mirror of
https://github.com/snapotter-hq/SnapOtter.git
synced 2026-08-03 07:46:42 +02:00
- dompurify >=3.4.11 (runtime SVG sanitization) - nanoid 4.x -> >=5.0.9 (vulnerable 4.0.x transitive; 3.x/5.x kept) - undici >=8.5.0 (dev-only: jsdom/vitest/semantic-release; removes 8.4.1) - rembg 2.0.69 -> 2.0.75 (Python AI sidecar, CPU + GPU) js-yaml is already >=4.2.0; the residual 3.14.2 is gray-matter's build-time pin (no 3.x patch exists). typecheck + build pass.