From b160849d2bca52481ce409de20c0f888b226053d Mon Sep 17 00:00:00 2001 From: EugeniyKiyashko Date: Mon, 26 Oct 2026 12:34:33 +0400 Subject: [PATCH] chore(security): fix body-parser, undici, fast-uri, serialize-javascript and zod advisories --- packages/sbom/pnpm-lock.yaml | 58 ++++++++++++++++---------- packages/sbom/pnpm-workspace.yaml | 6 +-- pnpm-lock.yaml | 68 ++++++++++++++++++------------- pnpm-workspace.yaml | 6 +++ 4 files changed, 86 insertions(+), 52 deletions(-) diff --git a/packages/sbom/pnpm-lock.yaml b/packages/sbom/pnpm-lock.yaml index 50694c10b710..fb3f44e03d18 100644 --- a/packages/sbom/pnpm-lock.yaml +++ b/packages/sbom/pnpm-lock.yaml @@ -7,10 +7,10 @@ settings: overrides: tar@<7.5.19: ^7.5.19 brace-expansion@<5.0.12: ^5.0.12 - body-parser@>=2.0.0 <2.3.0: ^2.3.0 - fast-uri@>=3.0.0 <3.1.8: ^3.1.8 + body-parser@>=2.0.0 <2.4.0: ^2.4.0 + fast-uri@>=3.0.0 <3.1.9: ^3.1.9 qs@>=2.2.5 <6.16.0: ^6.16.0 - undici@>=7.0.0 <7.29.1: ^7.29.1 + undici@>=7.0.0 <7.30.1: ^7.30.1 compression@<1.8.2: ^1.8.2 http-cache-semantics@<4.3.0: ^4.3.0 @@ -251,8 +251,8 @@ packages: resolution: {integrity: sha512-frE1t78WOwJ45PKV2cF2tNPjTcs9L1J9s6VkrV59wanRP4GlaomuxYPVma7BwthMg8WnfSory4w5PTE6FZZ81w==} engines: {node: ^20.17.0 || >=22.9.0} - body-parser@2.3.0: - resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==} + body-parser@2.4.0: + resolution: {integrity: sha512-Ifk1KcLrxaGt1occQagQNFNNOqRt1LFuehEnHHzB8Z6cRgIxRU1TBaiIsUiCdA+gy5PL7Y1IX31DNKkRmxtXjQ==} engines: {node: '>=18'} boolbase@1.0.0: @@ -324,6 +324,10 @@ packages: resolution: {integrity: sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==} engines: {node: '>=18'} + content-type@2.1.0: + resolution: {integrity: sha512-mj7UPXE0jaqaOsukNZRUEfEi2AcL7C/vwmwcHV0O97eO1E1pxBZuyjlZrx5seTaNBg1U6+o35wpa35Qfcc+7ag==} + engines: {node: '>=18'} + css-select@5.2.2: resolution: {integrity: sha512-TizTzUddG/xYLA3NXodFM0fSbNizXjOKhqiQQwvhlspadZokn1KDy0NZFS0wuEubIYAV5/c1/lAr0TaaFXEXzw==} @@ -428,8 +432,8 @@ packages: fast-deep-equal@3.1.3: resolution: {integrity: sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==} - fast-uri@3.1.8: - resolution: {integrity: sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==} + fast-uri@3.1.9: + resolution: {integrity: sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==} finalhandler@1.1.2: resolution: {integrity: sha512-aAWcW57uxVNrQZqFXjITpW3sIUQmHGG3qSb9mUah9MgMC4NeWhNOlNjXEYq3HjRAvL6arUviZGGJsBg6z0zsWA==} @@ -514,6 +518,10 @@ packages: resolution: {integrity: sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==} engines: {node: '>=0.10.0'} + iconv-lite@0.7.3: + resolution: {integrity: sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==} + engines: {node: '>=0.10.0'} + inherits@2.0.4: resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==} @@ -697,8 +705,8 @@ packages: resolution: {integrity: