From 1ea2be5c15f62efd24341557d2463b8cef538417 Mon Sep 17 00:00:00 2001 From: EugeniyKiyashko Date: Mon, 26 Oct 2026 12:34:33 +0400 Subject: [PATCH] chore(security): fix body-parser, undici, fast-uri, serialize-javascript and zod advisories --- packages/sbom/pnpm-lock.yaml | 58 +++++++++++------ packages/sbom/pnpm-workspace.yaml | 6 +- pnpm-lock.yaml | 103 +++++++++++++++--------------- pnpm-workspace.yaml | 12 ++-- 4 files changed, 97 insertions(+), 82 deletions(-) diff --git a/packages/sbom/pnpm-lock.yaml b/packages/sbom/pnpm-lock.yaml index 5911d9e48edb..b594fa39eaa0 100644 --- a/packages/sbom/pnpm-lock.yaml +++ b/packages/sbom/pnpm-lock.yaml @@ -7,9 +7,9 @@ settings: overrides: tar@<7.5.22: ^7.5.22 brace-expansion@<5.0.12: ^5.0.12 - body-parser@>=2.0.0 <2.3.0: ^2.3.0 - fast-uri@>=3.0.0 <3.1.8: ^3.1.8 - undici@>=7.0.0 <7.29.1: ^7.29.1 + body-parser@>=2.0.0 <2.4.0: ^2.4.0 + fast-uri@>=3.0.0 <3.1.9: ^3.1.9 + undici@>=7.0.0 <7.30.1: ^7.30.1 compression@<1.8.2: ^1.8.2 http-cache-semantics@<=4.2.0: ^4.3.0 @@ -245,8 +245,8 @@ packages: resolution: {integrity: sha512-frE1t78WOwJ45PKV2cF2tNPjTcs9L1J9s6VkrV59wanRP4GlaomuxYPVma7BwthMg8WnfSory4w5PTE6FZZ81w==} engines: {node: ^20.17.0 || >=22.9.0} - body-parser@2.3.0: - resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==} + body-parser@2.4.0: + resolution: {integrity: sha512-Ifk1KcLrxaGt1occQagQNFNNOqRt1LFuehEnHHzB8Z6cRgIxRU1TBaiIsUiCdA+gy5PL7Y1IX31DNKkRmxtXjQ==} engines: {node: '>=18'} boolbase@1.0.0: @@ -318,6 +318,10 @@ packages: resolution: {integrity: sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==} engines: {node: '>=18'} + content-type@2.1.0: + resolution: {integrity: sha512-mj7UPXE0jaqaOsukNZRUEfEi2AcL7C/vwmwcHV0O97eO1E1pxBZuyjlZrx5seTaNBg1U6+o35wpa35Qfcc+7ag==} + engines: {node: '>=18'} + css-select@5.2.2: resolution: {integrity: sha512-TizTzUddG/xYLA3NXodFM0fSbNizXjOKhqiQQwvhlspadZokn1KDy0NZFS0wuEubIYAV5/c1/lAr0TaaFXEXzw==} @@ -422,8 +426,8 @@ packages: fast-deep-equal@3.1.3: resolution: {integrity: sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==} - fast-uri@3.1.8: - resolution: {integrity: sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==} + fast-uri@3.1.9: + resolution: {integrity: sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==} finalhandler@1.1.2: resolution: {integrity: sha512-aAWcW57uxVNrQZqFXjITpW3sIUQmHGG3qSb9mUah9MgMC4NeWhNOlNjXEYq3HjRAvL6arUviZGGJsBg6z0zsWA==} @@ -508,6 +512,10 @@ packages: resolution: {integrity: sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==} engines: {node: '>=0.10.0'} + iconv-lite@0.7.3: + resolution: {integrity: sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==} + engines: {node: '>=0.10.0'} + inherits@2.0.4: resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==} @@ -691,8 +699,8 @@ packages: resolution: {integrity: