From 5316b97ec251ba1c380092487c7086159bd616e4 Mon Sep 17 00:00:00 2001 From: ghiscoding Date: Sat, 25 Jul 2026 15:29:35 -0400 Subject: [PATCH] chore(deps): update some dependencies to resolve CVEs --- pnpm-lock.yaml | 130 ++++++++++++++++++++++---------------------- pnpm-workspace.yaml | 4 -- 2 files changed, 64 insertions(+), 70 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 43eafe0..fde8605 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -25,10 +25,6 @@ catalogs: specifier: ^8.1.4 version: 8.1.4 -overrides: - brace-expansion: ^5.0.8 - immutable: ^5.1.9 - importers: .: @@ -38,10 +34,10 @@ importers: version: 2.5.5 '@lerna-lite/cli': specifier: ^5.4.2 - version: 5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@lerna-lite/version@5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5) + version: 5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)(supports-color@7.2.0))(@lerna-lite/version@5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)(supports-color@7.2.0))(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5) '@lerna-lite/publish': specifier: ^5.4.2 - version: 5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1) + version: 5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)(supports-color@7.2.0) '@types/node': specifier: ^25.9.5 version: 25.9.5 @@ -1348,8 +1344,8 @@ packages: resolution: {integrity: sha512-dkEJPVvun4FryqBmZ5KhDo0K9iDXAwn08tMLDinNdRBNPcYEDiWYysLcc6k3mjTMlbP9KyylvRpd4wFtwrT9rw==} engines: {node: ^20.17.0 || >=22.9.0} - nanoid@3.3.15: - resolution: {integrity: sha512-y7Wygv/7mEOvxTuEQDB8StXdMRBWf1kR/tlhAzBRUFkB2jfcLOAxO/SHmOO2zgz1pVgK29/kyupn059/bCHdjA==} + nanoid@3.3.16: + resolution: {integrity: sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==} engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} hasBin: true @@ -1475,8 +1471,8 @@ packages: resolution: {integrity: sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==} engines: {node: '>=4'} - postcss@8.5.16: - resolution: {integrity: sha512-vuwillviilfKZsg0VGj5R/YwwcHx4SLsIOI/7K6mQkWx+l5cUHTjj5g0AasTBcyXsbfTgrwsUNmVUb5xVwyPwg==} + postcss@8.5.22: + resolution: {integrity: sha512-KBDEIpLrvpv16pp3K0Fw+UCoZfopFjjgeB+0tA/aaThfEE74kKDLrgg603YvOWJyg3+WYtyq3xYsQWsIyZlPqQ==} engines: {node: ^10 || ^12 || >=14} proc-log@6.1.0: @@ -1993,7 +1989,7 @@ snapshots: '@jridgewell/resolve-uri': 3.1.2 '@jridgewell/sourcemap-codec': 1.5.5 - '@lerna-lite/cli@5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@lerna-lite/version@5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5)': + '@lerna-lite/cli@5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)(supports-color@7.2.0))(@lerna-lite/version@5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)(supports-color@7.2.0))(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5)': dependencies: '@lerna-lite/core': 5.4.2(@types/node@25.9.5) '@lerna-lite/init': 5.4.2(@types/node@25.9.5) @@ -2002,8 +1998,8 @@ snapshots: import-local: 3.2.0 yargs: 18.0.0 optionalDependencies: - '@lerna-lite/publish': 5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1) - '@lerna-lite/version': 5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5)(conventional-commits-filter@6.0.1) + '@lerna-lite/publish': 