Migrations/bookorbit
1
0
Fork 0
mirror of https://github.com/bookorbit/bookorbit.git synced 2026-11-03 00:11:37 -06:00
Code Issues Packages Projects Releases Wiki Activity

security(deps): patch container dependency vulnerabilities

Browse Source 
Raise transitive dependency floors so image builds no longer ship versions rejected by the HIGH and CRITICAL Trivy gate.
This commit is contained in:
neon
2026-09-30 22:23:42 +00:00
parent 05a55d6b62
commit 324059ef16
2 changed files with 27 additions and 67 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pnpm-lock.yaml
Generated
+25 -66
View File
@@ -11,7 +11,8 @@ overrides:
'@typescript-eslint/eslint-plugin': ^8.71.0
'@typescript-eslint/parser': ^8.71.0
'@typescript-eslint/utils': ^8.71.0
brace-expansion@>=5.0.0 <5.0.9: ^5.0.9
brace-expansion@>=2.0.0 <2.1.6: ^2.1.6
brace-expansion@>=5.0.0 <5.0.11: ^5.0.11
engine.io: ^6.6.7
esbuild: ^0.28.2
fastify: ^5.10.0
@@ -3983,9 +3984,6 @@ packages:
'@types/ws@8.18.1':
resolution: {integrity: sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==}
'@types/ws@8.18.2':
resolution: {integrity: sha512-67MQl+fpWKVTT1NYdnmo3U4sc/xPo/zQBncVnI74qmQa0z/b+1g6iYqNmGCPbxO+zz2aklb08a0oHfegiVd0/w==}
'@typescript-eslint/eslint-plugin@8.71.0':
resolution: {integrity: sha512-pqcS9c1HxZTHt7End4nXqd0s5lJrrFzrgCkKFJrsbUnaL6M3+6oBFZaslg6Gjsl3argl2DDRFROnXARaZ2e4Nw==}
engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
@@ -4665,14 +4663,14 @@ packages:
bottleneck@2.19.5:
resolution: {integrity: sha512-VHiNCbI1lKdl44tGrhNfU3lup0Tj/ZBMJB5/2ZbNXRCPuRCO7ed2mgcK4r17y+KB2EfuYuRaVlwNbAeaWGSpbw==}
brace-expansion@1.1.16:
resolution: {integrity: sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==}
brace-expansion@1.1.21:
resolution: {integrity: sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==}
brace-expansion@2.1.4:
resolution: {integrity: sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==}
brace-expansion@2.1.7:
resolution: {integrity: sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==}
brace-expansion@5.0.9:
resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==}
brace-expansion@5.0.12:
resolution: {integrity: sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==}
engines: {node: 20 || >=22}
braces@3.0.3:
@@ -5372,10 +5370,6 @@ packages:
resolution: {integrity: sha512-z34mGpLoY/82ZbkX1LqGMIaf3wjVMPL6gVC681QDqnmzJ26synI8qAE32P+a7UazmpJZ8UGrFIeAavgRfXzYrg==}
engines: {node: '>=10.2.0'}
engine.io@6.6.9:
resolution: {integrity: sha512-clKkw4C7nJ22mGgoVcCg6V/W/TxdNyIOTr89k2ONZu81qqkddPFDF0LXcbAwhzPD8DjkiRCjzuiO6Y+fkpD4vg==}
engines: {node: '>=10.2.0'}
enhanced-resolve@5.24.3:
resolution: {integrity: sha512-PwKooW9JUzh5chmYfHM3IQl5OkK2u2Nm011MgeZrss3JmFraUx/fqrf78kk8GUMYoibx/14MdwTl/1WKkG7TpQ==}
engines: {node: '>=10.13.0'}
@@ -8459,12 +8453,12 @@ packages:
undici-types@8.9.0:
resolution: {integrity: sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg==}
undici@6.28.0:
resolution: {integrity: sha512-LIY910g9TI13YS95lrMFrs8Rm/u/irgHeTWoKCoteeJ04CUJ92eEfj0rVn+7VKMPBpUPiUoBKfhNyLI23EE/KA==}
undici@6.29.0:
resolution: {integrity: sha512-R+RODBqp6i2pPflGdq+xIOUkl+RNfGgHwoinecKu/JCuf2uO06cOKoDbI2P7Dn6KcswdKwrczbU6IYJ6K8X+wg==}
engines: {node: '>=18.17'}
undici@7.29.0:
resolution: {integrity: sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==}
undici@7.30.0:
resolution: {integrity: sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==}
engines: {node: '>=20.18.1'}
undici@8.11.2:
@@ -8989,18 +8983,6 @@ packages:
utf-8-validate:
optional: true
ws@8.22.0:
