From d8c18ada99679586b3656d84fdd1a183af58cbed Mon Sep 17 00:00:00 2001 From: Wei Wang Date: Sat, 3 Oct 2026 03:12:28 -0400 Subject: [PATCH] Bump strnum to 2.4.2 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The copy esbuild inlines into dist/extension.js: core's dist imports strnum rather than bundling it (`import toNumber from 'strnum'` in DictionaryXmlFast.js), so it is THIS lockfile that decides which version ships, not core's — the two repos' bumps are independent, and core's own is PR mathworks/data-explorer-core#64. 2.4.2 is in range of every "^2.4.1" asking for it, so the lockfile alone moves. The resolved URL was rewritten back to registry.npmjs.org after the install; integrity is content-based and unaffected, and check:leak confirms all 646 resolutions. --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index dfebfc5..0909025 100644 --- a/package-lock.json +++ b/package-lock.json @@ -7527,9 +7527,9 @@ } }, "node_modules/strnum": { - "version": "2.4.1", - "resolved": "https://registry.npmjs.org/strnum/-/strnum-2.4.1.tgz", - "integrity": "sha512-M9eUSMT2dCB2cTNPG7UYj6KuK7RJR2SN2+yCV/fTW3xzTCS6EaGZ5pSMgDIjB7r8zSfTGk+dvvn9rTjpVS9Mwg==", + "version": "2.4.2", + "resolved": "https://registry.npmjs.org/strnum/-/strnum-2.4.2.tgz", + "integrity": "sha512-rDG3Ah4TV0k1hWvLSzkZtMmLN9+eS+h3knq4MP6A42Y3Yh5qGNnOUs1jJkoSr8FG5dsL28c7KgkIBzSEykqtuw==", "funding": [ { "type": "github",