Files
bookorbit/pnpm-workspace.yaml
T
neon c37821782a security(deps): update dependencies and rebuild kepubify with go 1.27.2
Bump every direct dependency to its newest same-major release and move the
node base image to 26.11.1, which invalidates the cached apk layer and picks
up tiff 4.7.2 for CVE-2026-4775. Rebuild all six kepubify binaries from the
pinned upstream commit with Go 1.27.2 for CVE-2026-78667, CVE-2026-78669 and
CVE-2026-97031, keeping v4-dev so rendition hashes stay stable.
2026-10-11 05:19:04 +00:00

71 lines
2.1 KiB
YAML

packages:
- "client"
- "server"
- "packages/*"
overrides:
"@fastify/busboy": ^3.2.1
"@xhmikosr/decompress": ^11.1.4
"@esbuild-kit/core-utils>esbuild": ^0.25.12
"@nestjs/swagger>js-yaml": ^5.3.0
"@typescript-eslint/eslint-plugin": ^8.71.1
"@typescript-eslint/parser": ^8.71.1
"@typescript-eslint/utils": ^8.71.1
"brace-expansion@>=2.0.0 <2.1.6": ^2.1.6
"brace-expansion@>=5.0.0 <5.0.11": ^5.0.11
engine.io: ^6.6.7
esbuild: ^0.28.2
fastify: ^5.10.0
fast-uri: ^3.1.6
fast-xml-builder: ^1.3.1
find-my-way: ^9.8.0
form-data: ^4.0.6
piscina: ^4.9.3
qs: ^6.15.2
typescript-eslint: ^8.71.1
ws: ^8.21.3
packageExtensions:
"@embedpdf/utils@2.15.1":
dependencies:
"@embedpdf/models": 2.15.1
peerDependencyRules:
allowedVersions:
"vite-plugin-pwa>@vite-pwa/assets-generator": "^2.0.0"
allowBuilds:
"@ffmpeg-installer/darwin-arm64": true
"@ffmpeg-installer/darwin-x64": true
"@ffmpeg-installer/linux-arm": true
"@ffmpeg-installer/linux-arm64": true
"@ffmpeg-installer/linux-ia32": true
"@ffmpeg-installer/linux-x64": true
"@ffmpeg-installer/win32-ia32": true
"@ffmpeg-installer/win32-x64": true
"@ffprobe-installer/darwin-arm64": true
"@ffprobe-installer/darwin-x64": true
"@ffprobe-installer/linux-arm": true
"@ffprobe-installer/linux-arm64": true
"@ffprobe-installer/linux-ia32": true
"@ffprobe-installer/linux-x64": true
"@ffprobe-installer/win32-ia32": true
"@ffprobe-installer/win32-x64": true
"@nestjs/core": true
"@parcel/watcher": true
"@scarf/scarf": false
"@swc/core": true
esbuild: true
sharp: true
unrs-resolver: true
vue-demi: false
patchedDependencies:
"@embedpdf/core@2.15.1": patches/@embedpdf__core@2.15.1.patch
"@embedpdf/engines@2.15.1": patches/@embedpdf__engines@2.15.1.patch
"@embedpdf/plugin-scroll@2.15.1": patches/@embedpdf__plugin-scroll@2.15.1.patch
"@embedpdf/plugin-zoom@2.15.1": patches/@embedpdf__plugin-zoom@2.15.1.patch
minimumReleaseAgeExclude:
- "@tsconfig/node24@24.0.5"
- "@vue/language-core@3.3.10"
- concurrently@10.0.5
- jose@6.2.9
- vue-tsc@3.3.10
- "@lucide/vue@1.35.0"
- nodemailer@9.0.6