sha512-WPn+h9RGEExOKdu4bsF4HksG/uzd3cFq3MFtq8PsFeExPse5Ha/VOjQNyHhjboBFwGXGev6muJYTSPAOkROq2g==} engines: {node: '>=18'} - qs@6.16.0: - resolution: {integrity: sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==} + qs@6.16.1: + resolution: {integrity: sha512-5Px6J7rfHBAGUhNQ3es4YzcOdBBw0SDcVtThJml4RdnKw4tKs2epA0kPZ+K8X+WiHktT93RHVcQ/3ym5aTCgtg==} engines: {node: '>=0.6'} quick-lru@5.1.1: @@ -814,8 +822,8 @@ packages: engines: {node: '>=14.17'} hasBin: true - undici@7.30.0: - resolution: {integrity: sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==} + undici@7.30.1: + resolution: {integrity: sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==} engines: {node: '>=20.18.1'} unpipe@1.0.0: @@ -1056,7 +1064,7 @@ snapshots: '@cdxgen/cdxgen-plugins-bin-linuxmusl-arm64': 2.3.0 '@cdxgen/cdxgen-plugins-bin-windows-amd64': 2.3.0 '@cdxgen/cdxgen-plugins-bin-windows-arm64': 2.3.0 - body-parser: 2.3.0 + body-parser: 2.4.0 compression: 1.8.2 connect: 3.7.0 jsonata: 2.2.1 @@ -1153,7 +1161,7 @@ snapshots: ajv@8.20.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.8 + fast-uri: 3.1.9 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -1171,15 +1179,15 @@ snapshots: read-cmd-shim: 6.0.0 write-file-atomic: 7.0.1 - body-parser@2.3.0: + body-parser@2.4.0: dependencies: bytes: 3.1.2 - content-type: 2.0.0 + content-type: 2.1.0 debug: 4.4.3 http-errors: 2.0.1 - iconv-lite: 0.7.2 + iconv-lite: 0.7.3 on-finished: 2.4.1 - qs: 6.16.0 + qs: 6.16.1 raw-body: 3.0.2 type-is: 2.1.0 transitivePeerDependencies: @@ -1241,7 +1249,7 @@ snapshots: parse5: 7.3.0 parse5-htmlparser2-tree-adapter: 7.1.0 parse5-parser-stream: 7.1.2 - undici: 7.30.0 + undici: 7.30.1 whatwg-mimetype: 4.0.0 chownr@3.0.0: {} @@ -1288,6 +1296,9 @@ snapshots: content-type@2.0.0: optional: true + content-type@2.1.0: + optional: true + css-select@5.2.2: dependencies: boolbase: 1.0.0 @@ -1381,7 +1392,7 @@ snapshots: fast-deep-equal@3.1.3: {} - fast-uri@3.1.8: {} + fast-uri@3.1.9: {} finalhandler@1.1.2: dependencies: @@ -1505,6 +1516,11 @@ snapshots: dependencies: safer-buffer: 2.1.2 + iconv-lite@0.7.3: + dependencies: + safer-buffer: 2.1.2 + optional: true + inherits@2.0.4: optional: true @@ -1661,7 +1677,7 @@ snapshots: transitivePeerDependencies: - supports-color - qs@6.16.0: + qs@6.16.1: dependencies: es-define-property: 1.0.1 side-channel: 1.1.1 @@ -1792,7 +1808,7 @@ snapshots: typescript@6.0.3: optional: true - undici@7.30.0: {} + undici@7.30.1: {} unpipe@1.0.0: optional: true diff --git a/packages/sbom/pnpm-workspace.yaml b/packages/sbom/pnpm-workspace.yaml index bf613be32690..fdffd6249cce 100644 --- a/packages/sbom/pnpm-workspace.yaml +++ b/packages/sbom/pnpm-workspace.yaml @@ -7,8 +7,8 @@ minimumReleaseAgeExclude: overrides: tar@<7.5.22: ^7.5.22 brace-expansion@<5.0.12: ^5.0.12 - body-parser@>=2.0.0 <2.3.0: ^2.3.0 - fast-uri@>=3.0.0 <3.1.8: ^3.1.8 - undici@>=7.0.0 <7.29.1: ^7.29.1 + body-parser@>=2.0.0 <2.4.0: ^2.4.0 + fast-uri@>=3.0.0 <3.1.9: ^3.1.9 + undici@>=7.0.0 <7.30.1: ^7.30.1 compression@<1.8.2: ^1.8.2 http-cache-semantics@<=4.2.0: ^4.3.0 diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 2cbfb8e54c05..585b0f5cd1b3 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -169,7 +169,8 @@ overrides: '@babel/core@<=7.29.0': ^7.29.1 '@tootallnate/once@<3.0.1': ^3.0.1 babel-traverse: npm:@babel/traverse@^7.23.2 - body-parser@<1.20.6: ^1.20.6 + body-parser@<1.20.9: ^1.20.9 + body-parser@>=2.0.0 <2.4.0: ^2.4.0 brace-expansion@<3.0.0: ^2.1.7 brace-expansion@>=3.0.0 <5.0.12: ^5.0.12 braces@<3.0.3: ^3.0.3 @@ -188,7 +189,7 @@ overrides: qs: '>=6.16.0' rollup@<4.59.0: ^4.59.0 semver@<5.7.2: ^5.7.2 - serialize-javascript@<=7.0.2: 7.0.5 + serialize-javascript@<7.1.3: ^7.1.3 systemjs-builder>terser: 5.46.2 tmp@<0.2.7: ^0.2.7 uuid@<14.0.0: ~14.0.0 @@ -197,10 +198,10 @@ overrides: less@<4.8.0: ^4.8.0 yaml@>=2.0.0 <2.8.3: ^2.8.3 '@hono/node-server@<2.0.12': ^2.0.12 - fast-uri@>=3.0.0 <3.1.8: ^3.1.8 + fast-uri@>=3.0.0 <3.1.9: ^3.1.9 ip-address@<10.7.4: ^10.7.4 - undici@>=6.25.0 <6.28.1: ^6.28.1 - undici@>=7.28.0 <7.29.1: ^7.29.1 + undici@>=6.5.0 <6.29.1: ^6.29.1 + undici@>=7.0.0 <7.30.1: ^7.30.1 engine.io@>=6.6.0 <6.6.10: ^6.6.10 moment@>=2.29.2 <2.31.0: ^2.31.0 webpack-dev-middleware@<7.4.5: ^7.4.5 @@ -222,6 +223,7 @@ overrides: shell-quote@>=1.8.4 <1.11.0: ^1.11.0 smol-toml@<=1.8.0: ^1.8.1 source-map-js@>=1.0.0 <1.2.2: ^1.2.2 + zod@>=4.0.0 <4.6.6: ^4.6.6 patchedDependencies: babel-core@6.26.3: c0f53059bb7026b811209ee3af7fd4c700c900c615d0a0b14981ce911fcf3392 @@ -4620,7 +4622,7 @@ packages: engines: {node: '>=18'} peerDependencies: '@cfworker/json-schema': ^4.1.1 - zod: ^3.25 || ^4.0 + zod: ^4.6.6 peerDependenciesMeta: '@cfworker/json-schema': optional: true @@ -8090,12 +8092,12 @@ packages: bn.js@5.2.5: resolution: {integrity: sha512-Vq886eXykuP5E6HcKSSStP3bJgrE6In5WKxVUvJ8XGpWWYs2xZHWqUwzCtGgEtBcxyd57KBFDPFoUfNzdaHCNg==} - body-parser@1.20.6: - resolution: {integrity: sha512-p5tAzS57i5MV9fZFDj9LeIiTZEufbSe2eDozP+ElheSUq1m74CRq1jI4mYNDdVs9vQztXFLuk/Gd6BWTdwRJ5g==} + body-parser@1.20.9: + resolution: {integrity: sha512-FISIQxV5u91Y9gvuFq3q/tA/qTqLJn3AhRcEvyozyhJTh5OBFFtv827AdHU7Rbyct4r+Ba1/99oFa1Y3yuFsdw==} engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16} - body-parser@2.3.0: - resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==} + body-parser@2.4.0: + resolution: {integrity: sha512-Ifk1KcLrxaGt1occQagQNFNNOqRt1LFuehEnHHzB8Z6cRgIxRU1TBaiIsUiCdA+gy5PL7Y1IX31DNKkRmxtXjQ==} engines: {node: '>=18'} bonjour-service@1.4.3: @@ -8720,6 +8722,10 @@ packages: resolution: {integrity: sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==} engines: {node: '>=18'} + content-type@2.1.0: + resolution: {integrity: sha512-mj7UPXE0jaqaOsukNZRUEfEi2AcL7C/vwmwcHV0O97eO1E1pxBZuyjlZrx5seTaNBg1U6+o35wpa35Qfcc+7ag==} + engines: {node: '>=18'} + convert-source-map@1.1.3: resolution: {integrity: sha512-Y8L5rp6jo+g9VEPgvqNfEopjTR4OTYct8lXlS8iVQdmnjDvbdbzYe9rjtFCB9egC86JoNCU61WRY+ScjkZpnIg==} @@ -10125,8 +10131,8 @@ packages: fast-safe-stringify@2.1.1: resolution: {integrity: sha512-W+KJc2dmILlPplD/H4K9l9LcAHAfPtP6BY84uVLXQ6Evcz9Lcg33Y2z1IVblT6xdY54PXYVHEv+0Wpq8Io6zkA==} - fast-uri@3.1.8: - resolution: {integrity: sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==} + fast-uri@3.1.9: + resolution: {integrity: sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==} fastest-levenshtein@1.0.16: resolution: {integrity: sha512-eRnCtTTtGZFpQCwhJiUOuxPQWRXVKYDn0b2PeHfXL6/Zi53SLAzAHfVhVWK2AryC/WH05kGfxhFIPvTF0SXQzg==} @@ -15084,12 +15090,8 @@ packages: resolution: {integrity: sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==} engines: {node: '>= 18'} - serialize-javascript@7.0.5: - resolution: {integrity: sha512-F4LcB0UqUl1zErq+1nYEEzSHJnIwb3AF2XWB94b+afhrekOUijwooAYqFyRbjYkm2PAKBabx6oYv/xDxNi8IBw==} - engines: {node: '>=20.0.0'} - - serialize-javascript@7.0.7: - resolution: {integrity: sha512-YAy8Od6KV+uuwUuU50np8fGB/Aues6Y0nAhA9y/hId74PlKUcme4pXcBD46NWKr1Q4osN/iseZ17YqO1XfmI8g==} + serialize-javascript@7.1.4: + resolution: {integrity: sha512-FqlEuoTq/zRmA4Lg6aOqyH3lCHbUtCB0bmHCeFniX2GBdDqMJM3FwdvEhlE5Pim1dlt2FfBdVPmUNNiGhhKqpw==} engines: {node: '>=20.0.0'} serve-index@1.9.1: @@ -16284,12 +16286,12 @@ packages: undici-types@6.21.0: resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==} - undici@6.29.0: - resolution: {integrity: sha512-R+RODBqp6i2pPflGdq+xIOUkl+RNfGgHwoinecKu/JCuf2uO06cOKoDbI2P7Dn6KcswdKwrczbU6IYJ6K8X+wg==} + undici@6.29.1: + resolution: {integrity: sha512-EvRlUt/QqAEvXdQeRMYUfwOQsfzpDztykrG2owGEE/rBOBoYv9uF39ZzsNDh4lTFHhTr2XOZjKkYgueD12ZmGA==} engines: {node: '>=18.17'} - undici@7.29.1: - resolution: {integrity: sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==} + undici@7.30.1: + resolution: {integrity: sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==} engines: {node: '>=20.18.1'} unicode-canonical-property-names-ecmascript@2.0.1: @@ -17103,20 +17105,17 @@ packages: zod-to-json-schema@3.25.2: resolution: {integrity: sha512-O/PgfnpT1xKSDeQYSCfRI5Gy3hPf91mKVDuYLUHZJMiDFptvP41MSnWofm8dnCm0256ZNfZIM7DSzuSMAFnjHA==} peerDependencies: - zod: ^3.25.28 || ^4 + zod: ^4.6.6 zod-validation-error@4.0.2: resolution: {integrity: sha512-Q6/nZLe6jxuU80qb/4uJ4t5v2VEZ44lzQjPDhYJNztRQ4wyWc6VF3D3Kb/fAuPetZQnhS3hnajCf9CsWesghLQ==} engines: {node: '>=18.0.0'} peerDependencies: - zod: ^3.25.0 || ^4.0.0 + zod: ^4.6.6 zod@3.25.76: resolution: {integrity: sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==} - zod@4.4.3: - resolution: {integrity: sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==} - zod@4.6.6: resolution: {integrity: sha512-4UmzQUF5fxvfcYHlbjBmejU+w+hbDnWFx4aS8kBx7nPBHcO2SqPbpAG8snbdg+Xse4pRefR98hgjFgIMCI/UhA==} @@ -17808,7 +17807,7 @@ snapshots: tinyglobby: 0.2.15 tslib: 2.8.1 typescript: 5.9.3 - undici: 7.29.1 + undici: 7.30.1 vite: 7.3.7(@types/node@20.12.8)(jiti@2.7.0)(less@4.9.0)(lightningcss@1.32.0)(sass-embedded@1.100.0)(sass@1.97.3)(terser@5.46.0)(yaml@2.9.0) watchpack: 2.5.1 optionalDependencies: @@ -24146,14 +24145,14 @@ snapshots: ajv@8.18.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.8 + fast-uri: 3.1.9 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 ajv@8.20.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.8 + fast-uri: 3.1.9 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -24976,7 +24975,7 @@ snapshots: bn.js@5.2.5: {} - body-parser@1.20.6: + body-parser@1.20.9: dependencies: bytes: 3.1.2 content-type: 1.0.5 @@ -24993,10 +24992,10 @@ snapshots: transitivePeerDependencies: - supports-color - body-parser@2.3.0(supports-color@7.2.0): + body-parser@2.4.0(supports-color@7.2.0): dependencies: bytes: 3.1.2 - content-type: 2.0.0 + content-type: 2.1.0 debug: 4.4.3(supports-color@7.2.0) http-errors: 2.0.1 iconv-lite: 0.7.3 @@ -25723,6 +25722,8 @@ snapshots: content-type@2.0.0: {} + content-type@2.1.0: {} + convert-source-map@1.1.3: {} convert-source-map@1.9.0: {} @@ -25760,7 +25761,7 @@ snapshots: glob-parent: 6.0.2 normalize-path: 3.0.0 schema-utils: 4.3.3 - serialize-javascript: 7.0.7 + serialize-javascript: 7.1.4 tinyglobby: 0.2.17 webpack: 5.105.0(@swc/core@1.15.46(@swc/helpers@0.5.23))(esbuild@0.28.1) @@ -25769,7 +25770,7 @@ snapshots: glob-parent: 6.0.2 normalize-path: 3.0.0 schema-utils: 4.3.3 - serialize-javascript: 7.0.7 + serialize-javascript: 7.1.4 tinyglobby: 0.2.17 webpack: 5.105.2(@swc/core@1.15.46(@swc/helpers@0.5.23))(esbuild@0.28.1) @@ -27452,8 +27453,8 @@ snapshots: '@babel/parser': 7.29.7 eslint: 9.39.4(jiti@2.7.0) hermes-parser: 0.25.1 - zod: 4.4.3 - zod-validation-error: 4.0.2(zod@4.4.3) + zod: 4.6.6 + zod-validation-error: 4.0.2(zod@4.6.6) transitivePeerDependencies: - supports-color @@ -27890,7 +27891,7 @@ snapshots: dependencies: accepts: 1.3.8 array-flatten: 1.1.1 - body-parser: 1.20.6 + body-parser: 1.20.9 content-disposition: 0.5.4 content-type: 1.0.5 cookie: 0.7.1 @@ -27926,7 +27927,7 @@ snapshots: dependencies: accepts: 1.3.8 array-flatten: 1.1.1 - body-parser: 1.20.6 + body-parser: 1.20.9 content-disposition: 0.5.4 content-type: 1.0.5 cookie: 0.7.2 @@ -27961,7 +27962,7 @@ snapshots: express@5.2.1(supports-color@7.2.0): dependencies: accepts: 2.0.0 - body-parser: 2.3.0(supports-color@7.2.0) + body-parser: 2.4.0(supports-color@7.2.0) content-disposition: 1.1.0 content-type: 1.0.5 cookie: 0.7.2 @@ -28058,7 +28059,7 @@ snapshots: fast-safe-stringify@2.1.1: {} - fast-uri@3.1.8: {} + fast-uri@3.1.9: {} fastest-levenshtein@1.0.16: {} @@ -31078,7 +31079,7 @@ snapshots: karma@6.4.4: dependencies: '@colors/colors': 1.5.0 - body-parser: 1.20.6 + body-parser: 1.20.9 braces: 3.0.3 chokidar: 3.6.0 connect: 3.7.0 @@ -32285,7 +32286,7 @@ snapshots: semver: 7.8.5 tar: 7.5.22 tinyglobby: 0.2.17 - undici: 6.29.0 + undici: 6.29.1 which: 6.0.1 node-int64@0.4.0: {} @@ -34603,9 +34604,7 @@ snapshots: transitivePeerDependencies: - supports-color - serialize-javascript@7.0.5: {} - - serialize-javascript@7.0.7: {} + serialize-javascript@7.1.4: {} serve-index@1.9.1: dependencies: @@ -35690,7 +35689,7 @@ snapshots: '@jridgewell/trace-mapping': 0.3.31 jest-worker: 27.5.1 schema-utils: 3.3.0 - serialize-javascript: 7.0.5 + serialize-javascript: 7.1.4 terser: 5.49.0 webpack: 5.105.4(@swc/core@1.15.46(@swc/helpers@0.5.23)) optionalDependencies: @@ -36474,9 +36473,9 @@ snapshots: undici-types@6.21.0: {} - undici@6.29.0: {} + undici@6.29.1: {} - undici@7.29.1: {} + undici@7.30.1: {} unicode-canonical-property-names-ecmascript@2.0.1: {} @@ -37794,14 +37793,12 @@ snapshots: dependencies: zod: 4.6.6 - zod-validation-error@4.0.2(zod@4.4.3): + zod-validation-error@4.0.2(zod@4.6.6): dependencies: - zod: 4.4.3 + zod: 4.6.6 zod@3.25.76: {} - zod@4.4.3: {} - zod@4.6.6: {} zone.js@0.15.1: {} diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index c3ba21df615d..065cbc8afa54 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -14,7 +14,8 @@ overrides: "@babel/core@<=7.29.0": ^7.29.1 "@tootallnate/once@<3.0.1": ^3.0.1 "babel-traverse": "npm:@babel/traverse@^7.23.2" - "body-parser@<1.20.6": ^1.20.6 + "body-parser@<1.20.9": ^1.20.9 + "body-parser@>=2.0.0 <2.4.0": ^2.4.0 "brace-expansion@<3.0.0": "^2.1.7" "brace-expansion@>=3.0.0 <5.0.12": "^5.0.12" "braces@<3.0.3": ^3.0.3 @@ -33,7 +34,7 @@ overrides: "qs": ">=6.16.0" "rollup@<4.59.0": "^4.59.0" "semver@<5.7.2": ^5.7.2 - "serialize-javascript@<=7.0.2": 7.0.5 + "serialize-javascript@<7.1.3": ^7.1.3 "systemjs-builder>terser": 5.46.2 "tmp@<0.2.7": "^0.2.7" "uuid@<14.0.0": ~14.0.0 @@ -42,10 +43,10 @@ overrides: "less@<4.8.0": ^4.8.0 "yaml@>=2.0.0 <2.8.3": ^2.8.3 "@hono/node-server@<2.0.12": ^2.0.12 - "fast-uri@>=3.0.0 <3.1.8": ^3.1.8 + "fast-uri@>=3.0.0 <3.1.9": ^3.1.9 "ip-address@<10.7.4": ^10.7.4 - "undici@>=6.25.0 <6.28.1": ^6.28.1 - "undici@>=7.28.0 <7.29.1": ^7.29.1 + "undici@>=6.5.0 <6.29.1": ^6.29.1 + "undici@>=7.0.0 <7.30.1": ^7.30.1 "engine.io@>=6.6.0 <6.6.10": ^6.6.10 "moment@>=2.29.2 <2.31.0": ^2.31.0 "webpack-dev-middleware@<7.4.5": ^7.4.5 @@ -67,6 +68,7 @@ overrides: shell-quote@>=1.8.4 <1.11.0: ^1.11.0 smol-toml@<=1.8.0: ^1.8.1 source-map-js@>=1.0.0 <1.2.2: ^1.2.2 + zod@>=4.0.0 <4.6.6: ^4.6.6 catalog: axe-core: ^4.12.1 inferno: ^8.2.3