Commit 7b280f8
fix(console): resolve Snyk dependency vulnerabilities (#2310)
* fix(console): resolve 14 Snyk dependency vulnerabilities
Upgrade direct dependencies:
- @modelcontextprotocol/sdk 1.25.2 -> ^1.26.0 (race condition)
- monaco-editor 0.54.0 -> ^0.55.0 (dompurify XSS)
- react-syntax-highlighter 15.6.6 -> ^16.0.0 (prismjs code injection)
Add resolutions/overrides for transitive dependencies:
- ajv ^8.18.0 (ReDoS)
- body-parser ^2.2.1 (resource allocation)
- diff ^5.2.2 (ReDoS)
- dompurify ^3.3.2 (XSS)
- @hono/node-server ^1.19.10 (URL encoding)
- lodash ^4.17.23 (prototype pollution)
- lodash-es ^4.17.23 (prototype pollution)
- mdast-util-to-hast ^13.2.1 (object attribute modification)
- qs ^6.14.2 (resource allocation)
- prismjs ^1.30.0 (code injection)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix(frontend): resolve type errors from monaco-editor 0.55.0 upgrade
In monaco-editor 0.55.0, `languages.typescript` was moved to a top-level
`typescript` namespace. Update editor.tsx to use the new import path and
add explicit parameter types in pipelines-create.tsx.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>1 parent c0b8dff commit 7b280f8
5 files changed
Lines changed: 1698 additions & 2873 deletions
File tree
- frontend
- src/components/pages
- rp-connect
- topics/Tab.Messages
0 commit comments