From aab25f5afd0a51d38288432f78c911fcfacbd466 Mon Sep 17 00:00:00 2001
From: Kai Koenig <kai@ventego-creative.co.nz>
Date: Wed, 5 Aug 2026 14:09:29 +1200
Subject: [PATCH] chore: temporarily pin cache dependencies

Pin known-clean Keyv and cache dependency versions while the npm supply-chain incident is reviewed. Reassess and remove by the end of August 2026.\n\nRefs #542
---
 package.json | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/package.json b/package.json
index 720491f..bc3fa3e 100644
--- a/package.json
+++ b/package.json
@@ -69,6 +69,11 @@
     "debug": "^4.3.4",
     "stack-trace": "0.0.10"
   },
+  "overrides": {
+    "keyv": "4.5.4",
+    "flat-cache": "4.0.1",
+    "file-entry-cache": "8.0.0"
+  },
   "keywords": [
     "APM",
     "crash",