From fd177d4665fd63257d3c63b312abb84e2883d459 Mon Sep 17 00:00:00 2001 From: Jonathan Norris Date: Wed, 12 Aug 2026 09:26:38 -0400 Subject: [PATCH] chore: resolve open dependabot security alerts - postcss ^8.5.12 -> ^8.5.23 (high, alerts #241, #251) - brace-expansion resolutions bumped to ^1.1.18 / ^2.1.4 (high, alerts #243, #248, #249, #250) - ip-address added resolution ^10.3.1 (high/medium, alerts #244, #245, #246) - fast-uri ^3.1.4 -> ^3.1.5 (high, alert #247) - js-yaml resolutions bumped to ^3.15.1 / ^4.3.1 (high, alerts #252, #253) - dompurify ^3.4.12 -> ^3.4.13 (medium, alert #254) - nanoid added resolution ^3.3.17 (high, alerts #257, #258) --- package.json | 18 +++++++------ yarn.lock | 74 ++++++++++++++++++++++++++-------------------------- 2 files changed, 47 insertions(+), 45 deletions(-) diff --git a/package.json b/package.json index f8c86667..6baaad3a 100644 --- a/package.json +++ b/package.json @@ -81,24 +81,26 @@ "axios": "^1.18.0", "ws@^7.3.1": "^7.5.11", "ws@^8.18.0": "^8.21.0", - "postcss": "^8.5.12", + "postcss": "^8.5.23", "shell-quote": "^1.9.0", "joi": "^17.13.4", - "js-yaml@^3.13.1": "^3.15.0", - "js-yaml@^4.1.0": "^4.2.0", + "js-yaml@^3.13.1": "^3.15.1", + "js-yaml@^4.1.0": "^4.3.1", "websocket-driver": "^0.7.5", - "dompurify": "^3.4.12", + "dompurify": "^3.4.13", "form-data": "^4.0.6", "tar": "^7.5.21", "launch-editor": "^2.14.1", "@babel/core": "^7.29.6", "http-proxy-middleware": "^2.0.10", "webpack-dev-server": "^5.2.6", - "fast-uri": "^3.1.4", + "fast-uri": "^3.1.5", "svgo": "^3.3.4", "body-parser": "^1.20.6", - "brace-expansion@^1.1.7": "^1.1.16", - "brace-expansion@^2.0.1": "^2.1.2", - "brace-expansion@^2.0.2": "^2.1.2" + "brace-expansion@^1.1.7": "^1.1.18", + "brace-expansion@^2.0.1": "^2.1.4", + "brace-expansion@^2.0.2": "^2.1.4", + "ip-address": "^10.3.1", + "nanoid": "^3.3.17" } } diff --git a/yarn.lock b/yarn.lock index e879384a..11f93b20 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5452,22 +5452,22 @@ __metadata: languageName: node linkType: hard -"brace-expansion@npm:^1.1.16": - version: 1.1.16 - resolution: "brace-expansion@npm:1.1.16" +"brace-expansion@npm:^1.1.18": + version: 1.1.18 + resolution: "brace-expansion@npm:1.1.18" dependencies: balanced-match: "npm:^1.0.0" concat-map: "npm:0.0.1" - checksum: 10/94498bead66c51536df5b7bf1b0a0e581a5b7f86888be10481d06920c4bd9d976e003b13a3d19fddc733f21a09d162ff72f90e18b2c9d062b15121e973d0e13b + checksum: 10/b55a3c03239b8d2127c7cbb3408c9ad3a556a8c303bf3064df78bfb7c093160fc8f6e0a32e42a850a78eba12f29ccf6ef997690b9acf945d242c56c61c4aa977 languageName: node linkType: hard -"brace-expansion@npm:^2.1.2": - version: 2.1.2 - resolution: "brace-expansion@npm:2.1.2" +"brace-expansion@npm:^2.1.4": + version: 2.1.4 + resolution: "brace-expansion@npm:2.1.4" dependencies: balanced-match: "npm:^1.0.0" - checksum: 10/0e0f9b0df1f0809e9c326470e022eeb24334ddb54c43b1ac39f1d38f3cbaeb940794de1db826f5491843ac00d7932c43f10350a65ccd51fe7d05da627152f204 + checksum: 10/11e18dc39706037331abedbb742af1da733267042f94c0f08487ef1a63cee068c1859f8d5f95523869725191133eb1a69753de457ed4b76b7c187d9ea0646737 languageName: node linkType: hard @@ -6892,15 +6892,15 @@ __metadata: languageName: node linkType: hard -"dompurify@npm:^3.4.12": - version: 3.4.12 - resolution: "dompurify@npm:3.4.12" +"dompurify@npm:^3.4.13": + version: 3.4.13 + resolution: "dompurify@npm:3.4.13" dependencies: "@types/trusted-types": "npm:^2.0.7" dependenciesMeta: "@types/trusted-types": optional: true - checksum: 10/f826b68920887eb75115a162facb42380d1c3fac441548217b30068c9fadeed14f63fa1f7a1d2ab6f63613e5a0f897aa245c9224d4abf7939cd8ae58c04646af + checksum: 