From 9c927dccbd4824cb742cfa92d20efb0bcc768753 Mon Sep 17 00:00:00 2001 From: EugeniyKiyashko Date: Mon, 26 Oct 2026 12:34:32 +0400 Subject: [PATCH] chore(security): fix body-parser, undici, fast-uri, serialize-javascript and zod advisories --- packages/sbom/pnpm-lock.yaml | 58 ++++++++++------ packages/sbom/pnpm-workspace.yaml | 6 +- pnpm-lock.yaml | 110 +++++++++++++++++------------- pnpm-workspace.yaml | 7 +- 4 files changed, 108 insertions(+), 73 deletions(-) diff --git a/packages/sbom/pnpm-lock.yaml b/packages/sbom/pnpm-lock.yaml index 8aa387a4a9e5..38ac64cefa62 100644 --- a/packages/sbom/pnpm-lock.yaml +++ b/packages/sbom/pnpm-lock.yaml @@ -7,10 +7,10 @@ settings: overrides: tar@<7.5.19: ^7.5.19 brace-expansion@<5.0.12: ^5.0.12 - body-parser@>=2.0.0 <2.3.0: ^2.3.0 - fast-uri@>=3.0.0 <3.1.8: ^3.1.8 + body-parser@>=2.0.0 <2.4.0: ^2.4.0 + fast-uri@>=3.0.0 <3.1.9: ^3.1.9 qs@>=2.2.5 <6.16.0: ^6.16.0 - undici@>=7.0.0 <7.29.1: ^7.29.1 + undici@>=7.0.0 <7.30.1: ^7.30.1 compression@<1.8.2: ^1.8.2 http-cache-semantics@<=4.2.0: ^4.3.0 @@ -251,8 +251,8 @@ packages: resolution: {integrity: sha512-frE1t78WOwJ45PKV2cF2tNPjTcs9L1J9s6VkrV59wanRP4GlaomuxYPVma7BwthMg8WnfSory4w5PTE6FZZ81w==} engines: {node: ^20.17.0 || >=22.9.0} - body-parser@2.3.0: - resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==} + body-parser@2.4.0: + resolution: {integrity: sha512-Ifk1KcLrxaGt1occQagQNFNNOqRt1LFuehEnHHzB8Z6cRgIxRU1TBaiIsUiCdA+gy5PL7Y1IX31DNKkRmxtXjQ==} engines: {node: '>=18'} boolbase@1.0.0: @@ -324,6 +324,10 @@ packages: resolution: {integrity: sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==} engines: {node: '>=18'} + content-type@2.1.0: + resolution: {integrity: sha512-mj7UPXE0jaqaOsukNZRUEfEi2AcL7C/vwmwcHV0O97eO1E1pxBZuyjlZrx5seTaNBg1U6+o35wpa35Qfcc+7ag==} + engines: {node: '>=18'} + css-select@5.2.2: resolution: {integrity: sha512-TizTzUddG/xYLA3NXodFM0fSbNizXjOKhqiQQwvhlspadZokn1KDy0NZFS0wuEubIYAV5/c1/lAr0TaaFXEXzw==} @@ -428,8 +432,8 @@ packages: fast-deep-equal@3.1.3: resolution: {integrity: sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==} - fast-uri@3.1.8: - resolution: {integrity: sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==} + fast-uri@3.1.9: + resolution: {integrity: sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==} finalhandler@1.1.2: resolution: {integrity: sha512-aAWcW57uxVNrQZqFXjITpW3sIUQmHGG3qSb9mUah9MgMC4NeWhNOlNjXEYq3HjRAvL6arUviZGGJsBg6z0zsWA==} @@ -514,6 +518,10 @@ packages: resolution: {integrity: sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==} engines: {node: '>=0.10.0'} + iconv-lite@0.7.3: + resolution: {integrity: sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==} + engines: {node: '>=0.10.0'} + inherits@2.0.4: resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==} @@ -697,8 +705,8 @@ packages: resolution: {integrity: sha512-WPn+h9RGEExOKdu4bsF4HksG/uzd3cFq3MFtq8PsFeExPse5Ha/VOjQNyHhjboBFwGXGev6muJYTSPAOkROq2g==} engines: {node: '>=18'} - qs@6.16.0: - resolution: {integrity: sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==} + qs@6.16.1: + resolution: {integrity: sha512-5Px6J7rfHBAGUhNQ3es4YzcOdBBw0SDcVtThJml4RdnKw4tKs2epA0kPZ+K8X+WiHktT93RHVcQ/3ym5aTCgtg==} engines: {node: '>=0.6'} quick-lru@5.1.1: @@ -820,8 +828,8 @@ packages: engines: {node: '>=14.17'} hasBin: true - undici@7.30.0: - resolution: {integrity: sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==} + undici@7.30.1: + resolution: {integrity: sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==} engines: {node: '>=20.18.1'} unpipe@1.0.0: @@ -1066,7 +1074,7 @@ snapshots: '@cdxgen/cdxgen-plugins-bin-linuxmusl-arm64': 2.3.0 '@cdxgen/cdxgen-plugins-bin-windows-amd64': 2.3.0 '@cdxgen/cdxgen-plugins-bin-windows-arm64': 2.3.0 - body-parser: 2.3.0 + body-parser: 2.4.0 compression: 1.8.2 connect: 3.7.0 jsonata: 2.2.1 @@ -1163,7 +1171,7 @@ snapshots: ajv@8.20.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.8 + fast-uri: 3.1.9 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -1181,15 +1189,15 @@ snapshots: read-cmd-shim: 6.0.0 write-file-atomic: 7.0.1 - body-parser@2.3.0: + body-parser@2.4.0: dependencies: bytes: 3.1.2 - content-type: 2.0.0 + content-type: 2.1.0 debug: 4.4.3 http-errors: 2.0.1 - iconv-lite: 0.7.2 + iconv-lite: 0.7.3 on-finished: 2.4.1 - qs: 6.16.0 + qs: 6.16.1 raw-body: 3.0.2 type-is: 2.1.0 transitivePeerDependencies: @@ -1251,7 +1259,7 @@ snapshots: parse5: 7.3.0 parse5-htmlparser2-tree-adapter: 7.1.0 parse5-parser-stream: 7.1.2 - undici: 7.30.0 + undici: 7.30.1 whatwg-mimetype: 4.0.0 chownr@3.0.0: {} @@ -1298,6 +1306,9 @@ snapshots: content-type@2.0.0: optional: true + content-type@2.1.0: + optional: true + css-select@5.2.2: dependencies: boolbase: 1.0.0 @@ -1391,7 +1402,7 @@ snapshots: fast-deep-equal@3.1.3: {} - fast-uri@3.1.8: {} + fast-uri@3.1.9: {} finalhandler@1.1.2: dependencies: @@ -1515,6 +1526,11 @@ snapshots: dependencies: safer-buffer: 2.1.2 + iconv-lite@0.7.3: + dependencies: + safer-buffer: 2.1.2 + optional: true + inherits@2.0.4: optional: true @@ -1671,7 +1687,7 @@ snapshots: transitivePeerDependencies: - supports-color - qs@6.16.0: + qs@6.16.1: dependencies: es-define-property: 1.0.1 side-channel: 1.1.1 @@ -1802,7 +1818,7 @@ snapshots: typescript@6.0.3: optional: true - undici@7.30.0: {} + undici@7.30.1: {} unpipe@1.0.0: optional: true diff --git a/packages/sbom/pnpm-workspace.yaml b/packages/sbom/pnpm-workspace.yaml index 5192be23aa82..7ede24ce4735 100644 --- a/packages/sbom/pnpm-workspace.yaml +++ b/packages/sbom/pnpm-workspace.yaml @@ -7,9 +7,9 @@ minimumReleaseAgeExclude: overrides: tar@<7.5.19: ^7.5.19 brace-expansion@<5.0.12: ^5.0.12 - body-parser@>=2.0.0 <2.3.0: ^2.3.0 - fast-uri@>=3.0.0 <3.1.8: ^3.1.8 + body-parser@>=2.0.0 <2.4.0: ^2.4.0 + fast-uri@>=3.0.0 <3.1.9: ^3.1.9 qs@>=2.2.5 <6.16.0: ^6.16.0 - undici@>=7.0.0 <7.29.1: ^7.29.1 + undici@>=7.0.0 <7.30.1: ^7.30.1 compression@<1.8.2: ^1.8.2 http-cache-semantics@<=4.2.0: ^4.3.0 diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index ac2f6a113e14..f3baa929d9ef 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -190,7 +190,7 @@ overrides: brace-expansion@<3.0.0: ^2.1.7 brace-expansion@>=3.0.0 <5.0.12: ^5.0.12 engine.io@>=6.6.0 <6.6.10: ^6.6.10 - fast-uri@>=3.0.0 <3.1.8: ^3.1.8 + fast-uri@>=3.0.0 <3.1.9: ^3.1.9 handlebars@<4.7.10: ^4.7.10 moment@>=2.29.2 <2.31.0: ^2.31.0 webpack-dev-middleware@<7.4.6: ^7.4.6 @@ -199,6 +199,8 @@ overrides: '@jridgewell/sourcemap-codec@<1.6.0': ^1.6.0 '@vue/server-renderer@<3.5.42': ^3.5.42 axios@>=1.0.0 <1.20.0: ^1.20.0 + body-parser@<1.20.9: ^1.20.9 + body-parser@>=2.0.0 <2.4.0: ^2.4.0 compression@<1.8.2: ^1.8.2 dompurify@<=3.4.16: ^3.4.17 follow-redirects@>=1.16.0 <1.16.1: ^1.16.1 @@ -210,11 +212,14 @@ overrides: postcss-selector-parser@<7.1.6: ^7.1.6 probe-image-size@<=7.3.0: ^7.3.1 proxy-addr@>=1.1.0 <2.0.8: ^2.0.8 + serialize-javascript@<7.1.3: ^7.1.3 shell-quote@>=1.8.4 <1.11.0: ^1.11.0 smol-toml@<=1.8.0: ^1.8.1 source-map-js@>=1.0.0 <1.2.2: ^1.2.2 + undici@>=7.0.0 <7.30.1: ^7.30.1 vite@>=7.0.0 <=7.3.6: ^7.3.7 vite@>=8.3.0 <=8.3.2: ^8.3.3 + zod@>=4.0.0 <4.6.6: ^4.6.6 patchedDependencies: testcafe-hammerhead@31.7.8: 8655c07786177d3b611a05abf6b0ea87d32796eb2601f92a800ef041095f264c @@ -5755,7 +5760,7 @@ packages: engines: {node: '>=18'} peerDependencies: '@cfworker/json-schema': ^4.1.1 - zod: ^3.25 || ^4.0 + zod: ^4.6.6 peerDependenciesMeta: '@cfworker/json-schema': optional: true @@ -9510,12 +9515,12 @@ packages: bn.js@5.2.3: resolution: {integrity: sha512-EAcmnPkxpntVL+DS7bO1zhcZNvCkxqtkd0ZY53h06GNQ3DEkkGZ/gKgmDv6DdZQGj9BgfSPKtJJ7Dp1GPP8f7w==} - body-parser@1.20.6: - resolution: {integrity: sha512-p5tAzS57i5MV9fZFDj9LeIiTZEufbSe2eDozP+ElheSUq1m74CRq1jI4mYNDdVs9vQztXFLuk/Gd6BWTdwRJ5g==} + body-parser@1.20.9: + resolution: {integrity: sha512-FISIQxV5u91Y9gvuFq3q/tA/qTqLJn3AhRcEvyozyhJTh5OBFFtv827AdHU7Rbyct4r+Ba1/99oFa1Y3yuFsdw==} engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16} - body-parser@2.3.0: - resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==} + body-parser@2.4.0: + resolution: {integrity: sha512-Ifk1KcLrxaGt1occQagQNFNNOqRt1LFuehEnHHzB8Z6cRgIxRU1TBaiIsUiCdA+gy5PL7Y1IX31DNKkRmxtXjQ==} engines: {node: '>=18'} bonjour-service@1.4.1: @@ -10093,6 +10098,10 @@ packages: resolution: {integrity: sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==} engines: {node: '>=18'} + content-type@2.1.0: + resolution: {integrity: sha512-mj7UPXE0jaqaOsukNZRUEfEi2AcL7C/vwmwcHV0O97eO1E1pxBZuyjlZrx5seTaNBg1U6+o35wpa35Qfcc+7ag==} + engines: {node: '>=18'} + convert-source-map@1.1.3: resolution: {integrity: sha512-Y8L5rp6jo+g9VEPgvqNfEopjTR4OTYct8lXlS8iVQdmnjDvbdbzYe9rjtFCB9egC86JoNCU61WRY+ScjkZpnIg==} @@ -11392,8 +11401,8 @@ packages: fast-string-width@3.0.2: resolution: {integrity: sha512-gX8LrtNEI5hq8DVUfRQMbr5lpaS4nMIWV+7XEbXk2b8kiQIizgnlr12B4dA3ZEx3308ze0O4Q1R+cHts8kyUJg==} - fast-uri@3.1.8: - resolution: {integrity: sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==} + fast-uri@3.1.9: + resolution: {integrity: sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==} fast-wrap-ansi@0.2.0: resolution: {integrity: sha512-rLV8JHxTyhVmFYhBJuMujcrHqOT2cnO5Zxj37qROj23CP39GXubJRBUFF0z8KFK77Uc0SukZUf7JZhsVEQ6n8w==} @@ -12148,6 +12157,10 @@ packages: resolution: {integrity: sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==} engines: {node: '>=0.10.0'} + iconv-lite@0.7.3: + resolution: {integrity: sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==} + engines: {node: '>=0.10.0'} + icss-utils@5.1.0: resolution: {integrity: sha512-soFhflCVWLfRNOPU3iv5Z9VUdT44xFRbzjLsEzSr5AQmgqPMTHdU3PMT1Cf1ssx8fLNJDA1juftYl+PUcv3MqA==} engines: {node: ^10 || ^12 || >= 14} @@ -14209,7 +14222,7 @@ packages: '@smithy/hash-node': '>=4.3.0 <5' '@smithy/signature-v4': '>=5.4.0 <6' ws: ^8.18.0 - zod: ^3.25 || ^4.0 + zod: ^4.6.6 peerDependenciesMeta: '@aws-sdk/credential-provider-node': optional: true @@ -15727,8 +15740,8 @@ packages: resolution: {integrity: sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==} engines: {node: '>= 18'} - serialize-javascript@7.0.5: - resolution: {integrity: sha512-F4LcB0UqUl1zErq+1nYEEzSHJnIwb3AF2XWB94b+afhrekOUijwooAYqFyRbjYkm2PAKBabx6oYv/xDxNi8IBw==} + serialize-javascript@7.1.4: + resolution: {integrity: sha512-FqlEuoTq/zRmA4Lg6aOqyH3lCHbUtCB0bmHCeFniX2GBdDqMJM3FwdvEhlE5Pim1dlt2FfBdVPmUNNiGhhKqpw==} engines: {node: '>=20.0.0'} serve-index@1.9.2: @@ -16770,8 +16783,8 @@ packages: undici-types@8.3.0: resolution: {integrity: sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ==} - undici@7.29.1: - resolution: {integrity: sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==} + undici@7.30.1: + resolution: {integrity: sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==} engines: {node: '>=20.18.1'} unicode-canonical-property-names-ecmascript@2.0.1: @@ -17622,20 +17635,17 @@ packages: zod-to-json-schema@3.25.2: resolution: {integrity: sha512-O/PgfnpT1xKSDeQYSCfRI5Gy3hPf91mKVDuYLUHZJMiDFptvP41MSnWofm8dnCm0256ZNfZIM7DSzuSMAFnjHA==} peerDependencies: - zod: ^3.25.28 || ^4 + zod: ^4.6.6 zod-validation-error@4.0.2: resolution: {integrity: sha512-Q6/nZLe6jxuU80qb/4uJ4t5v2VEZ44lzQjPDhYJNztRQ4wyWc6VF3D3Kb/fAuPetZQnhS3hnajCf9CsWesghLQ==} engines: {node: '>=18.0.0'} peerDependencies: - zod: ^3.25.0 || ^4.0.0 + zod: ^4.6.6 zod@3.24.4: resolution: {integrity: sha512-OdqJE9UDRPwWsrHjLN2F8bPxvwJBK22EHLWtanu0LSYr5YqzsaaW3RMgmjwr8Rypg5k+meEJdSPXJZXE/yqOMg==} - zod@4.3.6: - resolution: {integrity: sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==} - zod@4.6.6: resolution: {integrity: sha512-4UmzQUF5fxvfcYHlbjBmejU+w+hbDnWFx4aS8kBx7nPBHcO2SqPbpAG8snbdg+Xse4pRefR98hgjFgIMCI/UhA==} @@ -18155,7 +18165,7 @@ snapshots: tinyglobby: 0.2.15 tslib: 2.8.1 typescript: 5.9.3 - undici: 7.29.1 + undici: 7.30.1 vite: 7.3.7(@types/node@26.1.1)(jiti@2.6.1)(less@4.9.0)(lightningcss@1.33.0)(sass-embedded@1.105.1)(sass@1.97.3)(terser@5.46.0)(yaml@2.9.0) watchpack: 2.5.1 optionalDependencies: @@ -18212,7 +18222,7 @@ snapshots: tinyglobby: 0.2.15 tslib: 2.8.1 typescript: 5.9.3 - undici: 7.29.1 + undici: 7.30.1 vite: 7.3.7(@types/node@20.11.17)(jiti@2.6.1)(less@4.9.0)(lightningcss@1.33.0)(sass-embedded@1.105.1)(sass@1.97.3)(terser@5.46.0)(yaml@2.9.0) watchpack: 2.5.1 optionalDependencies: @@ -18301,7 +18311,7 @@ snapshots: '@angular-devkit/schematics': 21.2.24(chokidar@5.0.0) '@inquirer/prompts': 7.10.1(@types/node@20.11.17) '@listr2/prompt-adapter-inquirer': 3.0.5(@inquirer/prompts@7.10.1(@types/node@20.11.17))(@types/node@20.11.17)(listr2@9.0.5) - '@modelcontextprotocol/sdk': 1.32.1(supports-color@7.2.0)(zod@4.3.6) + '@modelcontextprotocol/sdk': 1.32.1(supports-color@7.2.0)(zod@4.6.7) '@schematics/angular': 21.2.24(chokidar@5.0.0) '@yarnpkg/lockfile': 1.1.0 algoliasearch: 5.48.1 @@ -18313,7 +18323,7 @@ snapshots: parse5-html-rewriting-stream: 8.0.0 semver: 7.7.4 yargs: 18.0.0 - zod: 4.3.6 + zod: 4.6.7 transitivePeerDependencies: - '@cfworker/json-schema' - '@types/node' @@ -18327,7 +18337,7 @@ snapshots: '@angular-devkit/schematics': 21.2.24(chokidar@5.0.0) '@inquirer/prompts': 7.10.1(@types/node@20.19.37) '@listr2/prompt-adapter-inquirer': 3.0.5(@inquirer/prompts@7.10.1(@types/node@20.19.37))(@types/node@20.19.37)(listr2@9.0.5) - '@modelcontextprotocol/sdk': 1.32.1(supports-color@7.2.0)(zod@4.3.6) + '@modelcontextprotocol/sdk': 1.32.1(supports-color@7.2.0)(zod@4.6.7) '@schematics/angular': 21.2.24(chokidar@5.0.0) '@yarnpkg/lockfile': 1.1.0 algoliasearch: 5.48.1 @@ -18339,7 +18349,7 @@ snapshots: parse5-html-rewriting-stream: 8.0.0 semver: 7.7.4 yargs: 18.0.0 - zod: 4.3.6 + zod: 4.6.7 transitivePeerDependencies: - '@cfworker/json-schema' - '@types/node' @@ -18353,7 +18363,7 @@ snapshots: '@angular-devkit/schematics': 21.2.24(chokidar@5.0.0) '@inquirer/prompts': 7.10.1(@types/node@26.1.1) '@listr2/prompt-adapter-inquirer': 