fix(deps): bump vulnerable transitive dependencies for Dependabot alerts

Resolve 17 open alerts by pinning patched versions of vite, undici, ws, protobufjs, tar, js-yaml, @babel/core, form-data, and tmp.
This commit is contained in:
Tommaso Casaburi
2026-06-23 17:28:24 +07:00
parent ca5582cffa
commit 7f193b479b
2 changed files with 217 additions and 217 deletions
+10 -8
View File
@@ -176,7 +176,7 @@
"react-grab": "0.1.37",
"react-scan": "0.5.3",
"stream-browserify": "3.0.0",
"vite": "8.0.5",
"vite": "8.0.16",
"vite-plugin-pwa": "1.2.0",
"vitest": "4.1.0",
"wait-on": "9.0.3",
@@ -191,26 +191,28 @@
"@libp2p/gossipsub": "15.0.23",
"@libp2p/kad-dht": "16.2.6",
"brace-expansion@npm:^5.0.2": "5.0.6",
"protobufjs": "7.5.8",
"protobufjs": "7.6.3",
"@protobufjs/utf8": "1.1.1",
"@babel/core": "7.29.6",
"@babel/plugin-transform-modules-systemjs": "7.29.4",
"axios": "1.16.0",
"js-yaml": "4.1.1",
"form-data": "4.0.6",
"js-yaml": "4.2.0",
"baseline-browser-mapping": "^2.9.11",
"vite": "8.0.5",
"vite": "8.0.16",
"qs": "6.15.0",
"mdast-util-to-hast": "12.3.0",
"node-forge": "1.4.0",
"glob": "10.5.0",
"tmp": "0.2.6",
"tmp": "0.2.7",
"elliptic": "6.6.1",
"ws": "8.20.1",
"ws": "8.21.0",
"jose": "4.15.9",
"sharp": "0.34.5",
"cacache": "19.0.1",
"preact": "10.27.3",
"@remix-run/router": "1.23.2",
"undici": "7.24.0",
"undici": "7.28.0",
"diff": "^8.0.3",
"lodash": "4.18.0",
"@xmldom/xmldom": "0.8.13",
@@ -226,7 +228,7 @@
"minimatch@npm:^3.0.5": "3.1.4",
"seroval": "1.4.1",
"smol-toml": "1.6.1",
"tar": "7.5.11",
"tar": "7.5.16",
"yauzl": "3.2.1",
"serialize-javascript": "7.0.5",
"esbuild": "0.28.1",