fix(security): patch vulnerable transitive packages

This commit is contained in:
Tommaso Casaburi
2026-03-15 17:35:25 +08:00
parent 78556c7f66
commit be44aefd49
2 changed files with 16 additions and 22 deletions
+3 -2
View File
@@ -178,11 +178,12 @@
"cacache": "19.0.1",
"preact": "10.27.3",
"@remix-run/router": "1.23.2",
"undici": "^7.18.2",
"undici": "7.24.0",
"diff": "^8.0.3",
"lodash": "4.17.23",
"seroval": "1.4.1",
"tar": "7.5.10",
"tar": "7.5.11",
"yauzl": "3.2.1",
"serialize-javascript": "7.0.3",
"@tootallnate/once": "3.0.1",
"rollup": "2.80.0",
+13 -20
View File
@@ -7921,13 +7921,6 @@ fd-package-json@^2.0.0:
dependencies:
walk-up-path "^4.0.0"
fd-slicer@~1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/fd-slicer/-/fd-slicer-1.1.0.tgz#25c7c89cb1f9077f8891bbe61d8f390eae256f1e"
integrity sha512-cE1qsB/VwyQozZ+q1dGxR8LBYNZeofhEdUNGSMbQD3Gw2lAzX9Zb3uIU6Ebc/Fmyjo9AWWfnn0AUCHqtevs/8g==
dependencies:
pend "~1.2.0"
fdir@^6.5.0:
version "6.5.0"
resolved "https://registry.yarnpkg.com/fdir/-/fdir-6.5.0.tgz#ed2ab967a331ade62f18d077dae192684d50d350"
@@ -14014,10 +14007,10 @@ tar-stream@^2.1.4:
inherits "^2.0.3"
readable-stream "^3.1.1"
tar@7.5.10, tar@^6.0.5, tar@^6.1.11, tar@^6.1.2, tar@^6.2.1, tar@^7.4.3:
version "7.5.10"
resolved "https://registry.yarnpkg.com/tar/-/tar-7.5.10.tgz#2281541123f5507db38bc6eb22619f4bbaef73ad"
integrity sha512-8mOPs1//5q/rlkNSPcCegA6hiHJYDmSLEI8aMH/CdSQJNWztHC9WHNam5zdQlfpTwB9Xp7IBEsHfV5LKMJGVAw==
tar@7.5.11, tar@^6.0.5, tar@^6.1.11, tar@^6.1.2, tar@^6.2.1, tar@^7.4.3:
version "7.5.11"
resolved "https://registry.yarnpkg.com/tar/-/tar-7.5.11.tgz#1250fae45d98806b36d703b30973fa8e0a6d8868"
integrity sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==
dependencies:
"@isaacs/fs-minipass" "^4.0.0"
chownr "^3.0.0"
@@ -14535,10 +14528,10 @@ undici-types@~7.18.0:
resolved "https://registry.yarnpkg.com/undici-types/-/undici-types-7.18.2.tgz#29357a89e7b7ca4aef3bf0fd3fd0cd73884229e9"
integrity sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==
undici@^7.16.0, undici@^7.18.2, undici@^7.19.0, undici@^7.21.0:
version "7.18.2"
resolved "https://registry.yarnpkg.com/undici/-/undici-7.18.2.tgz#6cf724ef799a67d94fd55adf66b1e184176efcdf"
integrity sha512-y+8YjDFzWdQlSE9N5nzKMT3g4a5UBX1HKowfdXh0uvAnTaqqwqB92Jt4UXBAeKekDs5IaDKyJFR4X1gYVCgXcw==
undici@7.24.0, undici@^7.16.0, undici@^7.19.0, undici@^7.21.0:
version "7.24.0"
resolved "https://registry.yarnpkg.com/undici/-/undici-7.24.0.tgz#c7349cdede0db44226b5930783b11207831a5eaf"
integrity sha512-jxytwMHhsbdpBXxLAcuu0fzlQeXCNnWdDyRHpvWsUl8vd98UwYdl9YTyn8/HcpcJPC3pwUveefsa3zTxyD/ERg==
unicode-canonical-property-names-ecmascript@^2.0.0:
version "2.0.1"
@@ -15355,13 +15348,13 @@ yargs@^17.0.1, yargs@^17.7.1:
y18n "^5.0.5"
yargs-parser "^21.1.1"
yauzl@^2.10.0, yauzl@^2.4.2:
version "2.10.0"
resolved "https://registry.yarnpkg.com/yauzl/-/yauzl-2.10.0.tgz#c7eb17c93e112cb1086fa6d8e51fb0667b79a5f9"
integrity sha512-p4a9I6X6nu6IhoGmBqAcbJy1mlC4j27vEPZX9F4L4/vZT3Lyq1VkFHw/V/PUcB9Buo+DG3iHkT0x3Qya58zc3g==
yauzl@3.2.1, yauzl@^2.10.0, yauzl@^2.4.2:
version "3.2.1"
resolved "https://registry.yarnpkg.com/yauzl/-/yauzl-3.2.1.tgz#d35befb9a0fdd328da41926be895ade2de14dbe7"
integrity sha512-k1isifdbpNSFEHFJ1ZY4YDewv0IH9FR61lDetaRMD3j2ae3bIXGV+7c+LHCqtQGofSd8PIyV4X6+dHMAnSr60A==
dependencies:
buffer-crc32 "~0.2.3"
fd-slicer "~1.1.0"
pend "~1.2.0"
yocto-queue@^0.1.0:
version "0.1.0"