fix: deps

Temporary disable ajv-merge-patch to suppress the rain of CVE warning noise
NaturalCycles · Dec 18, 2023 · 4649988 · 4649988
1 parent c3e9c27
commit 4649988
Show file tree

Hide file tree

Showing 3 changed files with 567 additions and 551 deletions.
diff --git a/package.json b/package.json
@@ -20,7 +20,6 @@
     "ajv": "^8.6.2",
     "ajv-formats": "^2.1.0",
     "ajv-keywords": "^5.0.0",
-    "ajv-merge-patch": "^5.0.1",
     "binary-split": "^1.0.5",
     "chalk": "^4.0.0",
     "debug": "^4.1.1",

diff --git a/src/validation/ajv/getAjv.ts b/src/validation/ajv/getAjv.ts
@@ -38,7 +38,8 @@ export function getAjv(opt?: Options): Ajv {
 
   // Adds $merge, $patch keywords
   // https://github.com/ajv-validator/ajv-merge-patch
-  require('ajv-merge-patch')(ajv)
+  // Kirill: temporarily disabled, as it creates a noise of CVE warnings
+  // require('ajv-merge-patch')(ajv)
 
   return ajv
 }