From 6c06f523c02d75f34690627782cd816f9c47a6ba Mon Sep 17 00:00:00 2001
From: MelvinBot <infra+melvinbot@expensify.com>
Date: Mon, 26 Oct 2026 13:32:19 +0000
Subject: [PATCH] Override image-size to ^2.0.4 to patch GHSA-w3rx-r6r6-pgpr

---
 package-lock.json | 20 ++++----------------
 package.json      |  3 +++
 2 files changed, 7 insertions(+), 16 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index a01c2d1..f924fb7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -6322,18 +6322,15 @@
             }
         },
         "node_modules/image-size": {
-            "version": "1.0.2",
-            "resolved": "https://registry.npmjs.org/image-size/-/image-size-1.0.2.tgz",
-            "integrity": "sha512-xfOoWjceHntRb3qFCrh5ZFORYH8XCdYpASltMhZ/Q0KZiOwjdE/Yl2QCiWdwD+lygV5bMCvauzgu5PxBX/Yerg==",
+            "version": "2.0.4",
+            "resolved": "https://registry.npmjs.org/image-size/-/image-size-2.0.4.tgz",
+            "integrity": "sha512-QRUkFFsRV/6fuESxb9Vkq+a0LkSrgKXuc2NEqfikiXxxN/G3tjWt5EVUlMaImRBZRZK/jRBEbYvpPYZL8t08Zw==",
             "peer": true,
-            "dependencies": {
-                "queue": "6.0.2"
-            },
             "bin": {
                 "image-size": "bin/image-size.js"
             },
             "engines": {
-                "node": ">=14.0.0"
+                "node": ">=18"
             }
         },
         "node_modules/import-fresh": {
@@ -8679,15 +8676,6 @@
                 "node": ">=6"
             }
         },
-        "node_modules/queue": {
-            "version": "6.0.2",
-            "resolved": "https://registry.npmjs.org/queue/-/queue-6.0.2.tgz",
-            "integrity": "sha512-iHZWu+q3IdFZFX36ro/lKBkSvfkztY5Y7HMiPlOUjhupPcG2JMfst2KKEpu5XndviX/3UhFbRngUPNKtgvtZiA==",
-            "peer": true,
-            "dependencies": {
-                "inherits": "~2.0.3"
-            }
-        },
         "node_modules/queue-microtask": {
             "version": "1.2.3",
             "resolved": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz",
diff --git a/package.json b/package.json
index 889b315..9e5c157 100644
--- a/package.json
+++ b/package.json
@@ -68,5 +68,8 @@
         "eslint-plugin-react-hooks": "^4.6.0",
         "prettier": "^3.0.0",
         "typescript": "^5.1.6"
+    },
+    "overrides": {
+        "image-size": "^2.0.4"
     }
 }