External/SnapOtter
1
0
Fork 0
mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

chore(deps): patch vulnerable dependencies (Dependabot/CodeQL)

Browse Source 
- dompurify >=3.4.11 (runtime SVG sanitization)
- nanoid 4.x -> >=5.0.9 (vulnerable 4.0.x transitive; 3.x/5.x kept)
- undici >=8.5.0 (dev-only: jsdom/vitest/semantic-release; removes 8.4.1)
- rembg 2.0.69 -> 2.0.75 (Python AI sidecar, CPU + GPU)

js-yaml is already >=4.2.0; the residual 3.14.2 is gray-matter's build-time
pin (no 3.x patch exists). typecheck + build pass.
This commit is contained in:
SnapOtter
2026-06-21 11:59:26 +08:00
parent ae4fc1decf
commit f21667db67
4 changed files with 30 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files
package.json
+4 -1
View File
@@ -113,7 +113,10 @@
"gray-matter>js-yaml": "^3.14.1",
"qs": ">=6.15.2",
"uuid": ">=11.1.1",
"yaml": ">=2.8.3"
"yaml": ">=2.8.3",
"dompurify": ">=3.4.11",
"nanoid@4": ">=5.0.9",
"undici": ">=8.5.0"
}
},
"dependencies": {