Skip to content

Commit 331a38b

Browse files
spawniaclaude
andcommitted
fix: Address Dependabot security alerts
- lodash ^4.17.23: prototype pollution in `_.unset` and `_.omit` GHSA-xxjr-mmjv-4gpg - rollup ^4.59.0: arbitrary file write via path traversal GHSA-mw96-cpmx-2vgc - storybook ^10.2.14: dev server WebSocket hijacking GHSA-mjf5-7g4m-gx5w - webpack ^5.105.3: buildHttp allowedUris SSRF bypass GHSA-8fgc-7cc6-rx7x GHSA-38r7-794h-5758 - @mll-lab/js-utils ^2.41.1: includes lodash 4.17.23 - Refresh lockfile transitive deps: minimatch, tar, lodash-es Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent e1438c4 commit 331a38b

2 files changed

Lines changed: 715 additions & 296 deletions

File tree

package.json

Lines changed: 9 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -57,10 +57,10 @@
5757
"dependencies": {
5858
"@ant-design/icons": "^5.0.1",
5959
"@dnd-kit/core": "^6.0.8",
60-
"@mll-lab/js-utils": "^2.41.0",
60+
"@mll-lab/js-utils": "^2.41.1",
6161
"antd": "4.20.5",
6262
"date-fns": "^2.29.3",
63-
"lodash": "^4.17.21",
63+
"lodash": "^4.17.23",
6464
"react-image-size": "^2.0.0"
6565
},
6666
"devDependencies": {
@@ -81,9 +81,9 @@
8181
"@rollup/plugin-typescript": "^11.1.6",
8282
"@semantic-release/changelog": "^6.0.3",
8383
"@semantic-release/git": "^10.0.1",
84-
"@storybook/addon-docs": "^10.0.5",
84+
"@storybook/addon-docs": "^10.2.14",
8585
"@storybook/addon-webpack5-compiler-babel": "^3.0.6",
86-
"@storybook/react-webpack5": "^10.0.5",
86+
"@storybook/react-webpack5": "^10.2.14",
8787
"@storybook/test-runner": "^0.24.1",
8888
"@testing-library/dom": "^9.3.3",
8989
"@testing-library/jest-dom": "^6.6.4",
@@ -100,13 +100,14 @@
100100
"babel-loader": "^9.1.3",
101101
"babel-plugin-import": "^1.13.8",
102102
"babel-plugin-styled-components": "^2.1.4",
103+
"css-loader": "^7.1.4",
103104
"eslint": "^8.54.0",
104105
"eslint-config-airbnb": "^19.0.4",
105106
"eslint-plugin-import": "^2.29.0",
106107
"eslint-plugin-jsx-a11y": "^6.8.0",
107108
"eslint-plugin-react": "^7.33.2",
108109
"eslint-plugin-react-hooks": "^4.6.0",
109-
"eslint-plugin-storybook": "^10.0.5",
110+
"eslint-plugin-storybook": "^10.2.14",
110111
"eslint-plugin-testing-library": "^6.2.2",
111112
"identity-obj-proxy": "^3.0.0",
112113
"jest": "^29.7.0",
@@ -122,19 +123,19 @@
122123
"react-is": "^18.2.0",
123124
"require-from-string": "^2.0.2",
124125
"rimraf": "^6.0.1",
125-
"rollup": "^4.22.4",
126+
"rollup": "^4.59.0",
126127
"rollup-plugin-peer-deps-external": "^2.2.4",
127128
"rollup-plugin-styles": "^4.0.0",
128129
"semantic-release": "^25.0.1",
129-
"storybook": "^10.0.5",
130+
"storybook": "^10.2.14",
130131
"style-loader": "^3.3.3",
131132
"styled-components": "^6.1.1",
132133
"ts-jest": "^29.1.1",
133134
"ts-loader": "^9.5.1",
134135
"ts-node": "^10.9.1",
135136
"typescript": "^5.3.2",
136137
"wait-on": "^9.0.3",
137-
"webpack": "^5.97.0"
138+
"webpack": "^5.105.3"
138139
},
139140
"packageManager": "yarn@4.12.0"
140141
}

0 commit comments

Comments
 (0)