From f0966729b3514d31be0ee464e61670debe8be7d7 Mon Sep 17 00:00:00 2001 From: Wei Wang Date: Sat, 3 Oct 2026 03:01:32 -0400 Subject: [PATCH] Bump strnum to 2.4.2 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit A direct runtime dependency: the number coercion in DictionaryXmlFast is strnum's, declared beside fast-xml-parser because the fast reader calls it with the same options fxp would. 2.4.2 is in range of the existing "^2.4.1", so this is the lockfile alone — no package.json edit and no overrides entry, the same shape as the brace-expansion work. The resolved URL was rewritten back to registry.npmjs.org after the install, which the configured registry here does not do on its own; the integrity hash is content-based and unaffected. npm run check:leak clean. --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index cb9a583..7ea68fa 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1344,9 +1344,9 @@ "license": "MIT" }, "node_modules/strnum": { - "version": "2.4.1", - "resolved": "https://registry.npmjs.org/strnum/-/strnum-2.4.1.tgz", - "integrity": "sha512-M9eUSMT2dCB2cTNPG7UYj6KuK7RJR2SN2+yCV/fTW3xzTCS6EaGZ5pSMgDIjB7r8zSfTGk+dvvn9rTjpVS9Mwg==", + "version": "2.4.2", + "resolved": "https://registry.npmjs.org/strnum/-/strnum-2.4.2.tgz", + "integrity": "sha512-rDG3Ah4TV0k1hWvLSzkZtMmLN9+eS+h3knq4MP6A42Y3Yh5qGNnOUs1jJkoSr8FG5dsL28c7KgkIBzSEykqtuw==", "funding": [ { "type": "github",