sha512-WPn+h9RGEExOKdu4bsF4HksG/uzd3cFq3MFtq8PsFeExPse5Ha/VOjQNyHhjboBFwGXGev6muJYTSPAOkROq2g==} engines: {node: '>=18'} - qs@6.16.0: - resolution: {integrity: sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==} + qs@6.16.1: + resolution: {integrity: sha512-5Px6J7rfHBAGUhNQ3es4YzcOdBBw0SDcVtThJml4RdnKw4tKs2epA0kPZ+K8X+WiHktT93RHVcQ/3ym5aTCgtg==} engines: {node: '>=0.6'} quick-lru@5.1.1: @@ -820,8 +828,8 @@ packages: engines: {node: '>=14.17'} hasBin: true - undici@7.30.0: - resolution: {integrity: sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==} + undici@7.30.1: + resolution: {integrity: sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==} engines: {node: '>=20.18.1'} unpipe@1.0.0: @@ -1066,7 +1074,7 @@ snapshots: '@cdxgen/cdxgen-plugins-bin-linuxmusl-arm64': 2.3.0 '@cdxgen/cdxgen-plugins-bin-windows-amd64': 2.3.0 '@cdxgen/cdxgen-plugins-bin-windows-arm64': 2.3.0 - body-parser: 2.3.0 + body-parser: 2.4.0 compression: 1.8.2 connect: 3.7.0 jsonata: 2.2.1 @@ -1163,7 +1171,7 @@ snapshots: ajv@8.20.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.8 + fast-uri: 3.1.9 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -1181,15 +1189,15 @@ snapshots: read-cmd-shim: 6.0.0 write-file-atomic: 7.0.1 - body-parser@2.3.0: + body-parser@2.4.0: dependencies: bytes: 3.1.2 - content-type: 2.0.0 + content-type: 2.1.0 debug: 4.4.3 http-errors: 2.0.1 - iconv-lite: 0.7.2 + iconv-lite: 0.7.3 on-finished: 2.4.1 - qs: 6.16.0 + qs: 6.16.1 raw-body: 3.0.2 type-is: 2.1.0 transitivePeerDependencies: @@ -1251,7 +1259,7 @@ snapshots: parse5: 7.3.0 parse5-htmlparser2-tree-adapter: 7.1.0 parse5-parser-stream: 7.1.2 - undici: 7.30.0 + undici: 7.30.1 whatwg-mimetype: 4.0.0 chownr@3.0.0: {} @@ -1298,6 +1306,9 @@ snapshots: content-type@2.0.0: optional: true + content-type@2.1.0: + optional: true + css-select@5.2.2: dependencies: boolbase: 1.0.0 @@ -1391,7 +1402,7 @@ snapshots: fast-deep-equal@3.1.3: {} - fast-uri@3.1.8: {} + fast-uri@3.1.9: {} finalhandler@1.1.2: dependencies: @@ -1515,6 +1526,11 @@ snapshots: dependencies: safer-buffer: 2.1.2 + iconv-lite@0.7.3: + dependencies: + safer-buffer: 2.1.2 + optional: true + inherits@2.0.4: optional: true @@ -1671,7 +1687,7 @@ snapshots: transitivePeerDependencies: - supports-color - qs@6.16.0: + qs@6.16.1: dependencies: es-define-property: 1.0.1 side-channel: 1.1.1 @@ -1802,7 +1818,7 @@ snapshots: typescript@6.0.3: optional: true - undici@7.30.0: {} + undici@7.30.1: {} unpipe@1.0.0: optional: true diff --git a/packages/sbom/pnpm-workspace.yaml b/packages/sbom/pnpm-workspace.yaml index 7aee1dbfbba0..5e5b5709105a 100644 --- a/packages/sbom/pnpm-workspace.yaml +++ b/packages/sbom/pnpm-workspace.yaml @@ -7,9 +7,9 @@ minimumReleaseAgeExclude: overrides: tar@<7.5.19: ^7.5.19 brace-expansion@<5.0.12: ^5.0.12 - body-parser@>=2.0.0 <2.3.0: ^2.3.0 - fast-uri@>=3.0.0 <3.1.8: ^3.1.8 + body-parser@>=2.0.0 <2.4.0: ^2.4.0 + fast-uri@>=3.0.0 <3.1.9: ^3.1.9 qs@>=2.2.5 <6.16.0: ^6.16.0 - undici@>=7.0.0 <7.29.1: ^7.29.1 + undici@>=7.0.0 <7.30.1: ^7.30.1 compression@<1.8.2: ^1.8.2 http-cache-semantics@<4.3.0: ^4.3.0 diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 860cd8899730..0f53759f31e6 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -200,8 +200,11 @@ overrides: '@jridgewell/sourcemap-codec@<1.6.0': ^1.6.0 '@vue/server-renderer@<3.5.42': ^3.5.42 axios@>=1.0.0 <1.20.0: ^1.20.0 + body-parser@<1.20.9: ^1.20.9 + body-parser@>=2.0.0 <2.4.0: ^2.4.0 compression@<1.8.2: ^1.8.2 dompurify@<=3.4.16: ^3.4.17 + fast-uri@>=3.0.0 <3.1.9: ^3.1.9 follow-redirects@>=1.16.0 <1.16.1: ^1.16.1 hono@<4.13.11: ^4.13.11 http-cache-semantics@<4.3.0: ^4.3.0 @@ -212,9 +215,12 @@ overrides: postcss-selector-parser@<7.1.6: ^7.1.6 probe-image-size@<=7.3.0: ^7.3.1 proxy-addr@>=1.1.0 <2.0.8: ^2.0.8 + serialize-javascript@<7.1.3: ^7.1.3 shell-quote@>=1.8.4 <1.11.0: ^1.11.0 smol-toml@<=1.8.0: ^1.8.1 source-map-js@>=1.0.0 <1.2.2: ^1.2.2 + undici@>=6.5.0 <6.29.1: ^6.29.1 + zod@>=4.0.0 <4.6.6: ^4.6.6 patchedDependencies: testcafe-hammerhead@31.7.8: 8655c07786177d3b611a05abf6b0ea87d32796eb2601f92a800ef041095f264c @@ -5274,7 +5280,7 @@ packages: engines: {node: '>=18'} peerDependencies: '@cfworker/json-schema': ^4.1.1 - zod: ^3.25 || ^4.0 + zod: ^4.6.6 peerDependenciesMeta: '@cfworker/json-schema': optional: true @@ -8792,12 +8798,12 @@ packages: bn.js@5.2.5: resolution: {integrity: sha512-Vq886eXykuP5E6HcKSSStP3bJgrE6In5WKxVUvJ8XGpWWYs2xZHWqUwzCtGgEtBcxyd57KBFDPFoUfNzdaHCNg==} - body-parser@1.20.6: - resolution: {integrity: sha512-p5tAzS57i5MV9fZFDj9LeIiTZEufbSe2eDozP+ElheSUq1m74CRq1jI4mYNDdVs9vQztXFLuk/Gd6BWTdwRJ5g==} + body-parser@1.20.9: + resolution: {integrity: sha512-FISIQxV5u91Y9gvuFq3q/tA/qTqLJn3AhRcEvyozyhJTh5OBFFtv827AdHU7Rbyct4r+Ba1/99oFa1Y3yuFsdw==} engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16} - body-parser@2.3.0: - resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==} + body-parser@2.4.0: + resolution: {integrity: sha512-Ifk1KcLrxaGt1occQagQNFNNOqRt1LFuehEnHHzB8Z6cRgIxRU1TBaiIsUiCdA+gy5PL7Y1IX31DNKkRmxtXjQ==} engines: {node: '>=18'} bonjour-service@1.4.4: @@ -9372,6 +9378,10 @@ packages: resolution: {integrity: sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==} engines: {node: '>=18'} + content-type@2.1.0: + resolution: {integrity: sha512-mj7UPXE0jaqaOsukNZRUEfEi2AcL7C/vwmwcHV0O97eO1E1pxBZuyjlZrx5seTaNBg1U6+o35wpa35Qfcc+7ag==} + engines: {node: '>=18'} + convert-source-map@1.1.3: resolution: {integrity: sha512-Y8L5rp6jo+g9VEPgvqNfEopjTR4OTYct8lXlS8iVQdmnjDvbdbzYe9rjtFCB9egC86JoNCU61WRY+ScjkZpnIg==} @@ -10690,8 +10700,8 @@ packages: fast-string-width@3.0.2: resolution: {integrity: sha512-gX8LrtNEI5hq8DVUfRQMbr5lpaS4nMIWV+7XEbXk2b8kiQIizgnlr12B4dA3ZEx3308ze0O4Q1R+cHts8kyUJg==} - fast-uri@3.1.8: - resolution: {integrity: sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==} + fast-uri@3.1.9: + resolution: {integrity: sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==} fast-wrap-ansi@0.2.0: resolution: {integrity: sha512-rLV8JHxTyhVmFYhBJuMujcrHqOT2cnO5Zxj37qROj23CP39GXubJRBUFF0z8KFK77Uc0SukZUf7JZhsVEQ6n8w==} @@ -13590,7 +13600,7 @@ packages: '@smithy/hash-node': '>=4.3.0 <5' '@smithy/signature-v4': '>=5.4.0 <6' ws: ^8.18.0 - zod: ^3.25 || ^4.0 + zod: ^4.6.6 peerDependenciesMeta: '@aws-sdk/credential-provider-node': optional: true @@ -15079,8 +15089,8 @@ packages: resolution: {integrity: sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==} engines: {node: '>= 18'} - serialize-javascript@7.0.7: - resolution: {integrity: sha512-YAy8Od6KV+uuwUuU50np8fGB/Aues6Y0nAhA9y/hId74PlKUcme4pXcBD46NWKr1Q4osN/iseZ17YqO1XfmI8g==} + serialize-javascript@7.1.4: + resolution: {integrity: sha512-FqlEuoTq/zRmA4Lg6aOqyH3lCHbUtCB0bmHCeFniX2GBdDqMJM3FwdvEhlE5Pim1dlt2FfBdVPmUNNiGhhKqpw==} engines: {node: '>=20.0.0'} serve-index@1.9.2: @@ -16093,8 +16103,8 @@ packages: undici-types@6.21.0: resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==} - undici@6.29.0: - resolution: {integrity: sha512-R+RODBqp6i2pPflGdq+xIOUkl+RNfGgHwoinecKu/JCuf2uO06cOKoDbI2P7Dn6KcswdKwrczbU6IYJ6K8X+wg==} + undici@6.29.1: + resolution: {integrity: sha512-EvRlUt/QqAEvXdQeRMYUfwOQsfzpDztykrG2owGEE/rBOBoYv9uF39ZzsNDh4lTFHhTr2XOZjKkYgueD12ZmGA==} engines: {node: '>=18.17'} unicode-canonical-property-names-ecmascript@2.0.1: @@ -16925,13 +16935,13 @@ packages: zod-to-json-schema@3.25.2: resolution: {integrity: sha512-O/PgfnpT1xKSDeQYSCfRI5Gy3hPf91mKVDuYLUHZJMiDFptvP41MSnWofm8dnCm0256ZNfZIM7DSzuSMAFnjHA==} peerDependencies: - zod: ^3.25.28 || ^4 + zod: ^4.6.6 zod-validation-error@4.0.2: resolution: {integrity: sha512-Q6/nZLe6jxuU80qb/4uJ4t5v2VEZ44lzQjPDhYJNztRQ4wyWc6VF3D3Kb/fAuPetZQnhS3hnajCf9CsWesghLQ==} engines: {node: '>=18.0.0'} peerDependencies: - zod: ^3.25.0 || ^4.0.0 + zod: ^4.6.6 zod@3.25.76: resolution: {integrity: sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==} @@ -24855,14 +24865,14 @@ snapshots: ajv@8.18.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.8 + fast-uri: 3.1.9 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 ajv@8.20.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.8 + fast-uri: 3.1.9 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -25489,7 +25499,7 @@ snapshots: bn.js@5.2.5: {} - body-parser@1.20.6: + body-parser@1.20.9: dependencies: bytes: 3.1.2 content-type: 1.0.5 @@ -25506,10 +25516,10 @@ snapshots: transitivePeerDependencies: - supports-color - body-parser@2.3.0(supports-color@7.2.0): + body-parser@2.4.0(supports-color@7.2.0): dependencies: bytes: 3.1.2 - content-type: 2.0.0 + content-type: 2.1.0 debug: 4.4.3(supports-color@7.2.0) http-errors: 2.0.1 iconv-lite: 0.7.3 @@ -26168,6 +26178,8 @@ snapshots: content-type@2.0.0: {} + content-type@2.1.0: {} + convert-source-map@1.1.3: {} convert-source-map@1.9.0: {} @@ -26198,7 +26210,7 @@ snapshots: glob-parent: 6.0.2 normalize-path: 3.0.0 schema-utils: 4.8.1(webpack@5.105.0(@swc/core@1.15.47(@swc/helpers@0.5.23))(esbuild@0.28.1)) - serialize-javascript: 7.0.7 + serialize-javascript: 7.1.4 tinyglobby: 0.2.17 webpack: 5.105.0(@swc/core@1.15.47(@swc/helpers@0.5.23))(esbuild@0.28.1) @@ -26207,7 +26219,7 @@ snapshots: glob-parent: 6.0.2 normalize-path: 3.0.0 schema-utils: 4.8.1(webpack@5.111.0(@swc/core@1.15.47(@swc/helpers@0.5.23))(esbuild@0.28.2)(postcss@8.5.28)) - serialize-javascript: 7.0.7 + serialize-javascript: 7.1.4 tinyglobby: 0.2.17 webpack: 5.111.0(@swc/core@1.15.47(@swc/helpers@0.5.23))(esbuild@0.28.2)(postcss@8.5.28) @@ -28103,7 +28115,7 @@ snapshots: dependencies: accepts: 1.3.8 array-flatten: 1.1.1 - body-parser: 1.20.6 + body-parser: 1.20.9 content-disposition: 0.5.4 content-type: 1.0.5 cookie: 0.7.2 @@ -28138,7 +28150,7 @@ snapshots: express@5.2.1(supports-color@7.2.0): dependencies: accepts: 2.0.0 - body-parser: 2.3.0(supports-color@7.2.0) + body-parser: 2.4.0(supports-color@7.2.0) content-disposition: 1.1.0 content-type: 1.0.5 cookie: 0.7.2 @@ -28209,7 +28221,7 @@ snapshots: dependencies: fast-string-truncated-width: 3.0.3 - fast-uri@3.1.8: {} + fast-uri@3.1.9: {} fast-wrap-ansi@0.2.0: dependencies: @@ -30739,7 +30751,7 @@ snapshots: karma@6.4.4: dependencies: '@colors/colors': 1.5.0 - body-parser: 1.20.6 + body-parser: 1.20.9 braces: 3.0.3 chokidar: 3.6.0 connect: 3.7.0 @@ -31916,7 +31928,7 @@ snapshots: semver: 7.8.5 tar: 7.5.22 tinyglobby: 0.2.17 - undici: 6.29.0 + undici: 6.29.1 which: 6.0.1 node-int64@0.4.0: {} @@ -34038,7 +34050,7 @@ snapshots: transitivePeerDependencies: - supports-color - serialize-javascript@7.0.7: {} + serialize-javascript@7.1.4: {} serve-index@1.9.2: dependencies: @@ -35667,7 +35679,7 @@ snapshots: undici-types@6.21.0: {} - undici@6.29.0: {} + undici@6.29.1: {} unicode-canonical-property-names-ecmascript@2.0.1: {} diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 095b6147a875..5a54b2558a4e 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -42,8 +42,11 @@ overrides: '@jridgewell/sourcemap-codec@<1.6.0': ^1.6.0 '@vue/server-renderer@<3.5.42': ^3.5.42 axios@>=1.0.0 <1.20.0: ^1.20.0 + body-parser@<1.20.9: ^1.20.9 + body-parser@>=2.0.0 <2.4.0: ^2.4.0 compression@<1.8.2: ^1.8.2 dompurify@<=3.4.16: ^3.4.17 + fast-uri@>=3.0.0 <3.1.9: ^3.1.9 follow-redirects@>=1.16.0 <1.16.1: ^1.16.1 hono@<4.13.11: ^4.13.11 http-cache-semantics@<4.3.0: ^4.3.0 @@ -54,9 +57,12 @@ overrides: postcss-selector-parser@<7.1.6: ^7.1.6 probe-image-size@<=7.3.0: ^7.3.1 proxy-addr@>=1.1.0 <2.0.8: ^2.0.8 + serialize-javascript@<7.1.3: ^7.1.3 shell-quote@>=1.8.4 <1.11.0: ^1.11.0 smol-toml@<=1.8.0: ^1.8.1 source-map-js@>=1.0.0 <1.2.2: ^1.2.2 + undici@>=6.5.0 <6.29.1: ^6.29.1 + zod@>=4.0.0 <4.6.6: ^4.6.6 catalog: axe-core: 4.13.0 inferno: ^8.2.3