Skip to content

Commit ac00720

Browse files
B4nanB4nan
authored
chore(deps): bump vulnerable transitive deps to resolve security alerts (apify#3755)
## Summary Resolve open Dependabot alerts in both yarn lockfiles. **`website/yarn.lock`** (in-range bumps): `form-data` → 4.0.6 (high), `tar` → 7.5.16 (medium), `tmp` → 0.2.7 (high), `js-yaml` v4 → 4.2.0 (medium). **root `yarn.lock`** — in-range bumps plus `resolutions` to force versions that `nx`/`lerna` pinned exactly: - `form-data` → ^4.0.6 (was pinned 4.0.5 by `nx`) - `tar` → ^7.5.16 (was pinned 7.5.11 by `lerna`) - `lerna/js-yaml` → ^4.2.0 (was pinned 4.1.1 by `lerna`; scoped so `gray-matter`'s v3 is untouched) ### Not addressed - `esbuild` (high) — pinned `~0.25.0` by `tsx`; left out intentionally, the eslint/tooling area is being migrated in apify#3746. - `js-yaml` 3.14.2 (website) — `gray-matter` pins the v3 line. - `@ai-sdk/provider-utils` (low) — no patched version published upstream. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
1 parent 0483e17 commit ac00720

3 files changed

Lines changed: 52 additions & 57 deletions

File tree

‎package.json‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -121,7 +121,10 @@
121121
"resolutions": {
122122
"tmp": "^0.2.7",
123123
"@puppeteer/browsers": "^3.0.4",
124-
"playwright-core": "1.61.0"
124+
"playwright-core": "1.61.0",
125+
"form-data": "^4.0.6",
126+
"tar": "^7.5.16",
127+
"lerna/js-yaml": "^4.2.0"
125128
},
126129
"packageManager": "yarn@4.10.3",
127130
"volta": {

‎website/yarn.lock‎

Lines changed: 24 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -9751,15 +9751,15 @@ __metadata:
97519751
linkType: hard
97529752

97539753
"form-data@npm:^4.0.5":
9754-
version: 4.0.5
9755-
resolution: "form-data@npm:4.0.5"
9754+
version: 4.0.6
9755+
resolution: "form-data@npm:4.0.6"
97569756
dependencies:
97579757
asynckit: "npm:^0.4.0"
97589758
combined-stream: "npm:^1.0.8"
97599759
es-set-tostringtag: "npm:^2.1.0"
9760-
hasown: "npm:^2.0.2"
9761-
mime-types: "npm:^2.1.12"
9762-
checksum: 10c0/dd6b767ee0bbd6d84039db12a0fa5a2028160ffbfaba1800695713b46ae974a5f6e08b3356c3195137f8530dcd9dfcb5d5ae1eeff53d0db1e5aad863b619ce3b
9760+
hasown: "npm:^2.0.4"
9761+
mime-types: "npm:^2.1.35"
9762+
checksum: 10c0/43947a77bf0ff45c6ceed789778982d47a3f3e720a74b71721174ebf3310a5f1a8be1d6b38a3ee3688e8a18a2c4273073ec0844cd37efda3eaf46d41c9c318ff
97639763
languageName: node
97649764
linkType: hard
97659765

@@ -10270,6 +10270,15 @@ __metadata:
1027010270
languageName: node
1027110271
linkType: hard
1027210272

10273+
"hasown@npm:^2.0.4":
10274+
version: 2.0.4
10275+
resolution: "hasown@npm:2.0.4"
10276+
dependencies:
10277+
function-bind: "npm:^1.1.2"
10278+
checksum: 10c0/2d8de939e270b70618f8cebb69746620db10617dbb495bc66ddad326955ea24d3ca4af133aff3eb7c1853e0218f867bc2b050ec26fe02e3aea58f880ffc5e506
10279+
languageName: node
10280+
linkType: hard
10281+
1027310282
"hast-util-embedded@npm:^3.0.0":
1027410283
version: 3.0.0
1027510284
resolution: "hast-util-embedded@npm:3.0.0"
@@ -11658,13 +11667,13 @@ __metadata:
1165811667
linkType: hard
1165911668

1166011669
"js-yaml@npm:^4.1.0":
11661-
version: 4.1.1
11662-
resolution: "js-yaml@npm:4.1.1"
11670+
version: 4.2.0
11671+
resolution: "js-yaml@npm:4.2.0"
1166311672
dependencies:
1166411673
argparse: "npm:^2.0.1"
1166511674
bin:
1166611675
js-yaml: bin/js-yaml.js
11667-
checksum: 10c0/561c7d7088c40a9bb53cc75becbfb1df6ae49b34b5e6e5a81744b14ae8667ec564ad2527709d1a6e7d5e5fa6d483aa0f373a50ad98d42fde368ec4a190d4fae7
11676+
checksum: 10c0/1916456c118746603b067d74bbcbb0445d9a1d5e474ad4ae775e7b20525bed902e01d9d97dd0c81fcd8d4f596162309d0eb057f4aa38f3e9647f14075e9dea45
1166811677
languageName: node
1166911678
linkType: hard
1167011679

