[Mlir-commits] [llvm] [mlir] Pipe 10308 Upgrade tmp package from version 0.2.1 to 0.2.7 to address security alerts (PR #206397)

llvmlistbot at llvm.org llvmlistbot at llvm.org
Sun Jun 28 20:51:48 PDT 2026


https://github.com/SB-MaheshDange created https://github.com/llvm/llvm-project/pull/206397

## PIPE-10309
<hr />

Summary :This PR upgrades tmp package from version 0.2.1 to 0.2.7 resolve security vulnerabilities.

Risk : Low, Just upgrading Tmp version and test it locally.

## Local testing

Applied the fix to the package-lock.json and package.json
Verified that the correct Tmp was installed.



## Checklist
Have you considered whether:
- [x] Changes are backwards compatible (for rollout)?
- [x] The [Envoy configuration](https://smartbear.atlassian.net/wiki/spaces/EN/pages/5836865686/Envoy+Setup+for+Pipeline+apps) needs updating (if adding/updating gRPC connections)?
- [x] Application certificates need creating (if adding new Rabbit/Mongo connections)?*
- [x] The expected queue lists need updating (if adding new Rabbit queues)?**
- [x] Database queries target an appropriate [index](https://www.mongodb.com/docs/manual/indexes/) (if adding/updating Mongo/Clickhouse queries)?
- [x] [Grafana charts](https://smartbear.atlassian.net/wiki/spaces/EN/pages/3390963894/Adding+updating+Grafana+dashboards) need updating (if adding/updating a metric)?
- [x] Any associated documentation needs updating (e.g. Confluence, kick off a new Digbe [build](https://buildkite.com/organizations/bugsnag/pipelines/digbe/builds/new))?

> *<i> See points (10) - (12) from [this guide](https://smartbear.atlassian.net/wiki/x/_m3Lww) </i>

> **<i> Update the expected queue list defined [here](https://github.com/bugsnag/infra/blob/master/terraform-alerts-prometheus/rabbit-queues.tf) and the Grafana dashboard defined [here](https://github.com/bugsnag/terraform-monitoring/blob/main/grafana-dash-rabbitmq-data.tf).</i>

error: too big or took too long to generate


More information about the Mlir-commits mailing list