3.0.5(@inquirer/prompts@7.10.1(@types/node@26.1.1))(@types/node@26.1.1)(listr2@9.0.5) - '@modelcontextprotocol/sdk': 1.32.1(supports-color@7.2.0)(zod@4.3.6) + '@modelcontextprotocol/sdk': 1.32.1(supports-color@7.2.0)(zod@4.6.7) '@schematics/angular': 21.2.24(chokidar@5.0.0) '@yarnpkg/lockfile': 1.1.0 algoliasearch: 5.48.1 @@ -18365,7 +18375,7 @@ snapshots: parse5-html-rewriting-stream: 8.0.0 semver: 7.7.4 yargs: 18.0.0 - zod: 4.3.6 + zod: 4.6.7 transitivePeerDependencies: - '@cfworker/json-schema' - '@types/node' @@ -22459,7 +22469,7 @@ snapshots: dependencies: zod: 4.6.7 - '@modelcontextprotocol/sdk@1.32.1(supports-color@7.2.0)(zod@4.3.6)': + '@modelcontextprotocol/sdk@1.32.1(supports-color@7.2.0)(zod@4.6.7)': dependencies: '@hono/node-server': 2.0.12(hono@4.13.13) ajv: 8.20.0 @@ -22476,8 +22486,8 @@ snapshots: json-schema-typed: 8.0.2 pkce-challenge: 5.0.1 raw-body: 3.0.2 - zod: 4.3.6 - zod-to-json-schema: 3.25.2(zod@4.3.6) + zod: 4.6.7 + zod-to-json-schema: 3.25.2(zod@4.6.7) transitivePeerDependencies: - supports-color @@ -26205,14 +26215,14 @@ snapshots: ajv@8.18.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.8 + fast-uri: 3.1.9 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 ajv@8.20.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.8 + fast-uri: 3.1.9 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -26792,7 +26802,7 @@ snapshots: bn.js@5.2.3: {} - body-parser@1.20.6: + body-parser@1.20.9: dependencies: bytes: 3.1.2 content-type: 1.0.5 @@ -26809,13 +26819,13 @@ snapshots: transitivePeerDependencies: - supports-color - body-parser@2.3.0(supports-color@7.2.0): + body-parser@2.4.0(supports-color@7.2.0): dependencies: bytes: 3.1.2 - content-type: 2.0.0 + content-type: 2.1.0 debug: 4.4.3(supports-color@7.2.0) http-errors: 2.0.1 - iconv-lite: 0.7.2 + iconv-lite: 0.7.3 on-finished: 2.4.1 qs: 6.16.0 raw-body: 3.0.2 @@ -27175,7 +27185,7 @@ snapshots: parse5: 7.3.0 parse5-htmlparser2-tree-adapter: 7.1.0 parse5-parser-stream: 7.1.2 - undici: 7.29.1 + undici: 7.30.1 whatwg-mimetype: 4.0.0 optional: true @@ -27494,6 +27504,8 @@ snapshots: content-type@2.0.0: {} + content-type@2.1.0: {} + convert-source-map@1.1.3: {} convert-source-map@1.9.0: {} @@ -27524,7 +27536,7 @@ snapshots: glob-parent: 6.0.2 normalize-path: 3.0.0 schema-utils: 4.3.3 - serialize-javascript: 7.0.5 + serialize-javascript: 7.1.4 tinyglobby: 0.2.17 webpack: 5.105.2(@swc/core@1.15.30(@swc/helpers@0.5.21))(esbuild@0.28.1) @@ -27533,7 +27545,7 @@ snapshots: glob-parent: 6.0.2 normalize-path: 3.0.0 schema-utils: 4.3.3 - serialize-javascript: 7.0.5 + serialize-javascript: 7.1.4 tinyglobby: 0.2.17 webpack: 5.111.0(@swc/core@1.15.30(@swc/helpers@0.5.21))(esbuild@0.28.2)(postcss@8.5.28) @@ -29384,7 +29396,7 @@ snapshots: dependencies: accepts: 1.3.8 array-flatten: 1.1.1 - body-parser: 