From fc1961ef4a5e6a29b26db3c92f6c2eeb8ccd75da Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Wed, 7 Oct 2026 07:04:58 +0000 Subject: [PATCH] fix(deps): align Node 24 and pnpm overrides for Dependabot security updates Dependabot detected Node 22.x from apps/site engines and could not run npm resolution on the current updater (requires v24.21.0). Align root and site engines with .nvmrc, add .node-version, bump CI to Node 24, and extend pnpm overrides for remaining advisory bumps (hono, electron, undici, compression, brace-expansion, and related transitives). Co-authored-by: Gaffer.dev --- .github/workflows/ci.yml | 10 +- .github/workflows/nightly-verification.yml | 4 +- .github/workflows/playwright.yml | 2 +- .../workflows/publish-playwright-report.yml | 2 +- .github/workflows/release-desktop.yml | 2 +- .node-version | 1 + apps/api/package.json | 2 +- apps/desktop/package.json | 2 +- apps/site/package.json | 2 +- infra/sandboxes/supervisor/package.json | 2 +- infra/updater/package.json | 2 +- package.json | 14 +- pnpm-lock.yaml | 139 ++++++++++-------- 13 files changed, 103 insertions(+), 81 deletions(-) create mode 100644 .node-version diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 99461c72..f463a3b5 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -22,7 +22,7 @@ jobs: - uses: pnpm/action-setup@v4 - uses: actions/setup-node@v4 with: - node-version: 22 + node-version: 24 cache: pnpm - run: pnpm install --frozen-lockfile - run: pnpm lint @@ -37,7 +37,7 @@ jobs: - uses: pnpm/action-setup@v4 - uses: actions/setup-node@v4 with: - node-version: 22 + node-version: 24 cache: pnpm - run: pnpm install --frozen-lockfile - run: pnpm db:generate @@ -56,7 +56,7 @@ jobs: - uses: pnpm/action-setup@v4 - uses: actions/setup-node@v4 with: - node-version: 22 + node-version: 24 cache: pnpm - run: pnpm install --frozen-lockfile - run: pnpm build @@ -77,7 +77,7 @@ jobs: - uses: pnpm/action-setup@v4 - uses: actions/setup-node@v4 with: - node-version: 22 + node-version: 24 cache: pnpm - run: pnpm install --frozen-lockfile - run: pnpm db:generate @@ -96,7 +96,7 @@ jobs: - uses: pnpm/action-setup@v4 - uses: actions/setup-node@v4 with: - node-version: 22 + node-version: 24 cache: pnpm - run: pnpm install --frozen-lockfile - run: pnpm test:integration diff --git a/.github/workflows/nightly-verification.yml b/.github/workflows/nightly-verification.yml index d597cce1..aa4d3044 100644 --- a/.github/workflows/nightly-verification.yml +++ b/.github/workflows/nightly-verification.yml @@ -39,7 +39,7 @@ jobs: - uses: pnpm/action-setup@v4 - uses: actions/setup-node@v4 with: - node-version: 22 + node-version: 24 cache: pnpm - run: pnpm install --frozen-lockfile - run: pnpm test:topology @@ -73,7 +73,7 @@ jobs: - if: steps.gate.outputs.enabled == 'true' uses: actions/setup-node@v4 with: - node-version: 22 + node-version: 24 cache: pnpm - if: steps.gate.outputs.enabled == 'true' run: pnpm install --frozen-lockfile diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml index 5c2df37f..0ae85a26 100644 --- a/.github/workflows/playwright.yml +++ b/.github/workflows/playwright.yml @@ -65,7 +65,7 @@ jobs: - uses: pnpm/action-setup@v4 - uses: actions/setup-node@v4 