resolution: {integrity: sha512-Ydggc987+RO0AnWtZ/7Wq9FtNvcrL1b/RO0ud9mWjUPgDrsAAwQSF51sm2hm1XofbU/4jkpGEsLFsZZxU+1DOg==}
engines: {node: '>=10.0.0'}
peerDependencies:
bufferutil: ^4.0.1
utf-8-validate: '>=5.0.2'
peerDependenciesMeta:
bufferutil:
optional: true
utf-8-validate:
optional: true
wsl-utils@0.3.1:
resolution: {integrity: sha512-g/eziiSUNBSsdDJtCLB8bdYEUMj4jR7AGeUo96p/3dTafgjHhpF4RiCFPiRILwjQoDXx5MqkBr4fwWtR3Ky4Wg==}
engines: {node: '>=20'}
@@ -9103,7 +9085,7 @@ snapshots:
'@actions/http-client@4.0.1':
dependencies:
tunnel: 0.0.6
undici: 6.28.0
undici: 6.29.0
'@actions/io@3.0.2': {}
@@ -11643,7 +11625,7 @@ snapshots:
p-filter: 4.1.0
semantic-release: 25.0.9(supports-color@10.2.2)(typescript@6.0.3)
tinyglobby: 0.2.17
undici: 7.29.0
undici: 7.30.0
url-join: 5.0.0
transitivePeerDependencies:
- kerberos
@@ -12222,10 +12204,6 @@ snapshots:
dependencies:
'@types/node': 26.6.3
'@types/ws@8.18.2':
dependencies:
'@types/node': 26.6.3
'@typescript-eslint/eslint-plugin@8.71.0(@typescript-eslint/parser@8.71.0(eslint@10.11.0(jiti@2.7.0)(supports-color@10.2.2))(supports-color@10.2.2)(typescript@6.0.3))(eslint@10.11.0(jiti@2.7.0)(supports-color@10.2.2))(supports-color@10.2.2)(typescript@6.0.3)':
dependencies:
'@eslint-community/regexpp': 4.12.2
@@ -13022,16 +13000,16 @@ snapshots:
bottleneck@2.19.5: {}
brace-expansion@1.1.16:
brace-expansion@1.1.21:
dependencies:
balanced-match: 1.0.2
concat-map: 0.0.1
brace-expansion@2.1.4:
brace-expansion@2.1.7:
dependencies:
balanced-match: 1.0.2
brace-expansion@5.0.9:
brace-expansion@5.0.12:
dependencies:
balanced-match: 4.0.4
@@ -13153,7 +13131,7 @@ snapshots:
parse5: 7.3.0
parse5-htmlparser2-tree-adapter: 7.1.0
parse5-parser-stream: 7.1.2
undici: 7.29.0
undici: 7.30.0
whatwg-mimetype: 4.0.0
chokidar@4.0.3:
@@ -13647,28 +13625,11 @@ snapshots:
engine.io-parser@5.2.3: {}
engine.io@6.6.11(supports-color@10.2.2):
dependencies:
'@types/cors': 2.8.19
'@types/node': 26.6.3
'@types/ws': 8.18.2
accepts: 1.3.8
cookie: 0.7.2
cors: 2.8.6
debug: 4.4.3(supports-color@10.2.2)
engine.io-parser: 5.2.3
ws: 8.22.0
transitivePeerDependencies:
- bufferutil
- supports-color
- utf-8-validate
engine.io@6.6.9(supports-color@10.2.2):
dependencies:
'@types/cors': 2.8.19
'@types/node': 26.6.3
'@types/ws': 8.18.1
accepts: 1.3.8
base64id: 2.0.0
cookie: 0.7.2
cors: 2.8.6
debug: 4.4.3(supports-color@10.2.2)
@@ -15215,19 +15176,19 @@ snapshots:
minimatch@10.2.6:
dependencies:
brace-expansion: 5.0.9
brace-expansion: 5.0.12
minimatch@3.1.5:
dependencies:
brace-expansion: 1.1.16
brace-expansion: 1.1.21
minimatch@5.1.9:
dependencies:
brace-expansion: 2.1.4
brace-expansion: 2.1.7
minimatch@9.0.9:
dependencies:
brace-expansion: 2.1.4
brace-expansion: 2.1.7
minimist@1.2.8: {}
@@ -16389,7 +16350,7 @@ snapshots:
accepts: 1.3.8
cors: 2.8.6
debug: 4.4.3(supports-color@10.2.2)
engine.io: 6.6.9(supports-color@10.2.2)
engine.io: 6.6.11(supports-color@10.2.2)
socket.io-adapter: 2.5.8(supports-color@10.2.2)
socket.io-parser: 4.2.7(supports-color@10.2.2)
transitivePeerDependencies:
@@ -16980,9 +16941,9 @@ snapshots:
undici-types@8.9.0: {}
undici@6.28.0: {}
undici@6.29.0: {}
undici@7.29.0: {}
undici@7.30.0: {}
undici@8.11.2: {}
@@ -17536,8 +17497,6 @@ snapshots:
ws@8.21.3: {}
ws@8.22.0: {}
wsl-utils@0.3.1:
dependencies:
is-wsl: 3.1.1
pnpm-workspace.yaml
+2 -1
View File
@@ -9,7 +9,8 @@ overrides:
"@typescript-eslint/eslint-plugin": ^8.71.0
"@typescript-eslint/parser": ^8.71.0
"@typescript-eslint/utils": ^8.71.0
"brace-expansion@>=5.0.0 <5.0.9": ^5.0.9
"brace-expansion@>=2.0.0 <2.1.6": ^2.1.6
"brace-expansion@>=5.0.0 <5.0.11": ^5.0.11
engine.io: ^6.6.7
esbuild: ^0.28.2
fastify: ^5.10.0