1.20.6 + body-parser: 1.20.9 content-disposition: 0.5.4 content-type: 1.0.5 cookie: 0.7.2 @@ -29419,7 +29431,7 @@ snapshots: express@5.2.1(supports-color@7.2.0): dependencies: accepts: 2.0.0 - body-parser: 2.3.0(supports-color@7.2.0) + body-parser: 2.4.0(supports-color@7.2.0) content-disposition: 1.1.0 content-type: 1.0.5 cookie: 0.7.2 @@ -29490,7 +29502,7 @@ snapshots: dependencies: fast-string-truncated-width: 3.0.3 - fast-uri@3.1.8: {} + fast-uri@3.1.9: {} fast-wrap-ansi@0.2.0: dependencies: @@ -30477,6 +30489,10 @@ snapshots: dependencies: safer-buffer: 2.1.2 + iconv-lite@0.7.3: + dependencies: + safer-buffer: 2.1.2 + icss-utils@5.1.0(postcss@8.5.23): dependencies: postcss: 8.5.23 @@ -31796,7 +31812,7 @@ snapshots: karma@6.4.4: dependencies: '@colors/colors': 1.5.0 - body-parser: 1.20.6 + body-parser: 1.20.9 braces: 3.0.3 chokidar: 3.6.0 connect: 3.7.0 @@ -35117,7 +35133,7 @@ snapshots: transitivePeerDependencies: - supports-color - serialize-javascript@7.0.5: {} + serialize-javascript@7.1.4: {} serve-index@1.9.2: dependencies: @@ -36807,7 +36823,7 @@ snapshots: undici-types@8.3.0: optional: true - undici@7.29.1: {} + undici@7.30.1: {} unicode-canonical-property-names-ecmascript@2.0.1: {} @@ -38043,9 +38059,9 @@ snapshots: normalize-path: 3.0.0 readable-stream: 4.7.0 - zod-to-json-schema@3.25.2(zod@4.3.6): + zod-to-json-schema@3.25.2(zod@4.6.7): dependencies: - zod: 4.3.6 + zod: 4.6.7 zod-validation-error@4.0.2(zod@4.6.7): dependencies: @@ -38053,8 +38069,6 @@ snapshots: zod@3.24.4: {} - zod@4.3.6: {} - zod@4.6.6: {} zod@4.6.7: {} diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 4a63f1b50295..657998218cd5 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -38,7 +38,7 @@ overrides: "brace-expansion@<3.0.0": "^2.1.7" "brace-expansion@>=3.0.0 <5.0.12": "^5.0.12" engine.io@>=6.6.0 <6.6.10: ^6.6.10 - fast-uri@>=3.0.0 <3.1.8: ^3.1.8 + fast-uri@>=3.0.0 <3.1.9: ^3.1.9 handlebars@<4.7.10: ^4.7.10 moment@>=2.29.2 <2.31.0: ^2.31.0 webpack-dev-middleware@<7.4.6: ^7.4.6 @@ -47,6 +47,8 @@ overrides: '@jridgewell/sourcemap-codec@<1.6.0': ^1.6.0 '@vue/server-renderer@<3.5.42': ^3.5.42 axios@>=1.0.0 <1.20.0: ^1.20.0 + body-parser@<1.20.9: ^1.20.9 + body-parser@>=2.0.0 <2.4.0: ^2.4.0 compression@<1.8.2: ^1.8.2 dompurify@<=3.4.16: ^3.4.17 follow-redirects@>=1.16.0 <1.16.1: ^1.16.1 @@ -58,11 +60,14 @@ overrides: postcss-selector-parser@<7.1.6: ^7.1.6 probe-image-size@<=7.3.0: ^7.3.1 proxy-addr@>=1.1.0 <2.0.8: ^2.0.8 + serialize-javascript@<7.1.3: ^7.1.3 shell-quote@>=1.8.4 <1.11.0: ^1.11.0 smol-toml@<=1.8.0: ^1.8.1 source-map-js@>=1.0.0 <1.2.2: ^1.2.2 + undici@>=7.0.0 <7.30.1: ^7.30.1 "vite@>=7.0.0 <=7.3.6": ^7.3.7 "vite@>=8.3.0 <=8.3.2": ^8.3.3 + zod@>=4.0.0 <4.6.6: ^4.6.6 catalog: axe-core: 4.13.0 inferno: ^8.2.3