mirror of
https://github.com/bitsocialnet/5chan.git
synced 2026-08-03 07:41:04 +02:00
fix(deps): bump vulnerable transitive dependencies for Dependabot alerts
Resolve 17 open alerts by pinning patched versions of vite, undici, ws, protobufjs, tar, js-yaml, @babel/core, form-data, and tmp.
This commit is contained in:
+10
-8
@@ -176,7 +176,7 @@
|
||||
"react-grab": "0.1.37",
|
||||
"react-scan": "0.5.3",
|
||||
"stream-browserify": "3.0.0",
|
||||
"vite": "8.0.5",
|
||||
"vite": "8.0.16",
|
||||
"vite-plugin-pwa": "1.2.0",
|
||||
"vitest": "4.1.0",
|
||||
"wait-on": "9.0.3",
|
||||
@@ -191,26 +191,28 @@
|
||||
"@libp2p/gossipsub": "15.0.23",
|
||||
"@libp2p/kad-dht": "16.2.6",
|
||||
"brace-expansion@npm:^5.0.2": "5.0.6",
|
||||
"protobufjs": "7.5.8",
|
||||
"protobufjs": "7.6.3",
|
||||
"@protobufjs/utf8": "1.1.1",
|
||||
"@babel/core": "7.29.6",
|
||||
"@babel/plugin-transform-modules-systemjs": "7.29.4",
|
||||
"axios": "1.16.0",
|
||||
"js-yaml": "4.1.1",
|
||||
"form-data": "4.0.6",
|
||||
"js-yaml": "4.2.0",
|
||||
"baseline-browser-mapping": "^2.9.11",
|
||||
"vite": "8.0.5",
|
||||
"vite": "8.0.16",
|
||||
"qs": "6.15.0",
|
||||
"mdast-util-to-hast": "12.3.0",
|
||||
"node-forge": "1.4.0",
|
||||
"glob": "10.5.0",
|
||||
"tmp": "0.2.6",
|
||||
"tmp": "0.2.7",
|
||||
"elliptic": "6.6.1",
|
||||
"ws": "8.20.1",
|
||||
"ws": "8.21.0",
|
||||
"jose": "4.15.9",
|
||||
"sharp": "0.34.5",
|
||||
"cacache": "19.0.1",
|
||||
"preact": "10.27.3",
|
||||
"@remix-run/router": "1.23.2",
|
||||
"undici": "7.24.0",
|
||||
"undici": "7.28.0",
|
||||
"diff": "^8.0.3",
|
||||
"lodash": "4.18.0",
|
||||
"@xmldom/xmldom": "0.8.13",
|
||||
@@ -226,7 +228,7 @@
|
||||
"minimatch@npm:^3.0.5": "3.1.4",
|
||||
"seroval": "1.4.1",
|
||||
"smol-toml": "1.6.1",
|
||||
"tar": "7.5.11",
|
||||
"tar": "7.5.16",
|
||||
"yauzl": "3.2.1",
|
||||
"serialize-javascript": "7.0.5",
|
||||
"esbuild": "0.28.1",
|
||||
|
||||
Reference in New Issue
Block a user