⚠️ Important security update for Lightdash CLI users Earlier today a widely-used open source package (

axios

) was briefly compromised on npm. This affected the Lightdash CLI since Lightdash depends on

axios

. Most people are unlikely to be affected. You're only affected if a fresh install of the CLI (

npm install -g @lightdash/cli

) happened between midnight and 3:30am UTC today (March 31). This would most commonly be a CI pipeline, a Docker build, or a manual

npm install

. If you installed the CLI before today and haven't reinstalled, you're fine. What to do: → Update to

@lightdash/cli@0.2695.1

- this pins the dependency to a safe version → If you did install during that window, please reach out to us directly and we'll help you check Lightdash Cloud is not affected. Full details for anyone who wants them: https://github.com/lightdash/lightdash/security/advisories Happy to answer any questions here