From cc5ef07ccf2d6f80e48c29432081d730ba6469e4 Mon Sep 17 00:00:00 2001 From: dnex Date: Sat, 24 Oct 2026 14:13:57 -0400 Subject: [PATCH] chore: path dependency alerts --- .github/dependabot.yml | 9 ++- .github/workflows/ci.yml | 3 + apps/web/package.json | 8 +- package.json | 6 +- packages/db/package.json | 2 +- packages/ingest/package.json | 4 +- packages/ingest/src/citadel.ts | 5 +- packages/ingest/src/classifier.ts | 4 +- pnpm-lock.yaml | 126 +++++++++++++++--------------- 9 files changed, 92 insertions(+), 75 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 0059383..4059f45 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,12 +4,17 @@ { "package-ecosystem": "npm", "directory": "/", - "schedule": { "interval": "weekly" } + "schedule": { "interval": "weekly" }, + "cooldown": { "default-days": 14 }, + "groups": { + "react": { "patterns": ["react", "react-dom", "@types/react", "@types/react-dom"] } + } }, { "package-ecosystem": "github-actions", "directory": "/", - "schedule": { "interval": "weekly" } + "schedule": { "interval": "weekly" }, + "cooldown": { "default-days": 14 } } ] } diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 58782dc..870d228 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -5,6 +5,9 @@ on: branches: [main] pull_request: +permissions: + contents: read + jobs: check: runs-on: ubuntu-latest diff --git a/apps/web/package.json b/apps/web/package.json index fd4f306..19f5a81 100644 --- a/apps/web/package.json +++ b/apps/web/package.json @@ -15,13 +15,13 @@ "drizzle-orm": "^0.45.2", "next": "16.4.2", "postgres": "^3.4.5", - "react": "^19.0.0", - "react-dom": "^19.0.0", + "react": "^19.2.8", + "react-dom": "^19.2.8", "yaml": "^2.7.0", - "zod": "^4.4.3" + "zod": "^4.6.6" }, "devDependencies": { - "@types/node": "^26.1.1", + "@types/node": "^26.1.2", "@types/react": "^19.0.10", "@types/react-dom": "^19.0.4", "typescript": "^7.0.2" diff --git a/package.json b/package.json index 32b5151..e453e40 100644 --- a/package.json +++ b/package.json @@ -34,8 +34,12 @@ }, "pnpm": { "overrides": { + "baseline-browser-mapping": "2.11.28", "esbuild": "^0.25.12", - "postcss": "^8.5.10" + "nanoid@3": "3.3.20", + "postcss": "8.5.29", + "shell-quote": "1.12.0", + "source-map-js": "1.2.2" } } } diff --git a/packages/db/package.json b/packages/db/package.json index 8bafbf0..e561cdc 100644 --- a/packages/db/package.json +++ b/packages/db/package.json @@ -21,7 +21,7 @@ "postgres": "^3.4.5" }, "devDependencies": { - "@types/node": "^26.1.1", + "@types/node": "^26.1.2", "drizzle-kit": "^0.31.10", "tsx": "^4.23.1", "typescript": "^7.0.2" diff --git a/packages/ingest/package.json b/packages/ingest/package.json index 2602a6a..45d3c36 100644 --- a/packages/ingest/package.json +++ b/packages/ingest/package.json @@ -24,10 +24,10 @@ "drizzle-orm": "^0.45.2", "postgres": "^3.4.5", "yaml": "^2.7.0", - "zod": "^4.4.3" + "zod": "^4.6.6" }, "devDependencies": { - "@types/node": "^26.1.1", + "@types/node": "^26.1.2", "tsx": "^4.23.1", "typescript": "^7.0.2" } diff --git a/packages/ingest/src/citadel.ts b/packages/ingest/src/citadel.ts index f1ebe21..824e412 100644 --- a/packages/ingest/src/citadel.ts +++ b/packages/ingest/src/citadel.ts @@ -34,12 +34,13 @@ function decodeHtmlEntities(text: string): string { .replace(/–/g, "–") .replace(/—/g, "—") .replace(/'/g, "'") - .replace(/&/g, "&") .replace(/</g, "<") .replace(/>/g, ">") .replace(/"/g, '"') .replace(/&#(\d+);/g, (_, n) => String.fromCharCode(Number(n))) - .replace(/ /g, " "); + .replace(/ /g, " ") + // Last, so "&lt;" decodes to "<" rather than "<". + .replace(/&/g, "&"); } function stripTags(html: string): string { diff --git a/packages/ingest/src/classifier.ts b/packages/ingest/src/classifier.ts index 72133c3..dd01f85 100644 --- a/packages/ingest/src/classifier.ts +++ b/packages/ingest/src/classifier.ts @@ -383,8 +383,8 @@ function decodeEntities(text: string): string { function stripTags(text: string): string { return text - .replace(//gi, " ") - .replace(//gi, " ") + .replace(/]*>/gi, " ") + .replace(/]*>/gi, " ") .replace(/<[^>]+>/g, " "); } diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 82fb458..accce9a 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -5,8 +5,12 @@ settings: excludeLinksFromLockfile: false overrides: + baseline-browser-mapping: 2.11.28 esbuild: ^0.25.12 - postcss: ^8.5.10 + nanoid@3: 3.3.20 + postcss: 8.5.29 + shell-quote: 1.12.0 + source-map-js: 1.2.2 importers: @@ -29,26 +33,26 @@ importers: version: 0.45.2(gel@2.2.0)(postgres@3.4.9) next: specifier: 16.4.2 - version: 16.4.2(@types/node@26.1.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7) + version: 16.4.2(@types/node@26.1.2)(react-dom@19.2.8(react@19.2.8))(react@19.2.8) postgres: specifier: ^3.4.5 version: 3.4.9 react: - specifier: ^19.0.0 - version: 19.2.7 + specifier: ^19.2.8 + version: 19.2.8 react-dom: - specifier: ^19.0.0 - version: 19.2.7(react@19.2.7) + specifier: ^19.2.8 + version: 19.2.8(react@19.2.8) yaml: specifier: ^2.7.0 version: 2.9.0 zod: - specifier: ^4.4.3 - version: 4.4.3 + specifier: ^4.6.6 + version: 4.6.6 devDependencies: '@types/node': - specifier: ^26.1.1 - version: 26.1.1 + specifier: ^26.1.2 + version: 26.1.2 '@types/react': specifier: ^19.0.10 version: 19.2.17 @@ -72,8 +76,8 @@ importers: version: 3.4.9 devDependencies: '@types/node': - specifier: ^26.1.1 - version: 26.1.1 + specifier: ^26.1.2 + version: 26.1.2 drizzle-kit: specifier: ^0.31.10 version: 0.31.10 @@ -102,12 +106,12 @@ importers: specifier: ^2.7.0 version: 2.9.0 zod: - specifier: ^4.4.3 - version: 4.4.3 + specifier: ^4.6.6 + version: 4.6.6 devDependencies: '@types/node': - specifier: ^26.1.1 - version: 26.1.1 + specifier: ^26.1.2 + version: 26.1.2 tsx: specifier: ^4.23.1 version: 4.23.1 @@ -125,11 +129,11 @@ packages: '@esbuild-kit/core-utils@3.3.2': resolution: {integrity: sha512-sPRAnw9CdSsRmEtnsl2WXWdyquogVpB3yZ3dgwJfe8zrOzTsV7cJvmwrKVa+0ma5BoiGJ+BoqkMvawbayKUsqQ==} - deprecated: 'Merged into tsx: https://tsx.is' + deprecated: 'Merged into tsx: https://tsx.hirok.io' '@esbuild-kit/esm-loader@2.6.5': resolution: {integrity: sha512-FxEMIkJKnodyA1OaCUoEvbYRkoZlLZ4d/eXFu9Fh8CbBBgP5EmZxrfTRyN0qpXZ4vOvqnE5YdRdcrmUUXuU+dA==} - deprecated: 'Merged into tsx: https://tsx.is' + deprecated: 'Merged into tsx: https://tsx.hirok.io' '@esbuild/aix-ppc64@0.25.12': resolution: {integrity: sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA==} @@ -490,8 +494,8 @@ packages: '@swc/helpers@0.5.23': resolution: {integrity: sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw==} - '@types/node@26.1.1': - resolution: {integrity: sha512-nxAkRSVkN1Y0JC1W8ky/fTfkGsMmcrRsbx+3XoZE+rMOX71kLYTV7fLXpqud1GpbpP5TuffXFqfX7fH2GgZREw==} + '@types/node@26.1.2': + resolution: {integrity: sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg==} '@types/react-dom@19.2.3': resolution: {integrity: sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==} @@ -621,8 +625,8 @@ packages: cpu: [x64] os: [win32] - baseline-browser-mapping@2.10.42: - resolution: {integrity: sha512-c/jurFrDLyui7o1J86yLkRu4LMsTYcBohveus7/I2Hzdn9KIP2bdJPTue/lR1KH46enoPbD77GKeSYNdyPoD3Q==} + baseline-browser-mapping@2.11.28: + resolution: {integrity: sha512-br0LOmjJqr6Rt4AEkadbcNf67Zpo7EPwKsWbjnRrJIa1QYFHQBqM4C7F2WTbV8ahTEcg1Eo+Y0aWjjORInYFyA==} engines: {node: '>=6.0.0'} hasBin: true @@ -785,8 +789,8 @@ packages: ms@2.1.3: resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==} - nanoid@3.3.15: - resolution: {integrity: sha512-y7Wygv/7mEOvxTuEQDB8StXdMRBWf1kR/tlhAzBRUFkB2jfcLOAxO/SHmOO2zgz1pVgK29/kyupn059/bCHdjA==} + nanoid@3.3.20: + resolution: {integrity: sha512-uKdg2G3GNCKQn9byYOpxbGqrT2fGO5KRt5J/8b3pok8rT6qxGWF6hxMyJiEYtAf+FVyYuD9hRaDqX5uPFYJ4ZQ==} engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} hasBin: true @@ -824,21 +828,21 @@ packages: engines: {node: '>=18'} hasBin: true - postcss@8.5.10: - resolution: {integrity: sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==} + postcss@8.5.29: + resolution: {integrity: sha512-49cGhUbXj8Qenv0iTMxA1cFBzxXoctpC9Ujd77t1WcbJIr6nF/eI7g/8MgxrYldFRuAXvja7xQRwavoW7kgrxQ==} engines: {node: ^10 || ^12 || >=14} postgres@3.4.9: resolution: {integrity: sha512-GD3qdB0x1z9xgFI6cdRD6xu2Sp2WCOEoe3mtnyB5Ee0XrrL5Pe+e4CCnJrRMnL1zYtRDZmQQVbvOttLnKDLnaw==} engines: {node: '>=12'} - react-dom@19.2.7: - resolution: {integrity: sha512-t0BRVXvbiE/o20Hfw669rLbMCDWtYZLvmJigy2f0MxsXF+71pxhR3xOkspmsO8h3ZlNzyibAmtCa3l4lYKk6gQ==} + react-dom@19.2.8: + resolution: {integrity: sha512-rVprimfGBG3DR+Tq0IQG2DT5PxKth1WIGDmj5yPmlzr4YBe7uyE+Du4oVqTDXZSHGGGXRtTJEGSSePyQCMBglQ==} peerDependencies: - react: ^19.2.7 + react: ^19.2.8 - react@19.2.7: - resolution: {integrity: sha512-HNe9WslTbXmFK8o8cmwgAeJFSBvt1bPdHCVKtaaV+WlAN36mpT4hcRpwbf3fY56ar2oIXzsBpOAiIRHAdY0OlQ==} + react@19.2.8: + resolution: {integrity: sha512-PWaYA1L/q9u2u7xYQi+Y3L3Yfnie7XyLeaJICV1MGD6LprsBxcAqGjYyr0eY3p+QdsA+x/Irkt4Qif8D63+Sbw==} engines: {node: '>=0.10.0'} resolve-pkg-maps@1.0.0: @@ -861,12 +865,12 @@ packages: '@types/node': optional: true - shell-quote@1.10.0: - resolution: {integrity: sha512-w1aiOKwKuRgtwAReIIj89puqg+I7GvX4IbLrvmhXbzQsj1+Zwi4VO3+fa6ZF91TWSjIxoEkKnMeHcLEODK5ZXA==} + shell-quote@1.12.0: + resolution: {integrity: sha512-PcByqNyT/38F2kDNi006HAMRJaULuBzq/FOsw3qdZvX/GA9W/jamDaRskgHjubHiftXK5sIFxLNkvrXUwcof6Q==} engines: {node: '>= 0.4'} - source-map-js@1.2.1: - resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==} + source-map-js@1.2.2: + resolution: {integrity: sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==} engines: {node: '>=0.10.0'} source-map-support@0.5.21: @@ -915,8 +919,8 @@ packages: engines: {node: '>= 14.6'} hasBin: true - zod@4.4.3: - resolution: {integrity: sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==} + zod@4.6.6: + resolution: {integrity: sha512-4UmzQUF5fxvfcYHlbjBmejU+w+hbDnWFx4aS8kBx7nPBHcO2SqPbpAG8snbdg+Xse4pRefR98hgjFgIMCI/UhA==} snapshots: @@ -1155,7 +1159,7 @@ snapshots: dependencies: tslib: 2.8.1 - '@types/node@26.1.1': + '@types/node@26.1.2': dependencies: undici-types: 8.3.0 @@ -1227,7 +1231,7 @@ snapshots: '@typescript/typescript-win32-x64@7.0.2': optional: true - baseline-browser-mapping@2.10.42: {} + baseline-browser-mapping@2.11.28: {} buffer-from@1.1.2: {} @@ -1303,7 +1307,7 @@ snapshots: debug: 4.4.3 env-paths: 3.0.0 semver: 7.8.5 - shell-quote: 1.10.0 + shell-quote: 1.12.0 which: 4.0.0 transitivePeerDependencies: - supports-color @@ -1319,18 +1323,18 @@ snapshots: ms@2.1.3: optional: true - nanoid@3.3.15: {} + nanoid@3.3.20: {} - next@16.4.2(@types/node@26.1.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7): + next@16.4.2(@types/node@26.1.2)(react-dom@19.2.8(react@19.2.8))(react@19.2.8): dependencies: '@next/env': 16.4.2 '@swc/helpers': 0.5.23 - baseline-browser-mapping: 2.10.42 + baseline-browser-mapping: 2.11.28 caniuse-lite: 1.0.30001803 - postcss: 8.5.10 - react: 19.2.7 - react-dom: 19.2.7(react@19.2.7) - styled-jsx: 5.1.6(react@19.2.7) + postcss: 8.5.29 + react: 19.2.8 + react-dom: 19.2.8(react@19.2.8) + styled-jsx: 5.1.6(react@19.2.8) optionalDependencies: '@next/swc-darwin-arm64': 16.4.2 '@next/swc-darwin-x64': 16.4.2 @@ -1340,7 +1344,7 @@ snapshots: '@next/swc-linux-x64-musl': 16.4.2 '@next/swc-win32-arm64-msvc': 16.4.2 '@next/swc-win32-x64-msvc': 16.4.2 - sharp: 0.35.5(@types/node@26.1.1) + sharp: 0.35.5(@types/node@26.1.2) transitivePeerDependencies: - '@babel/core' - '@types/node' @@ -1356,20 +1360,20 @@ snapshots: optionalDependencies: fsevents: 2.3.2 - postcss@8.5.10: + postcss@8.5.29: dependencies: - nanoid: 3.3.15 + nanoid: 3.3.20 picocolors: 1.1.1 - source-map-js: 1.2.1 + source-map-js: 1.2.2 postgres@3.4.9: {} - react-dom@19.2.7(react@19.2.7): + react-dom@19.2.8(react@19.2.8): dependencies: - react: 19.2.7 + react: 19.2.8 scheduler: 0.27.0 - react@19.2.7: {} + react@19.2.8: {} resolve-pkg-maps@1.0.0: {} @@ -1378,7 +1382,7 @@ snapshots: semver@7.8.5: optional: true - sharp@0.35.5(@types/node@26.1.1): + sharp@0.35.5(@types/node@26.1.2): dependencies: '@img/colour': 1.1.0 detect-libc: 2.1.2 @@ -1409,13 +1413,13 @@ snapshots: '@img/sharp-win32-arm64': 0.35.5 '@img/sharp-win32-ia32': 0.35.5 '@img/sharp-win32-x64': 0.35.5 - '@types/node': 26.1.1 + '@types/node': 26.1.2 optional: true - shell-quote@1.10.0: + shell-quote@1.12.0: optional: true - source-map-js@1.2.1: {} + source-map-js@1.2.2: {} source-map-support@0.5.21: dependencies: @@ -1424,10 +1428,10 @@ snapshots: source-map@0.6.1: {} - styled-jsx@5.1.6(react@19.2.7): + styled-jsx@5.1.6(react@19.2.8): dependencies: client-only: 0.0.1 - react: 19.2.7 + react: 19.2.8 tslib@2.8.1: {} @@ -1469,4 +1473,4 @@ snapshots: yaml@2.9.0: {} - zod@4.4.3: {} + zod@4.6.6: {}