diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 8379b15936..25bb0688b5 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -186,7 +186,7 @@ overrides: serialize-javascript: ^7.0.5 uuid@^11: ^11.1.1 uuid@^13: ^13.0.1 - dompurify: ^3.4.0 + dompurify: ^3.4.11 qs: ^6.15.2 '@babel/plugin-transform-modules-systemjs': ^7.29.4 fast-uri@^3: ^3.1.2 @@ -715,7 +715,7 @@ importers: version: 7.0.1(eslint@9.39.4) typescript-eslint: specifier: 'catalog:' - version: 8.59.1(eslint@9.39.4)(typescript@6.0.3) + version: 8.59.1(eslint@9.39.4)(typescript@5.5.4) react: dependencies: @@ -816,8 +816,8 @@ importers: specifier: 'catalog:' version: 1.11.20 dompurify: - specifier: ^3.4.0 - version: 3.4.5 + specifier: ^3.4.11 + version: 3.4.11 es-toolkit: specifier: ^1.45.1 version: 1.45.1 @@ -4869,6 +4869,7 @@ packages: '@ungap/structured-clone@1.3.0': resolution: {integrity: sha512-WmoN8qaIAo7WTYWbAZuG8PYEhn5fkz7dZrqTBZ7dtt//lL2Gwms1IcnQ5yHqjDfX8Ft5j4YzDM23f87zBfDe9g==} + deprecated: Potential CWE-502 - Update to 1.3.1 or higher '@upsetjs/venn.js@2.0.0': resolution: {integrity: sha512-WbBhLrooyePuQ1VZxrJjtLvTc4NVfpOyKx0sKqioq9bX1C1m7Jgykkn8gLrtwumBioXIqam8DLxp88Adbue6Hw==} @@ -6397,8 +6398,8 @@ packages: resolution: {integrity: sha512-IGBwjF7tNk3cwypFNH/7bfzBcgSCbaMOD3GsaY1AU/JRrnHnYgEM0+9kQt52iZxjNsjBtJYtao146V+f8jFZNw==} engines: {node: '>=10'} - dompurify@3.4.5: - resolution: {integrity: sha512-OrwIBKsdNSVEeubdJ1HBv/wNENRM9ytAVCv7YXt//A3vPdVMNuACRqK9mXCGCBW2ln7BT/A4X0jXHo2Gu89miA==} + dompurify@3.4.11: + resolution: {integrity: sha512-zhlUV12GsaRzMsf9q5M254YhA4+VuF0fG+QFqu6aYpoGlKtz+w8//jBcGVYBgQkR5GHjUomejY84AV+/uPbWdw==} dot-case@3.0.4: resolution: {integrity: sha512-Kv5nKlh6yRrdrGvxeJ2e5y2eRUpkUosIW4A2AS38zwSz27zu7ufDwQPi5Jhs3XAlGNetl3bmnGhQsMtkKJnj3w==} @@ -9632,6 +9633,7 @@ packages: recharts@2.15.4: resolution: {integrity: sha512-UT/q6fwS3c1dHbXv2uFgYJ9BMFHu3fwnd7AYZaEQhXuYQ4hgsxLvsUXzGdKeZrW5xopzDCvuA2N41WJ88I7zIw==} engines: {node: '>=14'} + deprecated: 1.x and 2.x branches are no longer active. Bump to Recharts v3 to receive latest features and bugfixes. See https://github.com/recharts/recharts/wiki/3.0-migration-guide peerDependencies: react: ^16.0.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 react-dom: ^16.0.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 @@ -13538,7 +13540,6 @@ snapshots: - framer-motion - micromark - micromark-util-types - - solid-js - supports-color - vue @@ -13655,7 +13656,6 @@ snapshots: - '@types/react-dom' - micromark - micromark-util-types - - solid-js - supports-color - vue @@ -15582,6 +15582,22 @@ snapshots: transitivePeerDependencies: - supports-color + '@typescript-eslint/eslint-plugin@8.59.1(@typescript-eslint/parser@8.59.1(eslint@9.39.4)(typescript@5.5.4))(eslint@9.39.4)(typescript@5.5.4)': + dependencies: + '@eslint-community/regexpp': 4.12.2 + '@typescript-eslint/parser': 8.59.1(eslint@9.39.4)(typescript@5.5.4) + '@typescript-eslint/scope-manager': 8.59.1 + '@typescript-eslint/type-utils': 8.59.1(eslint@9.39.4)(typescript@5.5.4) + '@typescript-eslint/utils': 8.59.1(eslint@9.39.4)(typescript@5.5.4) + '@typescript-eslint/visitor-keys': 8.59.1 + eslint: 9.39.4 + ignore: 7.0.5 + natural-compare: 1.4.0 + ts-api-utils: 2.5.0(typescript@5.5.4) + typescript: 5.5.4 + transitivePeerDependencies: + - supports-color + '@typescript-eslint/eslint-plugin@8.59.1(@typescript-eslint/parser@8.59.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4)(typescript@5.9.3)': dependencies: '@eslint-community/regexpp': 4.12.2 @@ -15627,6 +15643,18 @@ snapshots: transitivePeerDependencies: - supports-color + '@typescript-eslint/parser@8.59.1(eslint@9.39.4)(typescript@5.5.4)': + dependencies: + '@typescript-eslint/scope-manager': 8.59.1 + '@typescript-eslint/types': 8.59.1 + '@typescript-eslint/typescript-estree': 8.59.1(typescript@5.5.4) + '@typescript-eslint/visitor-keys': 8.59.1 + debug: 4.4.3(supports-color@5.5.0) + eslint: 9.39.4 + typescript: 5.5.4 + transitivePeerDependencies: + - supports-color + '@typescript-eslint/parser@8.59.1(eslint@9.39.4)(typescript@5.9.3)': dependencies: '@typescript-eslint/scope-manager': 8.59.1 @@ -15660,6 +15688,15 @@ snapshots: transitivePeerDependencies: - supports-color + '@typescript-eslint/project-service@8.59.1(typescript@5.5.4)': + dependencies: + '@typescript-eslint/tsconfig-utils': 8.59.1(typescript@5.5.4) + '@typescript-eslint/types': 8.59.1 + debug: 4.4.3(supports-color@5.5.0) + typescript: 5.5.4 + transitivePeerDependencies: + - supports-color + '@typescript-eslint/project-service@8.59.1(typescript@5.9.3)': dependencies: '@typescript-eslint/tsconfig-utils': 8.59.1(typescript@5.9.3) @@ -15697,6 +15734,10 @@ snapshots: dependencies: typescript: 6.0.3 + '@typescript-eslint/tsconfig-utils@8.59.1(typescript@5.5.4)': + dependencies: + typescript: 5.5.4 + '@typescript-eslint/tsconfig-utils@8.59.1(typescript@5.9.3)': dependencies: typescript: 5.9.3 @@ -15717,6 +15758,18 @@ snapshots: transitivePeerDependencies: - supports-color + '@typescript-eslint/type-utils@8.59.1(eslint@9.39.4)(typescript@5.5.4)': + dependencies: + '@typescript-eslint/types': 8.59.1 + '@typescript-eslint/typescript-estree': 8.59.1(typescript@5.5.4) + '@typescript-eslint/utils': 8.59.1(eslint@9.39.4)(typescript@5.5.4) + debug: 4.4.3(supports-color@5.5.0) + eslint: 9.39.4 + ts-api-utils: 2.5.0(typescript@5.5.4) + typescript: 5.5.4 + transitivePeerDependencies: + - supports-color + '@typescript-eslint/type-utils@8.59.1(eslint@9.39.4)(typescript@5.9.3)': dependencies: '@typescript-eslint/types': 8.59.1 @@ -15777,6 +15830,21 @@ snapshots: transitivePeerDependencies: - supports-color + '@typescript-eslint/typescript-estree@8.59.1(typescript@5.5.4)': + dependencies: + '@typescript-eslint/project-service': 8.59.1(typescript@5.5.4) + '@typescript-eslint/tsconfig-utils': 8.59.1(typescript@5.5.4) + '@typescript-eslint/types': 8.59.1 + '@typescript-eslint/visitor-keys': 8.59.1 + debug: 4.4.3(supports-color@5.5.0) + minimatch: 10.2.4 + semver: 7.7.4 + tinyglobby: 0.2.15 + ts-api-utils: 2.5.0(typescript@5.5.4) + typescript: 5.5.4 + transitivePeerDependencies: + - supports-color + '@typescript-eslint/typescript-estree@8.59.1(typescript@5.9.3)': dependencies: '@typescript-eslint/project-service': 8.59.1(typescript@5.9.3) @@ -15829,6 +15897,17 @@ snapshots: transitivePeerDependencies: - supports-color + '@typescript-eslint/utils@8.59.1(eslint@9.39.4)(typescript@5.5.4)': + dependencies: + '@eslint-community/eslint-utils': 4.9.1(eslint@9.39.4) + '@typescript-eslint/scope-manager': 8.59.1 + '@typescript-eslint/types': 8.59.1 + '@typescript-eslint/typescript-estree': 8.59.1(typescript@5.5.4) + eslint: 9.39.4 + typescript: 5.5.4 + transitivePeerDependencies: + - supports-color + '@typescript-eslint/utils@8.59.1(eslint@9.39.4)(typescript@5.9.3)': dependencies: '@eslint-community/eslint-utils': 4.9.1(eslint@9.39.4) @@ -17700,7 +17779,7 @@ snapshots: domain-browser@4.22.0: {} - dompurify@3.4.5: + dompurify@3.4.11: optionalDependencies: '@types/trusted-types': 2.0.7 @@ -20223,7 +20302,7 @@ snapshots: d3-sankey: 0.12.3 dagre-d3-es: 7.0.14 dayjs: 1.11.20 - dompurify: 3.4.5 + dompurify: 3.4.11 es-toolkit: 1.45.1 katex: 0.16.45 khroma: 2.1.0 @@ -20623,7 +20702,7 @@ snapshots: monaco-editor@0.55.1: dependencies: - dompurify: 3.4.5 + dompurify: 3.4.11 marked: 14.0.0 motion-dom@12.35.1: @@ -22949,6 +23028,10 @@ snapshots: dependencies: typescript: 6.0.3 + ts-api-utils@2.5.0(typescript@5.5.4): + dependencies: + typescript: 5.5.4 + ts-api-utils@2.5.0(typescript@5.9.3): dependencies: typescript: 5.9.3 @@ -23087,6 +23170,17 @@ snapshots: possible-typed-array-names: 1.1.0 reflect.getprototypeof: 1.0.10 + typescript-eslint@8.59.1(eslint@9.39.4)(typescript@5.5.4): + dependencies: + '@typescript-eslint/eslint-plugin': 8.59.1(@typescript-eslint/parser@8.59.1(eslint@9.39.4)(typescript@5.5.4))(eslint@9.39.4)(typescript@5.5.4) + '@typescript-eslint/parser': 8.59.1(eslint@9.39.4)(typescript@5.5.4) + '@typescript-eslint/typescript-estree': 8.59.1(typescript@5.5.4) + '@typescript-eslint/utils': 8.59.1(eslint@9.39.4)(typescript@5.5.4) + eslint: 9.39.4 + typescript: 5.5.4 + transitivePeerDependencies: + - supports-color + typescript-eslint@8.59.1(eslint@9.39.4)(typescript@5.9.3): dependencies: '@typescript-eslint/eslint-plugin': 8.59.1(@typescript-eslint/parser@8.59.