Pipeline failing on Snyk vulnerability check

[julsco]

Everything works well in my local, but failing in the pipeline.

Issues with no direct upgrade or patch:
  ✗ Missing Release of Resource after Effective Lifetime [Medium Severity][https://security.snyk.io/vuln/SNYK-JS-INFLIGHT-6095116] in [email protected]
    introduced by @tato30/[email protected] > [email protected] > [email protected] > @mapbox/[email protected] > [email protected] > [email protected] > [email protected]
  No upgrade or patch available

[TaTo30]

That vulnerability comes from this project that had been deprecated on may: https://github.com/isaacs/inflight-DEPRECATED-DO-NOT-USE

pdf.js still depends on [email protected], meanwhile the dependency has not been updated this issue could not be fixed.

[emargareten]

@TaTo30 pdf.js already updated the version of canvas

[TaTo30]

Yup, I will release a new version with the new pdf.js version soon

[laserhybiz]

They actually changed the canvas dependency to @napi-rs/canvas (after first updating the canvas version...)