with: - node-version: 22 + node-version: 24 cache: pnpm - run: pnpm install --frozen-lockfile - uses: actions/cache@v4 diff --git a/.github/workflows/publish-playwright-report.yml b/.github/workflows/publish-playwright-report.yml index cd0e41ef..daffef10 100644 --- a/.github/workflows/publish-playwright-report.yml +++ b/.github/workflows/publish-playwright-report.yml @@ -53,7 +53,7 @@ jobs: - if: steps.s3.outputs.configured == 'true' uses: actions/setup-node@v4 with: - node-version: 22 + node-version: 24 cache: pnpm - if: steps.s3.outputs.configured == 'true' run: pnpm install --frozen-lockfile diff --git a/.github/workflows/release-desktop.yml b/.github/workflows/release-desktop.yml index 1494e003..423aad6f 100644 --- a/.github/workflows/release-desktop.yml +++ b/.github/workflows/release-desktop.yml @@ -109,7 +109,7 @@ jobs: - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: - node-version: 22 + node-version: 24 - run: pnpm install --frozen-lockfile - name: Build renderer and Electron main process run: pnpm --filter @sentrabot/web build && pnpm --filter @sentrabot/desktop build diff --git a/.node-version b/.node-version new file mode 100644 index 00000000..df6ae337 --- /dev/null +++ b/.node-version @@ -0,0 +1 @@ +24.21.0 diff --git a/apps/api/package.json b/apps/api/package.json index 04004fa9..6bf93a6c 100644 --- a/apps/api/package.json +++ b/apps/api/package.json @@ -19,7 +19,7 @@ "@sentrabot/core": "workspace:*", "@sentrabot/db": "workspace:*", "@sentrabot/memory": "workspace:*", - "hono": "^4.9.6" + "hono": "^4.13.7" }, "devDependencies": { "typescript": "^5.9.2", diff --git a/apps/desktop/package.json b/apps/desktop/package.json index 22a262d3..a0afa1bf 100644 --- a/apps/desktop/package.json +++ b/apps/desktop/package.json @@ -20,7 +20,7 @@ }, "devDependencies": { "@playwright/test": "^1.55.0", - "electron": "^43.4.0", + "electron": "^43.5.0", "electron-builder": "^26.0.12", "typescript": "^5.9.2", "vitest": "^4.1.10" diff --git a/apps/site/package.json b/apps/site/package.json index aeb69bca..75d301d4 100644 --- a/apps/site/package.json +++ b/apps/site/package.json @@ -4,7 +4,7 @@ "version": "1.0.0", "type": "module", "engines": { - "node": "22.x" + "node": "^24.21.0 || >=26.0.0" }, "scripts": { "dev": "vite", diff --git a/infra/sandboxes/supervisor/package.json b/infra/sandboxes/supervisor/package.json index b793e147..a199dc81 100644 --- a/infra/sandboxes/supervisor/package.json +++ b/infra/sandboxes/supervisor/package.json @@ -13,7 +13,7 @@ "@hono/node-server": "^1.19.1", "@sentrabot/core": "workspace:*", "dockerode": "^4.0.7", - "hono": "^4.9.6", + "hono": "^4.13.7", "tsx": "^4.20.5", "zod": "^4.1.5" }, diff --git a/infra/updater/package.json b/infra/updater/package.json index 8eccc317..59dfbf17 100644 --- a/infra/updater/package.json +++ b/infra/updater/package.json @@ -14,7 +14,7 @@ "@hono/node-server": "^1.19.1", "@sentrabot/contracts": "workspace:*", "@sentrabot/core": "workspace:*", - "hono": "^4.9.6", + "hono": "^4.13.7", "tsx": "^4.20.5" }, "devDependencies": { diff --git a/package.json b/package.json index 11fcb663..98978597 100644 --- a/package.json +++ b/package.json @@ -6,7 +6,7 @@ "license": "Apache-2.0", "packageManager": "pnpm@9.15.0", "engines": { - "node": "^22.22.2 || ^24.0.0 || >=26.0.0" + "node": "^24.21.0 || >=26.0.0" }, "scripts": { "dev": "cross-env COREPACK_ENABLE_DOWNLOAD_PROMPT=0 turbo dev --filter=@sentrabot/api --filter=@sentrabot/worker --filter=@sentrabot/web --filter=@sentrabot/sandbox-supervisor", @@ -44,7 +44,17 @@ "deepmerge-ts": "8.0.2", "fast-uri": "3.1.8", "uuid": "14.0.2", - "undici@6.28.0": "6.28.1", + "hono": "4.13.13", + "compression": "1.8.2", + "http-cache-semantics": "4.3.0", + "ip-address": "10.7.3", + "proxy-addr": "2.0.8", + "source-map-js": "1.2.2", + "brace-expansion@1.1.18": "1.1.21", + "brace-expansion@2.1.4": "2.1.7", + "brace-expansion@5.0.9": "5.0.12", + "undici@6.28.0": "6.29.0", + "undici@6.28.1": "6.29.0", "undici@7.29.0": "7.29.1", "undici@8.10.0": "8.10.2" } diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 3002f937..883af1b1 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -10,7 +10,17 @@ overrides: deepmerge-ts: 8.0.2 fast-uri: 3.1.8 uuid: 14.0.2 - undici@6.28.0: 6.28.1 + hono: 4.13.13 + compression: 1.8.2 + http-cache-semantics: 4.3.0 + ip-address: 10.7.3 + proxy-addr: 2.0.8 + source-map-js: 1.2.2 + brace-expansion@1.1.18: 1.1.21 + brace-expansion@2.1.4: 2.1.7 + brace-expansion@5.0.9: 5.0.12 + undici@6.28.0: 6.29.0 + undici@6.28.1: 6.29.0 undici@7.29.0: 7.29.1 undici@8.10.0: 8.10.2 @@ -44,7 +54,7 @@ importers: dependencies: '@hono/node-server': specifier: ^1.19.1 - version: 1.19.17(hono@4.13.5) + version: 1.19.17(hono@4.13.13) '@orpc/server': specifier: ^1.15.0 version: 1.15.0(@opentelemetry/api@1.9.1)(ws@8.21.3) @@ -70,8 +80,8 @@ importers: specifier: workspace:* version: link:../../packages/memory hono: - specifier: ^4.9.6 - version: 4.13.5 + specifier: 4.13.13 + version: 4.13.13 devDependencies: typescript: specifier: ^5.9.2 @@ -93,8 +103,8 @@ importers: specifier: ^1.55.0 version: 1.62.1 electron: - specifier: ^43.4.0 - version: 43.4.1 + specifier: ^43.5.0 + version: 43.7.8 electron-builder: specifier: ^26.0.12 version: 26.15.3(electron-builder-squirrel-windows@26.15.3) @@ -383,7 +393,7 @@ importers: dependencies: '@hono/node-server': specifier: ^1.19.1 - version: 1.19.17(hono@4.13.5) + version: 1.19.17(hono@4.13.13) '@sentrabot/core': specifier: workspace:* version: link:../../../packages/core @@ -391,8 +401,8 @@ importers: specifier: ^4.0.7 version: 4.0.12 hono: - specifier: ^4.9.6 - version: 4.13.5 + specifier: 4.13.13 + version: 4.13.13 tsx: specifier: ^4.20.5 version: 4.23.13 @@ -414,7 +424,7 @@ importers: dependencies: '@hono/node-server': specifier: ^1.19.1 - version: 1.19.17(hono@4.13.5) + version: 1.19.17(hono@4.13.13) '@sentrabot/contracts': specifier: workspace:* version: link:../../packages/contracts @@ -422,8 +432,8 @@ importers: specifier: workspace:* version: link:../../packages/core hono: - specifier: ^4.9.6 - version: 4.13.5 + specifier: 4.13.13 + version: 4.13.13 tsx: specifier: ^4.20.5 version: 4.23.13 @@ -699,7 +709,7 @@ importers: dependencies: '@hono/node-server': specifier: ^1.19.1 - version: 1.19.17(hono@4.13.5) + version: 1.19.17(hono@4.13.13) '@sentrabot/adapter-kit': specifier: workspace:* version: link:../adapter-kit @@ -2150,7 +2160,7 @@ packages: resolution: {integrity: sha512-dSneS5qhiauZWGDCeK4o695Xd9nUNjviSZCMQrj10eetr8Uln1ucn6bbphOM6UynAMMtNIzZNSpL9vnASJwrPQ==} engines: {node: '>=18.14.1'} peerDependencies: - hono: ^4 + hono: 4.13.13 '@iarna/toml@2.2.5': resolution: {integrity: sha512-trnsAYxU3xnS1gPHPyU961coFyLkh4gAD/0zQ5mymY4yOZ+CYvsPqUbOFSw0aDM4y0tV7tiFxL/1XfXPNC6IPg==} @@ -4268,14 +4278,14 @@ packages: resolution: {integrity: sha512-apC2+fspHGI3mMKj+dGevkGo/tCqVB8jMb6i+OX+E29p0Iposz07fABkRIfVUPNd5A5VbuOz1bZbnmkKLYF+wQ==} engines: {node: '>= 5.10.0'} - brace-expansion@1.1.18: - resolution: {integrity: sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==} + brace-expansion@1.1.21: + resolution: {integrity: sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==} - brace-expansion@2.1.4: - resolution: {integrity: sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==} + brace-expansion@2.1.7: + resolution: {integrity: sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==} - brace-expansion@5.0.9: - resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==} + brace-expansion@5.0.12: + resolution: {integrity: sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==} engines: {node: 20 || >=22} braces@3.0.3: @@ -4559,8 +4569,8 @@ packages: resolution: {integrity: sha512-AF3r7P5dWxL8MxyITRMlORQNaOA2IkAFaTr4k7BUumjPtRpGDTZpl0Pb1XCO6JeDCBdp126Cgs9sMxqSjgYyRg==} engines: {node: '>= 0.6'} - compression@1.8.1: - resolution: {integrity: sha512-9mAqGPHLakhCLeNyxPkK4xVo746zQ/czLH1Ky+vkitMnWfWZps8r0qXuwhwizagCRttsL4lfG4pIOvaWLpAP0w==} + compression@1.8.2: + resolution: {integrity: sha512-o8vI5RE5A6EVVOd9o41jKp41aJom+QTEO/Bx8MYNjexMo/Bv2WOjUfZr+aL0WnYSgymUy6zeguqLTsIhV0gMvQ==} engines: {node: '>= 0.8.0'} concat-map@0.0.1: @@ -5036,8 +5046,8 @@ packages: resolution: {integrity: sha512-bO3y10YikuUwUuDUQRM4KfwNkKhnpVO7IPdbsrejwN9/AABJzzTQ4GeHwyzNSrVO+tEH3/Np255a3sVZpZDjvg==} engines: {node: '>=8.0.0'} - electron@43.4.1: - resolution: {integrity: sha512-5b+EuiwkgG5iRcsEL34rimgRpkYp15SsfZOa0pC5kXs0Tb82TH4n95rpQzTZa7yRCbA7tm0WoEbuBL6NaAhAcA==} + electron@43.7.8: + resolution: {integrity: sha512-h9qnttBn9b+pmnJjagrpjvK97Wb9WbsyIB03BV6NnhnPqSq1Jw7500hNkqHPkosHCE0zL/806v4zf9d3VrII0w==} engines: {node: '>= 22.12.0'} hasBin: true @@ -5759,8 +5769,8 @@ packages: resolution: {integrity: sha512-eSmmWE5bZTK2Nou4g0AI3zZ9rswp7GRKoKXS1BLUkvPviOqs4YTN1djQIqrXy9k5gEtdLPy86JjRwsNM9tnDcA==} engines: {node: '>=0.10.0'} - hono@4.13.5: - resolution: {integrity: sha512-O6+/eCYRkzzzy0rPWwKLiGBR1nFuUPZynnwjxN1MBA62NNqbT0wQEzQyK2gSO5yDIDB336sXQleAhOHrzlYyKw==} + hono@4.13.13: + resolution: {integrity: sha512-CQ46U0ZkAGmbT/4UxdzzGJpacP2IeKgY4a5/tOI9AABbpOMfK739wfDXmv1usCk+3RkKj1hQy4/fjhiwa2xlrA==} engines: {node: '>=16.9.0'} hosted-git-info@4.1.0: @@ -5778,8 +5788,8 @@ packages: html-url-attributes@3.0.1: resolution: {integrity: sha512-ol6UPyBWqsrO6EJySPz2O7ZSr856WDrEzM5zMqp+FJJLGMW35cLYmmZnl0vztAZxRUoNZJFTCohfjuIJ8I4QBQ==} - http-cache-semantics@4.2.0: - resolution: {integrity: sha512-dTxcvPXqPvXBQpq5dUr6mEMJX4oIEFv6bwom3FDwKRDsuIjjJGANqhBuoAn9c1RQJIdAKav33ED65E2ys+87QQ==} + http-cache-semantics@4.3.0: + resolution: {integrity: sha512-M5t5LlJpS1UHMjvwRQVdFHvPISGeLAxNcrWuJkeGh0KxsqCHZ1O3NXZU/8x7cD0BDcGW8kapxMKTvwlqrNkHkA==} http-errors@2.0.1: resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==} @@ -5858,8 +5868,8 @@ packages: invariant@2.2.4: resolution: {integrity: sha512-phJfQVBuaJM5raOpJjSfkiD6BpbCE4Ns//LaXl6wGYtUBY83nWS6Rf9tXm2e8VaK60JEjYldbPif/A2B1C2gNA==} - ip-address@10.7.0: - resolution: {integrity: sha512-BGFsyJd5mpXp3rK6jIdADLNgpJUK1jnjzvYF8lK+VyDab9JAmqN0YOKDdP17HlgKb2+ehPgDc8EtnRLbGCAMhA==} + ip-address@10.7.3: + resolution: {integrity: sha512-A1kdq/tSb5QjvKvAMgIoEvDBIgL7qaqVP/jkvSwYYRZ9iEzvPpopxp2wQfu3SuZRHtpHNxMn8Fs0bS+gf5Xmwg==} engines: {node: '>= 12'} ipaddr.js@1.9.1: @@ -6850,7 +6860,7 @@ packages: '@aws-sdk/credential-provider-node': '>=3.972.0 <4' '@smithy/hash-node': '>=4.3.0 <5' '@smithy/signature-v4': '>=5.4.0 <6' - undici: 6.28.1 + undici: 6.29.0 ws: ^8.21.0 zod: ^3.25 || ^4.0 peerDependenciesMeta: @@ -7168,8 +7178,8 @@ packages: resolution: {integrity: sha512-dYDWdjSl5RNb7SgPxGQcRU+GtvP7s2fpkrY0r432PcOIaZ0/rBcxEZnQN67iJhFuQiVw754JDoPruPCNdGsbjg==} engines: {node: '>=12.0.0'} - proxy-addr@2.0.7: - resolution: {integrity: sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==} + proxy-addr@2.0.8: + resolution: {integrity: sha512-5nnx0yGyVUcY6t9RnWcARWtwT9F1D8O9rt08htPvnd49W1IgZtmLkhu9WfMzQj1cFxjHIO6connUNVW5k7AVyQ==} engines: {node: '>= 0.10'} proxy-from-env@2.1.0: @@ -7768,8 +7778,8 @@ packages: resolution: {integrity: sha512-IH/iSeO9T6gz1KkFleGDWkG9N3dl4jXVYUtMhIqH10Md0ttMer8nUNWiP1DKuNrybD2xBrixLJdCC9J6ECoYkg==} engines: {node: '>=10.0.0'} - source-map-js@1.2.1: - resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==} + source-map-js@1.2.2: + resolution: {integrity: sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==} engines: {node: '>=0.10.0'} source-map-support@0.5.21: @@ -8139,8 +8149,8 @@ packages: undici-types@8.10.0: resolution: {integrity: sha512-ibvdovq3nCFs8Msrd95BW+zUOq+aOVbT+wpHUoPWhztbHEoPc6oof51iFDB6Es8lTKvNvVW9jNSAB8dwrKTMGg==} - undici@6.28.1: - resolution: {integrity: sha512-zWpdTVD54H48CIybL0rWQ3ukpb9d23wM7eH5RtfdmeP70cWHNjtfo7P4vZX+5CoDcO53J4Pu5uXp7lNfjc6DRA==} + undici@6.29.0: + resolution: {integrity: sha512-R+RODBqp6i2pPflGdq+xIOUkl+RNfGgHwoinecKu/JCuf2uO06cOKoDbI2P7Dn6KcswdKwrczbU6IYJ6K8X+wg==} engines: {node: '>=18.17'} undici@7.29.1: @@ -9933,7 +9943,7 @@ snapshots: bplist-parser: 0.3.2 chalk: 4.1.2 ci-info: 3.9.0 - compression: 1.8.1 + compression: 1.8.2 connect: 3.7.0 debug: 4.4.3 dnssd-advertise: 1.1.6 @@ -10317,9 +10327,9 @@ snapshots: protobufjs: 7.6.6 yargs: 17.7.3 - '@hono/node-server@1.19.17(hono@4.13.5)': + '@hono/node-server@1.19.17(hono@4.13.13)': dependencies: - hono: 4.13.5 + hono: 4.13.13 '@iarna/toml@2.2.5': {} @@ -10696,7 +10706,7 @@ snapshots: '@modelcontextprotocol/sdk@1.31.0(zod@4.5.4)': dependencies: - '@hono/node-server': 1.19.17(hono@4.13.5) + '@hono/node-server': 1.19.17(hono@4.13.13) ajv: 8.20.0 ajv-formats: 3.0.1(ajv@8.20.0) content-type: 1.0.5 @@ -10706,7 +10716,7 @@ snapshots: eventsource-parser: 3.1.1 express: 5.2.1 express-rate-limit: 8.7.0(express@5.2.1) - hono: 4.13.5 + hono: 4.13.13 jose: 6.2.10 json-schema-typed: 8.0.2 pkce-challenge: 5.0.1 @@ -11913,7 +11923,7 @@ snapshots: jiti: 2.7.0 lightningcss: 