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4)(typescript@5.9.3) @@ -24009,20 +24103,204 @@ snapshots: zwitch@2.0.4: {} time: + '@ai-sdk/openai-compatible@1.0.38': '2026-04-30T15:50:08.927Z' + '@ai-sdk/react@2.0.184': '2026-04-30T22:07:47.092Z' + '@ant-design/colors@7.2.1': '2025-05-20T16:22:31.031Z' + '@ant-design/cssinjs@2.1.2': '2026-03-04T16:00:57.870Z' + '@ant-design/icons@6.2.2': '2026-04-27T09:26:03.296Z' + '@ant-design/x@2.7.0': '2026-04-30T02:38:34.309Z' + '@babel/core@7.29.0': '2026-01-31T17:39:22.681Z' + '@babel/plugin-syntax-import-attributes@7.28.6': '2026-01-12T17:49:47.310Z' + '@babel/plugin-transform-private-property-in-object@7.28.6': '2026-01-12T17:50:13.591Z' + '@babel/preset-env@7.29.2': '2026-03-16T22:33:19.271Z' + '@babel/preset-react@7.28.5': '2025-10-23T15:17:42.066Z' + '@babel/preset-typescript@7.28.5': '2025-10-23T15:17:59.974Z' '@cloudscape-design/board-components@3.0.176': '2026-05-04T10:46:18.491Z' + '@cloudscape-design/components@3.0.1291': '2026-05-06T14:56:39.239Z' + '@dicebear/collection@9.4.2': '2026-03-19T21:33:31.493Z' + '@dicebear/core@9.4.2': '2026-03-19T21:33:40.094Z' + '@dicebear/shapes@9.4.2': '2026-03-19T21:34:56.944Z' + '@dnd-kit/core@6.3.1': '2024-12-05T17:10:19.974Z' + '@dnd-kit/modifiers@9.0.0': '2024-12-04T18:39:11.172Z' + '@dnd-kit/sortable@10.0.0': '2024-12-04T18:39:12.664Z' + '@dnd-kit/utilities@3.2.2': '2023-11-06T22:20:07.149Z' + '@electron/packager@18.4.4': '2025-08-27T21:35:52.271Z' '@emotion/cache@11.14.0': '2024-12-09T08:43:28.087Z' '@emotion/react@11.14.0': '2024-12-09T08:43:27.996Z' '@eslint/js@9.39.4': '2026-03-06T21:21:15.041Z' + '@iarna/toml@2.2.5': '2020-04-22T20:16:59.382Z' + '@jest/expect@30.3.0': '2026-03-10T01:59:52.169Z' + '@jest/globals@30.3.0': '2026-03-10T01:59:53.839Z' '@lobehub/fluent-emoji@2.0.0': '2025-04-28T05:40:46.019Z' + '@lobehub/icons@5.6.0': '2026-04-27T02:45:37.604Z' + '@melloware/react-logviewer@5.3.2': '2024-11-08T13:46:21.574Z' + '@microsoft/fetch-event-source@2.0.1': '2021-04-25T18:54:56.287Z' + '@monaco-editor/react@4.7.0': '2025-02-13T16:13:41.390Z' + '@pdf-lib/fontkit@1.1.1': '2020-11-28T16:24:28.244Z' + '@playwright/test@1.58.2': '2026-02-06T16:42:52.725Z' + '@react-hook/resize-observer@2.0.2': '2024-07-30T19:12:08.392Z' + '@storybook/addon-docs@10.3.6': '2026-04-29T14:02:41.653Z' + '@storybook/addon-onboarding@10.3.6': '2026-04-29T14:02:45.520Z' + '@storybook/react-vite@10.3.6': '2026-04-29T14:03:11.708Z' + '@tanstack/eslint-plugin-query@5.100.7': '2026-05-01T07:45:34.740Z' + '@tanstack/react-query@5.100.7': '2026-05-01T07:45:41.004Z' + '@testing-library/jest-dom@6.9.1': '2025-10-01T20:04:22.720Z' + '@testing-library/react@16.3.2': '2026-01-19T10:59:08.185Z' + '@testing-library/user-event@14.6.1': '2025-01-21T17:35:55.574Z' + '@trivago/prettier-plugin-sort-imports@6.0.2': '2026-01-07T08:13:56.357Z' + '@types/big.js@6.2.2': '2023-11-06T23:52:38.904Z' + '@types/compression@1.8.1': '2025-06-07T02:15:43.005Z' + '@types/estree@1.0.5': '2023-11-07T02:23:55.578Z' + '@types/hammerjs@2.0.46': '2024-10-07T22:09:53.557Z' + '@types/jest@30.0.0': '2025-06