@@ -13211,7 +13220,7 @@ __metadata:
1321113220
languageName: node
1321213221
linkType: hard
1321313222

13214-
"mime-types@npm:^2.1.12, mime-types@npm:^2.1.27, mime-types@npm:~2.1.17, mime-types@npm:~2.1.24, mime-types@npm:~2.1.34":
13223+
"mime-types@npm:^2.1.27, mime-types@npm:^2.1.35, mime-types@npm:~2.1.17, mime-types@npm:~2.1.24, mime-types@npm:~2.1.34":
1321513224
version: 2.1.35
1321613225
resolution: "mime-types@npm:2.1.35"
1321713226
dependencies:
@@ -17113,15 +17122,15 @@ __metadata:
1711317122
linkType: hard
1711417123

1711517124
"tar@npm:^7.5.2":
17116-
version: 7.5.11
17117-
resolution: "tar@npm:7.5.11"
17125+
version: 7.5.16
17126+
resolution: "tar@npm:7.5.16"
1711817127
dependencies:
1711917128
"@isaacs/fs-minipass": "npm:^4.0.0"
1712017129
chownr: "npm:^3.0.0"
1712117130
minipass: "npm:^7.1.2"
1712217131
minizlib: "npm:^3.1.0"
1712317132
yallist: "npm:^5.0.0"
17124-
checksum: 10c0/b6bb420550ef50ef23356018155e956cd83282c97b6128d8d5cfe5740c57582d806a244b2ef0bf686a74ce526babe8b8b9061527623e935e850008d86d838929
17133+
checksum: 10c0/4f37f3c4bd2ca2755fd736a5df1d573c1a868ec1b1e893346aeafa95ac510f9e2fd1469420bd866cc7904799e5bd4ac62b5d4f03fe27747d6e1e373b44505c5c
1712517134
languageName: node
1712617135
linkType: hard
1712717136

@@ -17223,9 +17232,9 @@ __metadata:
1722317232
linkType: hard
1722417233

1722517234
"tmp@npm:^0.2.4":
17226-
version: 0.2.6
17227-
resolution: "tmp@npm:0.2.6"
17228-
checksum: 10c0/fa5b9bfbe60f70904aba5c96b4970e9158d99867891302d10320fe35eee1e45f42946fded4cf5c8514baa087bebee44419029b7deb227da05a68b5205a12d8ab
17235+
version: 0.2.7
17236+
resolution: "tmp@npm:0.2.7"
17237+
checksum: 10c0/59eb55584f2f07210d3231b6a1f6b5c2b9794d8a7b509c8ee867ed2acad6d2245ee2448b7937b676ffbff3155a70077edde8a69f9d7cf0f90c86a62e8910c357
1722917238
languageName: node
1723017239
linkType: hard
1723117240

‎yarn.lock‎

Lines changed: 24 additions & 41 deletions
Original file line numberDiff line numberDiff line change
@@ -7123,29 +7123,16 @@ __metadata:
71237123
languageName: node
71247124
linkType: hard
71257125

7126-
"form-data@npm:4.0.5, form-data@npm:^4.0.5":
7127-
version: 4.0.5
7128-
resolution: "form-data@npm:4.0.5"
7129-
dependencies:
7130-
asynckit: "npm:^0.4.0"
7131-
combined-stream: "npm:^1.0.8"
7132-
es-set-tostringtag: "npm:^2.1.0"
7133-
hasown: "npm:^2.0.2"
7134-
mime-types: "npm:^2.1.12"
7135-
checksum: 10c0/dd6b767ee0bbd6d84039db12a0fa5a2028160ffbfaba1800695713b46ae974a5f6e08b3356c3195137f8530dcd9dfcb5d5ae1eeff53d0db1e5aad863b619ce3b
7136-
languageName: node
7137-
linkType: hard
7138-
7139-
"form-data@npm:^4.0.4":
7140-
version: 4.0.4
7141-
resolution: "form-data@npm:4.0.4"
7126+
"form-data@npm:^4.0.6":
7127+
version: 4.0.6
7128+
resolution: "form-data@npm:4.0.6"
71427129
dependencies:
71437130
asynckit: "npm:^0.4.0"
71447131
combined-stream: "npm:^1.0.8"
71457132
es-set-tostringtag: "npm:^2.1.0"
7146-
hasown: "npm:^2.0.2"
7147-
mime-types: "npm:^2.1.12"
7148-
checksum: 10c0/373525a9a034b9d57073e55eab79e501a714ffac02e7a9b01be1c820780652b16e4101819785e1e18f8d98f0aee866cc654d660a435c378e16a72f2e7cac9695
7133+
hasown: "npm:^2.0.4"
7134+
mime-types: "npm:^2.1.35"
7135+
checksum: 10c0/43947a77bf0ff45c6ceed789778982d47a3f3e720a74b71721174ebf3310a5f1a8be1d6b38a3ee3688e8a18a2c4273073ec0844cd37efda3eaf46d41c9c318ff
71497136
languageName: node
71507137
linkType: hard
71517138