10/0db0a309a868a38aca042f606b37446977c35ee4501850a8c1bf2781337d79871daf1f4344bbf5b545f2a8c62e4d4e192c8fd6f1ff49ecec7c865c55a0aefee3 languageName: node linkType: hard @@ -7503,10 +7503,10 @@ __metadata: languageName: node linkType: hard -"fast-uri@npm:^3.1.4": - version: 3.1.4 - resolution: "fast-uri@npm:3.1.4" - checksum: 10/1c1ff8e7b6f7b38e997b1528aa2c97e290e0173d51250bfe4e11a303e454fc297a287555b5cb2ded59dbfce7876855fb15994a1a6b439f2497a2b8926513e397 +"fast-uri@npm:^3.1.5": + version: 3.1.5 + resolution: "fast-uri@npm:3.1.5" + checksum: 10/784bef687ca3ecfb4587a05104a4d41101796f0fec72be47a9abed743b10109e69a24d1ad0854ee7d2705912dc2ca9d93e03d35b65df0a3da0339e05b5d83b5c languageName: node linkType: hard @@ -8596,10 +8596,10 @@ __metadata: languageName: node linkType: hard -"ip-address@npm:^10.0.1": - version: 10.2.0 - resolution: "ip-address@npm:10.2.0" - checksum: 10/12fec399e1af5753ac322e47a6d81a50d3a528b3abb17c09525b2a2edcaedcca628c40520706f7037bc4d8e951b0296c47e7b86d0a8e6e2335c8f0ba4afcfac1 +"ip-address@npm:^10.3.1": + version: 10.5.0 + resolution: "ip-address@npm:10.5.0" + checksum: 10/239645a11ae56f1f8721df22fa852dec51039a0add5371a474ad858810a6b6a4924c9346e467821c4e614bc9b8c8947a58ba1fdfb155a7a30437a440072ffbf5 languageName: node linkType: hard @@ -8985,26 +8985,26 @@ __metadata: languageName: node linkType: hard -"js-yaml@npm:^3.15.0": - version: 3.15.0 - resolution: "js-yaml@npm:3.15.0" +"js-yaml@npm:^3.15.1": + version: 3.15.1 + resolution: "js-yaml@npm:3.15.1" dependencies: argparse: "npm:^1.0.7" esprima: "npm:^4.0.0" bin: js-yaml: bin/js-yaml.js - checksum: 10/2fdf3a1453ed93a8e06d6ca8054c0bec145cf40ab51f305d1071736a03668b95e40f47cfd0239d7d50019b4780a18cdaca3c935def935594c9876964c49f1185 + checksum: 10/905842ce08c18b154ff2c187ff81bb41294cc5dda214331b5d9b8bcf395894e48b00fa37b9d4dd4c3ffec672b7496a94558e3876d3a8ad4d12b06248112e6d92 languageName: node linkType: hard -"js-yaml@npm:^4.2.0": - version: 4.3.0 - resolution: "js-yaml@npm:4.3.0" +"js-yaml@npm:^4.3.1": + version: 4.3.1 + resolution: "js-yaml@npm:4.3.1" dependencies: argparse: "npm:^2.0.1" bin: js-yaml: bin/js-yaml.js - checksum: 10/2bcec3a8118d7f744badeb04e14366578d234a736f353d41fe35d2305e4ce2409a8e041d277f07cd6bbc8aaa12128d650a68ce43247072519bede20962d2126f + checksum: 10/2ce71b5d632abbd77da80447bf860e8a0264e54bffe94840984887d58b023761495b523727547904517a6107a1ef189854b361e0fc44995ee13a84f222d7bd42 languageName: node linkType: hard @@ -10475,12 +10475,12 @@ __metadata: languageName: node linkType: hard -"nanoid@npm:^3.3.12": - version: 3.3.12 - resolution: "nanoid@npm:3.3.12" +"nanoid@npm:^3.3.17": + version: 3.3.18 + resolution: "nanoid@npm:3.3.18" bin: nanoid: bin/nanoid.cjs - checksum: 10/6eec280694e2088d18fb802b1e3bfc4578e27b665b7ecfbe36c7356612fea2f814277056e671e2a1529dff551588a652efdc0bfa39f8a3185bc2247be311872e + checksum: 10/1b3b4fdac831b92b56d1dbe8b1e63a372432faf86ea383134e3b53141ef8108a60b7f84343b5cefecac9550bb74edf8164da93ea07d1c4f757039bc75d8a5d9e languageName: node linkType: hard @@ -12394,14 +12394,14 @@ __metadata: languageName: node linkType: hard -"postcss@npm:^8.5.12": - version: 8.5.15 - resolution: "postcss@npm:8.5.15" +"postcss@npm:^8.5.23": + version: 8.5.26 + resolution: "postcss@npm:8.5.26" dependencies: - nanoid: "npm:^3.3.12" + nanoid: "npm:^3.3.17" picocolors: "npm:^1.1.1" source-map-js: "npm:^1.2.1" - checksum: 10/d02ad19eb1e0fa53a1229ee6d53807eb88f903f2b9a8cac66993367f3ac7dd3b97238c783a54ccbf4145f82f6ca9a5cbd58f089846285d759c8a3259fbea8318 + checksum: 10/842a624f822f77cb37264cc24f0cf97c0a69dd8d6f7b4a6d76b5a8dc95355899dd044f33a2d4e890da858293de570fce18dff453f3b629ff14cac67a3591895a languageName: node linkType: hard