5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)(supports-color@7.2.0) + '@lerna-lite/version': 5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)(supports-color@7.2.0))(@types/node@25.9.5)(conventional-commits-filter@6.0.1) transitivePeerDependencies: - '@types/node' @@ -2039,21 +2035,21 @@ snapshots: fast-string-width: 3.0.2 signal-exit: 4.1.0 - '@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)': + '@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)(supports-color@7.2.0)': dependencies: - '@lerna-lite/cli': 5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@lerna-lite/version@5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5) + '@lerna-lite/cli': 5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)(supports-color@7.2.0))(@lerna-lite/version@5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)(supports-color@7.2.0))(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5) '@lerna-lite/core': 5.4.2(@types/node@25.9.5) '@lerna-lite/npmlog': 5.4.1 - '@lerna-lite/version': 5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5)(conventional-commits-filter@6.0.1) - '@npmcli/arborist': 9.9.0 + '@lerna-lite/version': 5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)(supports-color@7.2.0))(@types/node@25.9.5)(conventional-commits-filter@6.0.1) + '@npmcli/arborist': 9.9.0(supports-color@7.2.0) '@npmcli/package-json': 7.0.5 ci-info: 4.4.0 - libnpmaccess: 10.0.3 - libnpmpublish: 11.2.0 + libnpmaccess: 10.0.3(supports-color@7.2.0) + libnpmpublish: 11.2.0(supports-color@7.2.0) npm-package-arg: 13.0.2 npm-packlist: 10.0.4 - npm-registry-fetch: 19.1.1 - pacote: 21.5.1 + npm-registry-fetch: 19.1.1(supports-color@7.2.0) + pacote: 21.5.1(supports-color@7.2.0) semver: 7.8.5 ssri: 13.0.1 tar: 7.5.21 @@ -2066,11 +2062,11 @@ snapshots: - conventional-commits-filter - supports-color - '@lerna-lite/version@5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5)(conventional-commits-filter@6.0.1)': + '@lerna-lite/version@5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)(supports-color@7.2.0))(@types/node@25.9.5)(conventional-commits-filter@6.0.1)': dependencies: '@conventional-changelog/git-client': 3.1.0(conventional-commits-filter@6.0.1)(conventional-commits-parser@7.1.0) '@conventional-changelog/template': 1.2.1 - '@lerna-lite/cli': 5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@lerna-lite/version@5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5) + '@lerna-lite/cli': 5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)(supports-color@7.2.0))(@lerna-lite/version@5.4.2(@lerna-lite/publish@5.4.2(@types/node@25.9.5)(conventional-commits-filter@6.0.1)(supports-color@7.2.0))(@types/node@25.9.5)(conventional-commits-filter@6.0.1))(@types/node@25.9.5) '@lerna-lite/core': 5.4.2(@types/node@25.9.5) '@lerna-lite/npmlog': 5.4.1 '@octokit/plugin-enterprise-rest': 6.0.1 @@ -2102,24 +2098,24 @@ snapshots: '@tybys/wasm-util': 0.10.3 optional: true - '@npmcli/agent@4.0.2': + '@npmcli/agent@4.0.2(supports-color@7.2.0)': dependencies: agent-base: 7.1.4 - http-proxy-agent: 7.0.2 - https-proxy-agent: 7.0.6 + http-proxy-agent: 7.0.2(supports-color@7.2.0) + https-proxy-agent: 7.0.6(supports-color@7.2.0) lru-cache: 11.5.1 - socks-proxy-agent: 8.0.5 + socks-proxy-agent: 8.0.5(supports-color@7.2.0) transitivePeerDependencies: - supports-color - '@npmcli/arborist@9.9.0': + '@npmcli/arborist@9.9.0(supports-color@7.2.0)': dependencies: '@gar/promise-retry': 1.0.3 '@isaacs/string-locale-compare': 1.1.0 '@npmcli/fs': 5.0.0 '@npmcli/installed-package-contents': 4.0.0 '@npmcli/map-workspaces': 5.0.3 - '@npmcli/metavuln-calculator': 9.0.3 + '@npmcli/metavuln-calculator': 9.0.3(supports-color@7.2.0) '@npmcli/name-from-folder': 4.0.0 '@npmcli/node-gyp': 5.0.0 '@npmcli/package-json': 7.0.5 @@ -2137,8 +2133,8 @@ snapshots: npm-install-checks: 8.0.0 npm-package-arg: 13.0.2 npm-pick-manifest: 11.0.3 - npm-registry-fetch: 19.1.1 - pacote: 21.5.1 + npm-registry-fetch: 19.1.1(supports-color@7.2.0) + pacote: 21.5.1(supports-color@7.2.0) parse-conflict-json: 5.0.1 proc-log: 6.1.0 proggy: 4.0.0 @@ -2178,11 +2174,11 @@ snapshots: glob: 13.0.6 minimatch: 10.2.5 - '@npmcli/metavuln-calculator@9.0.3': + '@npmcli/metavuln-calculator@9.0.3(supports-color@7.2.0)': dependencies: cacache: 20.0.4 json-parse-even-better-errors: 5.0.0 - pacote: 21.5.1 + pacote: 21.5.1(supports-color@7.2.0) proc-log: 6.1.0 semver: 7.8.5 transitivePeerDependencies: @@ -2409,21 +2405,21 @@ snapshots: '@sigstore/protobuf-specs@0.5.1': {} - '@sigstore/sign@4.1.1': + '@sigstore/sign@4.1.1(supports-color@7.2.0)': dependencies: '@gar/promise-retry': 1.0.3 '@sigstore/bundle': 4.0.0 '@sigstore/core': 3.2.1 '@sigstore/protobuf-specs': 0.5.1 - make-fetch-happen: 15.0.6 + make-fetch-happen: 15.0.6(supports-color@7.2.0) proc-log: 6.1.0 transitivePeerDependencies: - supports-color - '@sigstore/tuf@4.0.2': + '@sigstore/tuf@4.0.2(supports-color@7.2.0)': dependencies: '@sigstore/protobuf-specs': 0.5.1 - tuf-js: 4.1.0 + tuf-js: 4.1.0(supports-color@7.2.0) transitivePeerDependencies: - supports-color @@ -2692,9 +2688,11 @@ snapshots: cssesc@3.0.0: {} - debug@4.4.3: + debug@4.4.3(supports-color@7.2.0): dependencies: ms: 2.1.3 + optionalDependencies: + supports-color: 7.2.0 detect-indent@7.0.2: {} @@ -2826,17 +2824,17 @@ snapshots: http-cache-semantics@4.2.0: {} - http-proxy-agent@7.0.2: + http-proxy-agent@7.0.2(supports-color@7.2.0): dependencies: agent-base: 7.1.4 - debug: 4.4.3 + debug: 4.4.3(supports-color@7.2.0) transitivePeerDependencies: - supports-color - https-proxy-agent@7.0.6: + https-proxy-agent@7.0.6(supports-color@7.2.0): dependencies: agent-base: 7.1.4 - debug: 4.4.3 + debug: 4.4.3(supports-color@7.2.0) transitivePeerDependencies: - supports-color @@ -2912,22 +2910,22 @@ snapshots: just-diff@6.0.2: {} - libnpmaccess@10.0.3: + libnpmaccess@10.0.3(supports-color@7.2.0): dependencies: npm-package-arg: 13.0.2 - npm-registry-fetch: 19.1.1 + npm-registry-fetch: 19.1.1(supports-color@7.2.0) transitivePeerDependencies: - supports-color - libnpmpublish@11.2.0: + libnpmpublish@11.2.0(supports-color@7.2.0): dependencies: '@npmcli/package-json': 7.0.5 ci-info: 4.4.0 npm-package-arg: 13.0.2 - npm-registry-fetch: 19.1.1 + npm-registry-fetch: 19.1.1(supports-color@7.2.0) proc-log: 