-16T07:35:50.850Z' + '@types/lodash-es@4.17.12': '2023-11-21T16:07:38.271Z' + '@types/lodash@4.17.24': '2026-02-23T05:30:28.313Z' + '@types/node@22.19.17': '2026-04-03T11:15:07.859Z' + '@types/react-copy-to-clipboard@5.0.7': '2023-11-07T14:00:52.335Z' + '@types/react-dom@19.2.3': '2025-11-12T04:37:39.524Z' + '@types/react-relay@18.2.1': '2025-05-06T17:35:51.682Z' + '@types/react-resizable@3.0.8': '2024-07-01T23:35:52.801Z' + '@types/react-test-renderer@19.1.0': '2025-04-02T07:33:46.626Z' + '@types/react@19.2.14': '2026-02-11T11:44:58.515Z' + '@types/relay-runtime@19.0.3': '2025-09-29T19:02:30.562Z' + '@types/relay-test-utils@19.0.0': '2025-05-13T21:02:25.809Z' + '@typescript-eslint/eslint-plugin@7.18.0': '2024-07-29T17:16:45.214Z' + '@typescript-eslint/parser@7.18.0': '2024-07-29T17:16:34.103Z' + '@vitejs/plugin-react@4.7.0': '2025-07-18T03:32:30.541Z' + '@vitest/coverage-v8@4.1.5': '2026-04-21T11:04:22.099Z' + '@vueless/storybook-dark-mode@10.0.7': '2026-01-27T10:40:23.878Z' + '@yao-pkg/pkg@6.14.1': '2026-02-20T13:22:14.235Z' + ahooks@3.9.7: '2026-03-23T15:49:13.605Z' + ai@5.0.182: '2026-04-30T22:07:47.388Z' + ajv@8.18.0: '2026-02-14T15:41:17.656Z' ansi_up@6.0.6: '2025-05-16T20:58:13.495Z' - dompurify@3.4.5: '2026-05-18T07:46:30.210Z' + antd-style@3.7.1: '2024-10-22T11:16:56.426Z' + antd@6.3.7: '2026-04-27T06:09:05.842Z' + babel-plugin-react-compiler@1.0.0: '2025-10-07T19:19:01.781Z' + babel-plugin-relay@20.1.1: '2025-08-06T23:52:22.843Z' + babel-preset-react-app@10.1.0: '2025-02-15T01:18:26.068Z' + baseline-browser-mapping@2.10.24: '2026-04-28T16:04:45.621Z' + big.js@7.0.1: '2025-04-21T20:13:41.959Z' + buffer@6.0.3: '2020-11-23T02:51:27.107Z' + bufferutil@4.1.0: '2025-12-18T16:24:21.551Z' + caniuse-lite@1.0.30001791: '2026-04-26T07:11:17.952Z' + classnames@2.5.1: '2023-12-29T15:55:16.013Z' + cli-color@2.0.4: '2024-02-29T07:34:59.192Z' + commander@12.1.0: '2024-05-18T11:16:54.043Z' + compression@1.8.1: '2025-07-17T17:36:13.234Z' + concurrently@8.2.2: '2023-10-19T01:37:36.240Z' + cors@2.8.6: '2026-01-22T14:41:30.223Z' + crypto-es@2.1.0: '2023-10-24T14:53:04.505Z' + dayjs@1.11.20: '2026-03-12T11:30:39.315Z' + dompurify@3.4.11: '2026-06-17T10:33:28.065Z' + dotenv@16.6.1: '2025-06-27T16:45:01.088Z' electron@39.8.10: '2026-05-05T20:55:08.499Z' + es-toolkit@1.45.1: '2026-03-04T10:01:32.413Z' + eslint-config-google@0.14.0: '2019-09-02T19:10:47.693Z' + eslint-config-prettier@9.1.2: '2025-07-18T19:19:03.251Z' + eslint-plugin-import@2.32.0: '2025-06-20T21:59:09.822Z' + eslint-plugin-json-schema-validator@5.5.1: '2026-01-10T06:31:21.008Z' + eslint-plugin-prettier@5.5.5: '2026-01-14T10:48:06.558Z' + eslint-plugin-react-hooks@7.0.1: '2025-10-24T16:55:06.287Z' + eslint-plugin-react@7.37.5: '2025-04-03T20:01:15.958Z' + eslint-plugin-relay@2.0.0: '2025-05-12T21:08:06.449Z' + eslint-plugin-storybook@10.3.6: '2026-04-29T14:03:32.305Z' + eslint@9.39.4: '2026-03-06T21:46:46.521Z' + express@4.22.1: '2025-12-01T20:50:41.122Z' + fast-deep-equal@3.1.3: '2020-06-08T07:27:28.474Z' + fast-glob@3.3.3: '2025-01-05T10:38:42.236Z' + globals@16.5.0: '2025-11-01T06:01:40.916Z' + gpt-tokenizer@3.4.0: '2025-11-07T20:15:06.227Z' + graphql-sse@2.6.0: '2025-10-22T16:19:37.488Z' + graphql@16.13.2: '2026-03-24T12:26:38.243Z' handlebars@4.7.9: '2026-03-26T20:46:39.280Z' + https-proxy-agent@7.0.6: '2024-12-07T03:32:09.302Z' + husky@9.1.7: '2024-11-18T15:28:26.026Z' + i18next-http-backend@3.0.6: '2026-04-23T15:39:30.348Z' + i18next-scanner@4.6.0: '2024-10-14T15:28:16.940Z' + i18next@25.10.10: '2026-03-26T13:00:50.625Z' + jotai-effect@2.2.3: '2025-12-26T00:14:18.649Z' + jotai-family@1.0.1: '2025-12-09T21:36:50.804Z' + jotai@2.19.1: '2026-04-07T14:33:54.958Z' + jsdom@29.0.2: '2026-04-07T03:38:38.430Z' + jsonc-eslint-parser@2.4.2: '2025-12-07T09:11:57.763Z' + katex@0.16.45: '2026-04-05T13:32:39.675Z' + lint-staged@15.5.2: '2025-05-06T10:11:25.711Z' + lodash-es@4.18.1: '2026-04-01T21:04:15.518Z' lodash@4.18.1: '2026-04-01T21:01:20.458Z' + lucide-react@0.552.0: '2025-10-31T09:36:06.053Z' + markdown-to-jsx@7.7.17: '2025-10-24T03:49:28.787Z' + marked@12.0.2: '2024-04-19T05:13:06.397Z' + marked@16.4.2: '2025-11-06T22:29:20.004Z' + mime-types@2.1.35: '2022-03-12T18:04:43.042Z' + monaco-editor@0.55.1: '2025-11-20T20:26:31.188Z' + nanoid@5.1.11: '2026-04-30T22:06:42.984Z' + nodemon@3.1.14: '2026-02-20T23:05:18.913Z' + nuqs@2.8.9: '2026-02-27T15:51:04.508Z' + octokit@5.0.5: '2025-10-31T02:27:34.676Z' + p-queue@8.1.1: '2025-09-07T14:41:05.235Z' + pdf-lib@1.17.1: '2021-11-06T22:29:49.065Z' + playwright@1.58.2: '2026-02-06T16:42:40.029Z' + portless@0.10.3: '2026-04-16T04:56:49.874Z' + prettier-plugin-sort-json@4.2.0: '2026-01-13T22:05:01.398Z' + prettier@3.8.3: '2026-04-15T00:55:25.573Z' + prism-react-renderer@2.4.1: '2024-12-11T17:04:56.357Z' + prop-types@15.8.1: '2022-01-05T00:08:33.458Z' + react-copy-to-clipboard@5.1.1: '2026-03-07T10:04:10.249Z' + react-dom@19.2.6: '2026-05-06T16:16:56.080Z' + react-draggable@4.5.0: '2025-06-25T18:28:22.267Z' + react-error-boundary@6.1.1: '2026-02-13T22:36:15.678Z' + react-grab@0.1.32: '2026-04-11T06:09:17.849Z' + react-i18next@16.6.6: '2026-03-24T15:35:20.832Z' + react-markdown@10.1.0: '2025-03-07T10:32:53.222Z' + react-relay@20.1.1: '2025-08-06T23:52:26.678Z' + react-resizable@3.1.3: '2026-01-02T01:46:17.694Z' react-router-dom@6.30.4: '2026-05-29T19:41:50.812Z' + react-test-renderer@19.2.5: '2026-04-08T18:39:46.345Z' + react-virtuoso@4.18.6: '2026-04-24T04:46:18.890Z' + react@19.2.6: '2026-05-06T16:16:47.653Z' + recharts@2.15.4: '2025-06-20T21:43:56.808Z' + rehype-katex@7.0.1: '2024-08-19T12:09:21.818Z' + relay-compiler@20.1.1: '2025-08-06T23:52:42.434Z' + relay-runtime@20.1.1: '2025-08-06T23:52:46.364Z' + relay-test-utils@20.1.1: '2025-08-06T23:52:49.243Z' + remark-gfm@4.0.1: '2025-02-10T12:43:10.735Z' + remark-math@6.0.0: '2023-09-19T11:38:59.221Z' + serve@14.2.6: '2026-03-03T19:04:55.061Z' + sharp@0.34.5: '2025-11-06T14:19:40.989Z' + shiki@1.29.2: '2025-01-30T09:34:47.582Z' + shiki@3.23.0: '2026-02-25T05:41:26.011Z' + smol-toml@1.6.1: '2026-03-23T15:48:57.449Z' + storybook@10.3.6: '2026-04-29T14:02:57.716Z' + swr@2.4.1: '2026-02-27T16:44:22.021Z' + ts-md5@2.0.1: '2025-07-02T03:40:42.951Z' + tslib@2.8.1: '2024-10-31T22:42:48.624Z' + tsup@8.5.1: '2025-11-12T21:21:42.746Z' + tsx@4.21.0: '2025-11-30T15:56:09.488Z' + tus-js-client@4.3.1: '2025-01-16T11:27:34.379Z' typescript-eslint@8.59.1: '2026-04-27T17:31:57.870Z' + typescript@5.5.4: '2024-07-22T23:02:51.857Z' typescript@5.9.3: '2025-09-30T21:19:38.784Z' typescript@6.0.3: '2026-04-16T23:38:27.905Z' + use-query-params@2.2.2: '2025-11-22T00:59:50.369Z' + utf-8-validate@6.0.6: '2025-12-18T16:38:00.865Z' uuid@13.0.2: '2026-05-04T13:37:27.339Z' vite-plugin-checker@0.9.3: '2025-05-06T09:44:27.688Z' + vite-plugin-dts@4.5.4: '2025-05-15T06:20:27.521Z' + vite-plugin-node-polyfills@0.26.0: '2026-03-29T19:57:11.153Z' + vite-plugin-pwa@1.2.0: '2025-11-27T21:56:21.924Z' + vite-plugin-relay-lite@0.11.0: '2025-04-16T15:11:50.751Z' + vite-plugin-svgr@4.5.0: '2025-08-24T13:02:58.824Z' vite@6.4.2: '2026-04-06T12:06:44.542Z' + vitest@4.1.4: '2026-04-09T07:36:52.741Z' + web-vitals@3.5.2: '2024-01-25T20:42:01.857Z' + webpack-cli@6.0.1: '2024-12-20T14:12:09.258Z' + webpack@5.106.2: '2026-04-15T11:44:11.053Z' + winston@3.19.0: '2025-12-07T07:37:16.009Z' + workbox-expiration@7.4.0: '2025-11-19T17:46:28.117Z' + workbox-routing@7.4.0: '2025-11-19T17:46:27.837Z' + workbox-strategies@7.4.0: '2025-11-19T17:46:27.913Z' + workbox-sw@7.4.0: '2025-11-19T17:46:24.508Z' + ws@8.19.0: '2026-01-05T20:28:13.823Z' + yaml@2.8.3: '2026-03-21T10:37:06.001Z' + zod@4.3.6: '2026-01-22T19:14:35.382Z' diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index f615faf9d1..07d523ab1e 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -33,7 +33,7 @@ catalog: big.js: ^7.0.1 classnames: ^2.5.1 dayjs: ^1.11.20 - dompurify: ^3.4.0 + dompurify: ^3.4.11 eslint: ^9.39.4 eslint-plugin-import: ^2.32.0 eslint-plugin-json-schema-validator: ^5.5.1 @@ -114,7 +114,7 @@ overrides: serialize-javascript: ^7.0.5 # RCE via RegExp.flags, CPU DoS (#279, #386) "uuid@^11": ^11.1.1 # buffer bounds check (#387) v11 line "uuid@^13": ^13.0.1 # buffer bounds check (#374) — @lobehub/ui pulls 13.0.0 - dompurify: ^3.4.0 # align transitives with catalog bump + dompurify: ^3.4.11 # align transitives with catalog bump # Dev-only transitive security overrides — FR-3014. These ship only in # dev/build tooling (not the production bundle), but Dependabot still # surfaces them. Remove an entry when every upstream consumer ranges to