I'm facing an issue with packages that have dependencies on both version 3.0.4 and 5.0.1 of minimatch. The vulnerability in 3.0.4 prompts me to want to fix the reference to 3.0.6 or 3.0.7, while leaving 5.0.1 untouched. Essentially, I aim to have references to versions 3.0.6 and 5.0.1.
Is there a way to accomplish this using yarn (1.22) within package.json? I found documentation indicating that you can use:
resolutions: {
"minimatch": "3.0.6"
}
However, this solution would apply to all versions of minimatch and not just specifically target 3.0.4.