Fork npm-check

Author: cmalonzo

common/changes/@microsoft/rush/user-cmalonzo-npmaudit-fork-npm-check_2025-10-17-18-56.json

@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@microsoft/rush",
+      "comment": "Fork npm-check to address npm audit CVE",
+      "type": "none"
+    }
+  ],
+  "packageName": "@microsoft/rush"
+}

common/config/rush/nonbrowser-approved-packages.json

@@ -258,6 +258,10 @@
       "name": "@rushstack/node-core-library",
       "allowedCategories": [ "libraries", "tests", "vscode-extensions" ]
     },
+    {
+      "name": "@rushstack/npm-check-fork",
+      "allowedCategories": [ "libraries" ]
+    },
     {
       "name": "@rushstack/operation-graph",
       "allowedCategories": [ "libraries" ]
@@ -646,6 +650,10 @@
       "name": "git-repo-info",
       "allowedCategories": [ "libraries" ]
     },
+    {
+      "name": "giturl",
+      "allowedCategories": [ "libraries" ]
+    },
     {
       "name": "glob",
       "allowedCategories": [ "libraries", "vscode-extensions" ]
@@ -862,6 +870,10 @@
       "name": "package-extractor-test-03",
       "allowedCategories": [ "tests" ]
     },
+    {
+      "name": "package-json",
+      "allowedCategories": [ "libraries" ]
+    },
     {
       "name": "pnpm-sync-lib",
       "allowedCategories": [ "libraries" ]
@@ -974,6 +986,10 @@
       "name": "terser-webpack-plugin",
       "allowedCategories": [ "libraries", "tests" ]
     },
+    {
+      "name": "throat",
+      "allowedCategories": [ "libraries" ]
+    },
     {
       "name": "timsort",
       "allowedCategories": [ "libraries" ]

common/config/subspaces/build-tests-subspace/pnpm-lock.yaml

@@ -1,6 +1,6 @@
 // DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush.
 {
-  "pnpmShrinkwrapHash": "26e6eb2ac184c892057b5d9687143b690e088b75",
+  "pnpmShrinkwrapHash": "1dc2b69423ca353582cec8716410a0b8a8210aff",
   "preferredVersionsHash": "550b4cee0bef4e97db6c6aad726df5149d20e7d9",
-  "packageJsonInjectedDependenciesHash": "3622326a8ef09c6dd0846faf66ef2e04eabd1154"
+  "packageJsonInjectedDependenciesHash": "f4c28d4bda61037a94dd99bdb3ca923bb00284e3"
 }