@@ -7877,6 +7864,15 @@ __metadata:
78777864
languageName: node
78787865
linkType: hard
78797866

7867+
"hasown@npm:^2.0.4":
7868+
version: 2.0.4
7869+
resolution: "hasown@npm:2.0.4"
7870+
dependencies:
7871+
function-bind: "npm:^1.1.2"
7872+
checksum: 10c0/2d8de939e270b70618f8cebb69746620db10617dbb495bc66ddad326955ea24d3ca4af133aff3eb7c1853e0218f867bc2b050ec26fe02e3aea58f880ffc5e506
7873+
languageName: node
7874+
linkType: hard
7875+
78807876
"header-generator@npm:^2.1.41, header-generator@npm:^2.1.76":
78817877
version: 2.1.76
78827878
resolution: "header-generator@npm:2.1.76"
@@ -9099,14 +9095,14 @@ __metadata:
90999095
languageName: node
91009096
linkType: hard
91019097

9102-
"js-yaml@npm:4.1.1, js-yaml@npm:^4.1.0":
9103-
version: 4.1.1
9104-
resolution: "js-yaml@npm:4.1.1"
9098+
"js-yaml@npm:^4.1.0, js-yaml@npm:^4.2.0":
9099+
version: 4.2.0
9100+
resolution: "js-yaml@npm:4.2.0"
91059101
dependencies:
91069102
argparse: "npm:^2.0.1"
91079103
bin:
91089104
js-yaml: bin/js-yaml.js
9109-
checksum: 10c0/561c7d7088c40a9bb53cc75becbfb1df6ae49b34b5e6e5a81744b14ae8667ec564ad2527709d1a6e7d5e5fa6d483aa0f373a50ad98d42fde368ec4a190d4fae7
9105+
checksum: 10c0/1916456c118746603b067d74bbcbb0445d9a1d5e474ad4ae775e7b20525bed902e01d9d97dd0c81fcd8d4f596162309d0eb057f4aa38f3e9647f14075e9dea45
91109106
languageName: node
91119107
linkType: hard
91129108

@@ -10043,7 +10039,7 @@ __metadata:
1004310039
languageName: node
1004410040
linkType: hard
1004510041

10046-
"mime-types@npm:2.1.35, mime-types@npm:^2.1.12, mime-types@npm:^2.1.35, mime-types@npm:~2.1.24, mime-types@npm:~2.1.34":
10042+
"mime-types@npm:2.1.35, mime-types@npm:^2.1.35, mime-types@npm:~2.1.24, mime-types@npm:~2.1.34":
1004710043
version: 2.1.35
1004810044
resolution: "mime-types@npm:2.1.35"
1004910045
dependencies:
@@ -13496,29 +13492,16 @@ __metadata:
1349613492
languageName: node
1349713493
linkType: hard
1349813494

13499-
"tar@npm:7.5.11":
13500-
version: 7.5.11
13501-
resolution: "tar@npm:7.5.11"
13502-
dependencies:
13503-
"@isaacs/fs-minipass": "npm:^4.0.0"
13504-
chownr: "npm:^3.0.0"
13505-
minipass: "npm:^7.1.2"
13506-
minizlib: "npm:^3.1.0"
13507-
yallist: "npm:^5.0.0"
13508-
checksum: 10c0/b6bb420550ef50ef23356018155e956cd83282c97b6128d8d5cfe5740c57582d806a244b2ef0bf686a74ce526babe8b8b9061527623e935e850008d86d838929
13509-
languageName: node
13510-
linkType: hard
13511-
13512-
"tar@npm:^7.4.3, tar@npm:^7.5.4":
13513-
version: 7.5.15
13514-
resolution: "tar@npm:7.5.15"
13495+
"tar@npm:^7.5.16":
13496+
version: 7.5.16
13497+
resolution: "tar@npm:7.5.16"
1351513498
dependencies:
1351613499
"@isaacs/fs-minipass": "npm:^4.0.0"
1351713500
chownr: "npm:^3.0.0"
1351813501
minipass: "npm:^7.1.2"
1351913502
minizlib: "npm:^3.1.0"
1352013503
yallist: "npm:^5.0.0"
13521-
checksum: 10c0/8f039edb1d12fdd7df6c6f9877d125afe9f3da3f5f9317df326fdd090d48793d6998cede1506a1471f3e3a250db270a89dace28005eb5e99c5a9132d704ac956
13504+
checksum: 10c0/4f37f3c4bd2ca2755fd736a5df1d573c1a868ec1b1e893346aeafa95ac510f9e2fd1469420bd866cc7904799e5bd4ac62b5d4f03fe27747d6e1e373b44505c5c
1352213505
languageName: node
1352313506
linkType: hard
1352413507

0 commit comments

Comments
 (0)