From 8876b38f0abb309d53fb70145781b1d6ec115ff9 Mon Sep 17 00:00:00 2001
From: openhands <openhands@all-hands.dev>
Date: Mon, 27 Jul 2026 23:24:37 +0200
Subject: [PATCH] security(deps): patch CVE-2026-44705 path traversal in tmp
 dependency

---
 pnpm-workspace.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 74cddc22..63610d06 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -21,10 +21,12 @@ overrides:
   fast-uri: "^3.1.3"
   "@hono/node-server": "^1.19.13"
   postcss: "^8.5.19"
+  # Dwingt alle diepe subdependencies (zoals lhci) naar de veilige tmp-versie
+  tmp: "^0.2.6"
 
 # Zorgt voor een schone terminal zonder de Next-Auth / Nodemailer waarschuwing
 peerDependencyRules:
   allowedVersions:
     nodemailer: "9.0.3"
   ignoreMissing:
-    - nodemailer
+    - nodemailer
\ No newline at end of file