
+  toDestination: PathFunction<ParamData>,
   destination: string,
 ) {
   if (match) {

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml