Migrations/bookorbit
1
0
Fork 0
mirror of https://github.com/bookorbit/bookorbit.git synced 2026-11-03 00:11:37 -06:00
Code Issues Packages Projects Releases Wiki Activity

security(deps): update dependencies and rebuild kepubify with go 1.27.2

Browse Source 
Bump every direct dependency to its newest same-major release and move the
node base image to 26.11.1, which invalidates the cached apk layer and picks
up tiff 4.7.2 for CVE-2026-4775. Rebuild all six kepubify binaries from the
pinned upstream commit with Go 1.27.2 for CVE-2026-78667, CVE-2026-78669 and
CVE-2026-97031, keeping v4-dev so rendition hashes stay stable.
This commit is contained in:
neon
2026-10-11 05:19:04 +00:00
parent e4843e4aa1
commit c37821782a
12 changed files with 1793 additions and 1844 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+1 -1
View File
@@ -1,4 +1,4 @@
ARG NODE_IMAGE=node:26.8.1-alpine3.23@sha256:871eb674ad6e692c91330a8959f1ce2f80ba3f445cdc54e306869d2ea265e42d ARG NODE_IMAGE=node:26.11.1-alpine3.23@sha256:f1394b3ffc021bc3f4aaf363e70a8d9667f7a9a63538bc824d7cc583129fffad
FROM ${NODE_IMAGE} AS base FROM ${NODE_IMAGE} AS base
RUN npm install -g pnpm@11.22.0 RUN npm install -g pnpm@11.22.0
client/package.json
+24 -24
View File
@@ -62,67 +62,67 @@
"@embedpdf/plugin-zoom": "2.15.1", "@embedpdf/plugin-zoom": "2.15.1",
"@fontsource-variable/fraunces": "^5.3.0", "@fontsource-variable/fraunces": "^5.3.0",
"@fontsource-variable/inter": "^5.3.0", "@fontsource-variable/inter": "^5.3.0",
"@formatjs/icu-messageformat-parser": "^3.5.20", "@formatjs/icu-messageformat-parser": "^3.5.21",
"@lucide/vue": "1.48.0", "@lucide/vue": "1.54.0",
"@tailwindcss/vite": "^4.3.3", "@tailwindcss/vite": "^4.3.3",
"@tanstack/vue-virtual": "^3.13.39", "@tanstack/vue-virtual": "^3.13.40",
"@tiptap/extension-link": "^3.31.3", "@tiptap/extension-link": "^3.31.4",
"@tiptap/pm": "^3.31.3", "@tiptap/pm": "^3.31.4",
"@tiptap/starter-kit": "^3.31.3", "@tiptap/starter-kit": "^3.31.4",
"@tiptap/vue-3": "^3.31.3", "@tiptap/vue-3": "^3.31.4",
"@types/howler": "^2.2.13", "@types/howler": "^2.2.13",
"@vueuse/core": "^15.0.0", "@vueuse/core": "^15.0.0",
"canvas-confetti": "^1.9.4", "canvas-confetti": "^1.9.4",
"class-variance-authority": "^0.7.1", "class-variance-authority": "^0.7.1",
"clsx": "^2.1.1", "clsx": "^2.1.1",
"cronstrue": "^3.27.0", "cronstrue": "^3.31.0",
"dompurify": "^3.4.16", "dompurify": "^3.4.16",
"driver.js": "^1.8.0", "driver.js": "^1.9.0",
"echarts": "^6.1.0", "echarts": "^6.1.0",
"howler": "^2.2.4", "howler": "^2.2.4",
"intl-messageformat": "^12.1.2", "intl-messageformat": "^12.1.3",
"pinia": "^4.0.3", "pinia": "^4.0.3",
"reka-ui": "^2.10.5", "reka-ui": "^2.11.0",
"socket.io-client": "^4.8.4", "socket.io-client": "^4.8.4",
"tailwind-merge": "^3.7.0", "tailwind-merge": "^3.7.0",
"tailwindcss": "^4.3.3", "tailwindcss": "^4.3.3",
"vite-plugin-pwa": "^1.3.0", "vite-plugin-pwa": "^1.3.0",
"vue": "^3.5.43", "vue": "^3.5.43",
"vue-draggable-plus": "^0.6.1", "vue-draggable-plus": "^0.6.1",
"vue-echarts": "8.3.1", "vue-echarts": "8.3.2",
"vue-i18n": "^11.4.12", "vue-i18n": "^11.4.13",
"vue-router": "^5.3.1", "vue-router": "^5.4.0",
"vue-sonner": "^2.0.9", "vue-sonner": "^2.0.9",
"vue-virtual-scroller": "^3.0.5" "vue-virtual-scroller": "^3.0.5"
}, },
"devDependencies": { "devDependencies": {
"@intlify/message-compiler": "^11.4.12", "@intlify/message-compiler": "^11.4.13",
"@tsconfig/node24": "^24.0.5", "@tsconfig/node24": "^24.0.5",
"@types/canvas-confetti": "^1.9.0", "@types/canvas-confetti": "^1.9.0",
"@types/jsdom": "^30.0.0", "@types/jsdom": "^30.0.0",
"@types/node": "^26.6.3", "@types/node": "^26.6.5",
"@vite-pwa/assets-generator": "^2.0.0", "@vite-pwa/assets-generator": "^2.0.0",
"@vitejs/plugin-vue": "^6.0.9", "@vitejs/plugin-vue": "^6.0.9",
"@vitest/coverage-v8": "^5.0.2", "@vitest/coverage-v8": "^5.0.3",
"@vitest/eslint-plugin": "^1.6.27", "@vitest/eslint-plugin": "^1.6.27",
"@vue/eslint-config-typescript": "^14.9.0", "@vue/eslint-config-typescript": "^14.9.0",
"@vue/test-utils": "^2.5.1", "@vue/test-utils": "^2.5.1",
"@vue/tsconfig": "^0.9.1", "@vue/tsconfig": "^0.9.1",
"eslint": "^10.11.0", "eslint": "^10.12.0",
"eslint-config-prettier": "^10.1.8", "eslint-config-prettier": "^10.1.8",
"eslint-plugin-oxlint": "~1.86.0", "eslint-plugin-oxlint": "~1.87.0",
"eslint-plugin-vue": "~10.11.1", "eslint-plugin-vue": "~10.11.1",
"jiti": "^2.7.0", "jiti": "^2.7.0",
"jsdom": "~30.1.1", "jsdom": "~30.1.2",
"npm-run-all2": "^9.0.3", "npm-run-all2": "^9.0.3",
"oxlint": "~1.86.0", "oxlint": "~1.87.0",
"prettier": "3.9.9", "prettier": "3.9.9",
"tw-animate-css": "^1.4.0", "tw-animate-css": "^1.4.0",
"typescript": "~6.0.3", "typescript": "~6.0.3",
"vite": "^8.3.1", "vite": "^8.3.4",
"vite-plugin-vue-devtools": "^8.2.1", "vite-plugin-vue-devtools": "^8.2.1",
"vitest": "^5.0.2", "vitest": "^5.0.3",
"vue-tsc": "^3.3.11" "vue-tsc": "^3.3.12"
}, },
"engines": { "engines": {
"node": "^20.19.0 || >=22.12.0" "node": "^20.19.0 || >=22.12.0"
package.json
+2 -2
View File
@@ -64,8 +64,8 @@
"@semantic-release/commit-analyzer": "^13.0.1", "@semantic-release/commit-analyzer": "^13.0.1",
"@semantic-release/github": "^12.0.10", "@semantic-release/github": "^12.0.10",
"@semantic-release/release-notes-generator": "^14.1.1", "@semantic-release/release-notes-generator": "^14.1.1",
"concurrently": "^10.0.5", "concurrently": "^10.0.6",
"conventional-changelog-conventionalcommits": "^10.4.0", "conventional-changelog-conventionalcommits": "^10.4.1",
"husky": "^9.1.7", "husky": "^9.1.7",
"lint-staged": "^17.6.0", "lint-staged": "^17.6.0",
"prettier": "^3.9.9", "prettier": "^3.9.9",
pnpm-lock.yaml
Generated
+1737 -1788
View File
File diff suppressed because it is too large Load Diff
pnpm-workspace.yaml
+4 -4
View File
@@ -7,9 +7,9 @@ overrides:
"@xhmikosr/decompress": ^11.1.4 "@xhmikosr/decompress": ^11.1.4
"@esbuild-kit/core-utils>esbuild": ^0.25.12 "@esbuild-kit/core-utils>esbuild": ^0.25.12
"@nestjs/swagger>js-yaml": ^5.3.0 "@nestjs/swagger>js-yaml": ^5.3.0
"@typescript-eslint/eslint-plugin": ^8.71.0 "@typescript-eslint/eslint-plugin": ^8.71.1
"@typescript-eslint/parser": ^8.71.0 "@typescript-eslint/parser": ^8.71.1
"@typescript-eslint/utils": ^8.71.0 "@typescript-eslint/utils": ^8.71.1
"brace-expansion@>=2.0.0 <2.1.6": ^2.1.6 "brace-expansion@>=2.0.0 <2.1.6": ^2.1.6
"brace-expansion@>=5.0.0 <5.0.11": ^5.0.11 "brace-expansion@>=5.0.0 <5.0.11": ^5.0.11
engine.io: ^6.6.7 engine.io: ^6.6.7
@@ -21,7 +21,7 @@ overrides:
form-data: ^4.0.6 form-data: ^4.0.6
piscina: ^4.9.3 piscina: ^4.9.3
qs: ^6.15.2 qs: ^6.15.2
typescript-eslint: ^8.71.0 typescript-eslint: ^8.71.1
ws: ^8.21.3 ws: ^8.21.3
packageExtensions: packageExtensions:
"@embedpdf/utils@2.15.1": "@embedpdf/utils@2.15.1":
server/bin/kepubify/kepubify-darwin-64bit
BIN
View File
Binary file not shown.
server/bin/kepubify/kepubify-darwin-arm64
BIN
View File
Binary file not shown.
server/bin/kepubify/kepubify-linux-32bit
BIN
View File
Binary file not shown.
server/bin/kepubify/kepubify-linux-64bit
BIN
View File
Binary file not shown.
server/bin/kepubify/kepubify-linux-arm
BIN
View File
Binary file not shown.
server/bin/kepubify/kepubify-linux-arm64
BIN
View File
Binary file not shown.
server/package.json
+25 -25
View File
@@ -57,23 +57,23 @@
"7z-wasm": "^1.2.0", "7z-wasm": "^1.2.0",
"@bookorbit/plugin-api": "workspace:*", "@bookorbit/plugin-api": "workspace:*",
"@bookorbit/types": "workspace:*", "@bookorbit/types": "workspace:*",
"@fastify/compress": "^9.2.0", "@fastify/compress": "^9.2.1",
"@fastify/cookie": "^11.1.2", "@fastify/cookie": "^11.1.3",
"@fastify/helmet": "^13.1.1", "@fastify/helmet": "^13.1.2",
"@fastify/multipart": "^10.1.2", "@fastify/multipart": "^10.1.3",
"@fastify/static": "^10.1.5", "@fastify/static": "^10.1.6",
"@nestjs/common": "^12.1.1", "@nestjs/common": "^12.1.2",
"@nestjs/config": "^12.0.1", "@nestjs/config": "^12.0.1",
"@nestjs/core": "^12.1.1", "@nestjs/core": "^12.1.2",
"@nestjs/jwt": "^12.0.2", "@nestjs/jwt": "^12.0.2",
"@nestjs/passport": "^12.0.0", "@nestjs/passport": "^12.0.0",
"@nestjs/platform-fastify": "^12.1.1", "@nestjs/platform-fastify": "^12.1.2",
"@nestjs/platform-socket.io": "^12.1.1", "@nestjs/platform-socket.io": "^12.1.2",
"@nestjs/schedule": "^12.0.2", "@nestjs/schedule": "^12.0.2",
"@nestjs/swagger": "^12.0.2", "@nestjs/swagger": "^12.0.2",
"@nestjs/terminus": "^12.1.0", "@nestjs/terminus": "^12.1.0",
"@nestjs/throttler": "^6.7.1", "@nestjs/throttler": "^6.7.1",
"@nestjs/websockets": "^12.1.1", "@nestjs/websockets": "^12.1.2",
"@types/archiver": "^8.0.0", "@types/archiver": "^8.0.0",
"archiver": "~8.0.0", "archiver": "~8.0.0",
"bcryptjs": "^3.0.3", "bcryptjs": "^3.0.3",