6.1.0 semver: 7.8.5 - sigstore: 4.1.1 + sigstore: 4.1.1(supports-color@7.2.0) ssri: 13.0.1 transitivePeerDependencies: - supports-color @@ -3003,10 +3001,10 @@ snapshots: dependencies: semver: 7.8.5 - make-fetch-happen@15.0.6: + make-fetch-happen@15.0.6(supports-color@7.2.0): dependencies: '@gar/promise-retry': 1.0.3 - '@npmcli/agent': 4.0.2 + '@npmcli/agent': 4.0.2(supports-color@7.2.0) '@npmcli/redact': 4.0.0 cacache: 20.0.4 http-cache-semantics: 4.2.0 @@ -3070,7 +3068,7 @@ snapshots: mute-stream@3.0.0: {} - nanoid@3.3.15: {} + nanoid@3.3.16: {} native-copyfiles@2.0.3: dependencies: @@ -3130,11 +3128,11 @@ snapshots: npm-package-arg: 13.0.2 semver: 7.8.5 - npm-registry-fetch@19.1.1: + npm-registry-fetch@19.1.1(supports-color@7.2.0): dependencies: '@npmcli/redact': 4.0.0 jsonparse: 1.3.1 - make-fetch-happen: 15.0.6 + make-fetch-happen: 15.0.6(supports-color@7.2.0) minipass: 7.1.3 minipass-fetch: 5.0.2 minizlib: 3.1.0 @@ -3157,7 +3155,7 @@ snapshots: p-try@2.2.0: {} - pacote@21.5.1: + pacote@21.5.1(supports-color@7.2.0): dependencies: '@gar/promise-retry': 1.0.3 '@npmcli/git': 7.0.2 @@ -3171,9 +3169,9 @@ snapshots: npm-package-arg: 13.0.2 npm-packlist: 10.0.4 npm-pick-manifest: 11.0.3 - npm-registry-fetch: 19.1.1 + npm-registry-fetch: 19.1.1(supports-color@7.2.0) proc-log: 6.1.0 - sigstore: 4.1.1 + sigstore: 4.1.1(supports-color@7.2.0) ssri: 13.0.1 tar: 7.5.21 transitivePeerDependencies: @@ -3221,9 +3219,9 @@ snapshots: cssesc: 3.0.0 util-deprecate: 1.0.2 - postcss@8.5.16: + postcss@8.5.22: dependencies: - nanoid: 3.3.15 + nanoid: 3.3.16 picocolors: 1.1.1 source-map-js: 1.2.1 @@ -3291,23 +3289,23 @@ snapshots: signal-exit@4.1.0: {} - sigstore@4.1.1: + sigstore@4.1.1(supports-color@7.2.0): dependencies: '@sigstore/bundle': 4.0.0 '@sigstore/core': 3.2.1 '@sigstore/protobuf-specs': 0.5.1 - '@sigstore/sign': 4.1.1 - '@sigstore/tuf': 4.0.2 + '@sigstore/sign': 4.1.1(supports-color@7.2.0) + '@sigstore/tuf': 4.0.2(supports-color@7.2.0) '@sigstore/verify': 3.1.1 transitivePeerDependencies: - supports-color smart-buffer@4.2.0: {} - socks-proxy-agent@8.0.5: + socks-proxy-agent@8.0.5(supports-color@7.2.0): dependencies: agent-base: 7.1.4 - debug: 4.4.3 + debug: 4.4.3(supports-color@7.2.0) socks: 2.8.9 transitivePeerDependencies: - supports-color @@ -3403,11 +3401,11 @@ snapshots: tslib@2.8.1: optional: true - tuf-js@4.1.0: + tuf-js@4.1.0(supports-color@7.2.0): dependencies: '@tufjs/models': 4.1.0 - debug: 4.4.3 - make-fetch-happen: 15.0.6 + debug: 4.4.3(supports-color@7.2.0) + make-fetch-happen: 15.0.6(supports-color@7.2.0) transitivePeerDependencies: - supports-color @@ -3432,7 +3430,7 @@ snapshots: dependencies: lightningcss: 1.32.0 picomatch: 4.0.5 - postcss: 8.5.16 + postcss: 8.5.22 rolldown: 1.1.5 tinyglobby: 0.2.17 optionalDependencies: diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 2fcaa67..b360995 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -18,7 +18,3 @@ minimumReleaseAge: 2880 # 2 days in minutes minimumReleaseAgeExclude: # exclude packages that I personally maintain and are safe to use on the same day - '@lerna-lite/*' - -overrides: - brace-expansion: ^5.0.8 - immutable: ^5.1.9