From 9e2a05d44dfbb6be03b85da8bf8c8cb86cd4d2a9 Mon Sep 17 00:00:00 2001
From: Jamie <113370520+jamiebuilds-signal@users.noreply.github.com>
Date: Wed, 12 Aug 2026 14:35:56 -0700
Subject: [PATCH] Ignore extract-zip advisory to fix audit failure

Co-authored-by: Backport Bot <backport-bot@signal.org>
---
 pnpm-workspace.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index c068791d18..3afb14eca7 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -53,6 +53,7 @@ auditConfig:
     - GHSA-v2hh-gcrm-f6hx # fast-uri, only used at dev-time
     - GHSA-4c8g-83qw-93j6 # fast-uri, only used at dev-time
     - GHSA-7g7r-gx96-252g # electron-builder > app-builder-lib
+    - GHSA-jmr9-qjv8-65gv # react-devtools > electron > extract-zip
 
 overrides:
   '@electron/rebuild>node-gyp': '12.4.0'
@@ -141,7 +142,7 @@ peerDependencyRules:
 allowedDeprecatedVersions:
   '@humanwhocodes/config-array': '0.11.14'
   '@humanwhocodes/object-schema': '2.0.3'
-  '@xmldom/xmldom': '0.8.10'
+  '@xmldom/xmldom': '0.8.13 || 0.9.10'
   'boolean': '3.2.0'
   'deep-diff': '0.3.8'
   'eslint': '8.38.0'