Skip to content

Commit bb246b5

Browse files
chore: update all packages to latest (closes #134) (#135)
- Bump @swc/core 1.15.26 → 1.15.30 - Add pnpm.overrides to fix transitive security vulnerabilities: - @hono/node-server >=1.19.13 (HIGH: auth bypass #184, #241) - path-to-regexp@8 >=8.4.0 (HIGH/MEDIUM: ReDoS #214, #215) - path-to-regexp@0 ~0.1.13 (constrain to v0 to avoid v8 vulns) - hono >=4.12.14 (MEDIUM: HTML injection #252) - follow-redirects >=1.16.0 (MEDIUM: header leak #251) - serialize-javascript >=7.0.5 (MEDIUM: DoS #229) - brace-expansion@5 >=5.0.5 (MEDIUM: ReDoS #213) - ajv@8 >=8.18.0 (MEDIUM: ReDoS #165) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent 5874f51 commit bb246b5

2 files changed

Lines changed: 348 additions & 394 deletions

File tree

package.json

Lines changed: 9 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -108,7 +108,7 @@
108108
"@playwright/test": "1.59.1",
109109
"@schematics/angular": "21.2.7",
110110
"@swc-node/register": "1.11.1",
111-
"@swc/core": "1.15.26",
111+
"@swc/core": "1.15.30",
112112
"@swc/helpers": "~0.5.18",
113113
"@testing-library/angular": "19.2.1",
114114
"@testing-library/dom": "10.4.1",
@@ -143,19 +143,24 @@
143143
"overrides": {
144144
"node-forge": "^1.4.0",
145145
"axios": ">=1.15.0",
146+
"@hono/node-server": ">=1.19.13",
147+
"ajv@8": ">=8.18.0",
146148
"brace-expansion@2": ">=2.0.3",
149+
"brace-expansion@5": ">=5.0.5",
147150
"flatted": ">=3.4.2",
148-
"hono": ">=4.12.12",
151+
"follow-redirects": ">=1.16.0",
152+
"hono": ">=4.12.14",
149153
"koa": ">=3.1.2",
150154
"lodash-es": ">=4.18.0",
151155
"minimatch@9": ">=9.0.7",
152156
"minimatch@10": ">=10.2.3",
153-
"path-to-regexp@0": ">=0.1.13",
157+
"path-to-regexp@0": "~0.1.13",
158+
"path-to-regexp@8": ">=8.4.0",
154159
"picomatch@2": ">=2.3.2",
155160
"picomatch@4": ">=4.0.4",
156161
"qs": ">=6.14.2",
157162
"rollup": ">=4.59.0",
158-
"serialize-javascript": ">=7.0.3",
163+
"serialize-javascript": ">=7.0.5",
159164
"tar": ">=7.5.11",
160165
"webpack": ">=5.104.1",
161166
"yaml@2": ">=2.8.3",

0 commit comments

Comments
 (0)