@@ -83,7 +83,7 @@
"class-validator": "^0.15.1", "class-validator": "^0.15.1",
"cron": "^4.4.0", "cron": "^4.4.0",
"date-fns-tz": "^3.2.0", "date-fns-tz": "^3.2.0",
"drizzle-orm": "^0.45.3", "drizzle-orm": "^0.45.4",
"fast-xml-parser": "^5.11.2", "fast-xml-parser": "^5.11.2",
"fastest-levenshtein": "^1.0.16", "fastest-levenshtein": "^1.0.16",
"fastify": "^5.12.5", "fastify": "^5.12.5",
@@ -92,14 +92,14 @@
"langs": "^2.0.0", "langs": "^2.0.0",
"ms": "^2.1.3", "ms": "^2.1.3",
"mysql2": "^3.24.5", "mysql2": "^3.24.5",
"nestjs-pino": "^5.2.1", "nestjs-pino": "^5.3.1",
"node-unrar-js": "^2.0.2", "node-unrar-js": "^2.0.2",
"nodemailer": "^10.0.12", "nodemailer": "^10.0.16",
"passport": "^0.7.0", "passport": "^0.7.0",
"passport-jwt": "^4.0.1", "passport-jwt": "^4.0.1",
"pdf-lib": "^1.17.1", "pdf-lib": "^1.17.1",
"pg": "^8.23.0", "pg": "^8.23.1",
"pg-connection-string": "^2.14.0", "pg-connection-string": "^2.14.1",
"pino-http": "^11.0.0", "pino-http": "^11.0.0",
"reflect-metadata": "^0.2.2", "reflect-metadata": "^0.2.2",
"rxjs": "^7.8.2", "rxjs": "^7.8.2",
@@ -116,34 +116,34 @@
"@ffprobe-installer/ffprobe": "^2.1.2", "@ffprobe-installer/ffprobe": "^2.1.2",
"@nestjs/cli": "^12.0.8", "@nestjs/cli": "^12.0.8",
"@nestjs/schematics": "^12.0.6", "@nestjs/schematics": "^12.0.6",
"@nestjs/testing": "^12.1.1", "@nestjs/testing": "^12.1.2",
"@swc/cli": "^0.8.1", "@swc/cli": "^0.8.1",
"@swc/core": "^1.16.12", "@swc/core": "^1.16.13",
"@types/bcrypt": "^6.0.0", "@types/bcrypt": "^6.0.0",
"@types/express": "^5.0.6", "@types/express": "^5.0.6",
"@types/langs": "^2.0.5", "@types/langs": "^2.0.5",
"@types/node": "^26.6.3", "@types/node": "^26.6.5",
"@types/nodemailer": "^8.0.2", "@types/nodemailer": "^8.0.2",
"@types/passport-jwt": "^4.0.1", "@types/passport-jwt": "^4.0.1",
"@types/pg": "^8.23.1", "@types/pg": "^8.23.1",
"@types/supertest": "^7.2.1", "@types/supertest": "^7.2.1",
"@types/unzipper": "^0.10.11", "@types/unzipper": "^0.10.11",
"@vitest/coverage-v8": "^5.0.2", "@vitest/coverage-v8": "^5.0.3",
"drizzle-kit": "^0.31.11", "drizzle-kit": "^0.31.11",
"eslint": "^10.11.0", "eslint": "^10.12.0",
"eslint-config-prettier": "^10.1.8", "eslint-config-prettier": "^10.1.8",
"eslint-plugin-prettier": "^5.5.6", "eslint-plugin-prettier": "^5.5.6",
"globals": "^17.12.0", "globals": "^17.13.0",
"pino-pretty": "^13.1.3", "pino-pretty": "^13.2.0",
"prettier": "^3.9.9", "prettier": "^3.9.9",
"source-map-support": "^0.5.21", "source-map-support": "^0.5.21",
"supertest": "^7.3.0", "supertest": "^7.3.1",
"ts-loader": "^9.6.2", "ts-loader": "^9.6.2",
"ts-node": "^10.9.2", "ts-node": "^10.9.2",
"tsconfig-paths": "^4.2.0", "tsconfig-paths": "^4.2.0",
"tsx": "^4.23.15", "tsx": "^4.23.15",
"typescript": "^6.0.3", "typescript": "^6.0.3",
"typescript-eslint": "^8.71.0", "typescript-eslint": "^8.71.1",
"vitest": "^5.0.2" "vitest": "^5.0.3"
} }
} }