1.32.0 magic-string: 0.30.21 - source-map-js: 1.2.1 + source-map-js: 1.2.2 tailwindcss: 4.3.3 '@tailwindcss/oxide-android-arm64@4.3.3': @@ -12785,16 +12795,16 @@ snapshots: dependencies: big-integer: 1.6.52 - brace-expansion@1.1.18: + brace-expansion@1.1.21: dependencies: balanced-match: 1.0.2 concat-map: 0.0.1 - brace-expansion@2.1.4: + brace-expansion@2.1.7: dependencies: balanced-match: 1.0.2 - brace-expansion@5.0.9: + brace-expansion@5.0.12: dependencies: balanced-match: 4.0.4 @@ -12895,7 +12905,7 @@ snapshots: dependencies: clone-response: 1.0.3 get-stream: 5.2.0 - http-cache-semantics: 4.2.0 + http-cache-semantics: 4.3.0 keyv: 4.5.4 lowercase-keys: 2.0.0 normalize-url: 6.1.0 @@ -13090,11 +13100,12 @@ snapshots: dependencies: mime-db: 1.54.0 - compression@1.8.1: + compression@1.8.2: dependencies: bytes: 3.1.2 compressible: 2.0.18 debug: 2.6.9 + destroy: 1.2.0 negotiator: 0.6.4 on-headers: 1.1.0 safe-buffer: 5.2.1 @@ -13221,7 +13232,7 @@ snapshots: css-tree@3.2.1: dependencies: mdn-data: 2.27.1 - source-map-js: 1.2.1 + source-map-js: 1.2.2 css-what@6.2.2: {} @@ -13663,7 +13674,7 @@ snapshots: transitivePeerDependencies: - supports-color - electron@43.4.1: + electron@43.7.8: dependencies: '@electron-internal/extract-zip': 1.0.5 '@electron/get': 5.1.0 @@ -14105,7 +14116,7 @@ snapshots: dependencies: debug: 4.4.3 express: 5.2.1 - ip-address: 10.7.0 + ip-address: 10.7.3 transitivePeerDependencies: - supports-color @@ -14130,7 +14141,7 @@ snapshots: on-finished: 2.4.1 once: 1.4.0 parseurl: 1.3.3 - proxy-addr: 2.0.7 + proxy-addr: 2.0.8 qs: 6.16.0 range-parser: 1.3.0 router: 2.2.0 @@ -14587,7 +14598,7 @@ snapshots: dependencies: parse-passwd: 1.0.0 - hono@4.13.5: {} + hono@4.13.13: {} hosted-git-info@4.1.0: dependencies: @@ -14605,7 +14616,7 @@ snapshots: html-url-attributes@3.0.1: {} - http-cache-semantics@4.2.0: {} + http-cache-semantics@4.3.0: {} http-errors@2.0.1: dependencies: @@ -14693,7 +14704,7 @@ snapshots: dependencies: loose-envify: 1.4.0 - ip-address@10.7.0: {} + ip-address@10.7.3: {} ipaddr.js@1.9.1: {} @@ -15682,19 +15693,19 @@ snapshots: minimatch@10.2.6: dependencies: - brace-expansion: 5.0.9 + brace-expansion: 5.0.12 minimatch@3.1.5: dependencies: - brace-expansion: 1.1.18 + brace-expansion: 1.1.21 minimatch@5.1.9: dependencies: - brace-expansion: 2.1.4 + brace-expansion: 2.1.7 minimatch@9.0.9: dependencies: - brace-expansion: 2.1.4 + brace-expansion: 2.1.7 minimist@1.2.8: {} @@ -15786,7 +15797,7 @@ snapshots: semver: 7.8.5 tar: 7.5.22 tinyglobby: 0.2.17 - undici: 6.28.1 + undici: 6.29.0 which: 6.0.1 node-int64@0.4.0: {} @@ -16076,7 +16087,7 @@ snapshots: dependencies: nanoid: 3.3.18 picocolors: 1.1.1 - source-map-js: 1.2.1 + source-map-js: 1.2.2 postgres-array@2.0.0: {} @@ -16190,7 +16201,7 @@ snapshots: '@types/node': 24.13.3 long: 5.3.2 - proxy-addr@2.0.7: + proxy-addr@2.0.8: dependencies: forwarded: 0.2.0 ipaddr.js: 1.9.1 @@ -16983,7 +16994,7 @@ snapshots: transitivePeerDependencies: - supports-color - source-map-js@1.2.1: {} + source-map-js@1.2.2: {} source-map-support@0.5.21: dependencies: @@ -17383,7 +17394,7 @@ snapshots: undici-types@8.10.0: {} - undici@6.28.1: {} + undici@6.29.0: {} undici@7.29.1: {}