From 473479639734496f829180206b2862338f84f949 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 27 Oct 2026 09:53:53 +0000 Subject: [PATCH] fix: remediate Dependabot security alerts Automated by fix-dependabot-alerts workflow. Applied: fast-uri Rolled back: brace-expansion @azure/msal-node @modelcontextprotocol/sdk @vue/server-renderer brace-expansion diff electron esbuild hono katex nodemailer prosemirror-view qs underscore undici uuid xml2js zod Blocked: 1 package(s) Deferred (min release age): 2 package(s) Shell packaging: passed Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- ts/pnpm-lock.yaml | 73 ++++++++++++++++++++++------------------------- 1 file changed, 34 insertions(+), 39 deletions(-) diff --git a/ts/pnpm-lock.yaml b/ts/pnpm-lock.yaml index 61b4e4a6b2..9cdab14586 100644 --- a/ts/pnpm-lock.yaml +++ b/ts/pnpm-lock.yaml @@ -12717,8 +12717,8 @@ packages: base64-js@1.5.1: resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==} - baseline-browser-mapping@2.11.29: - resolution: {integrity: sha512-YeesxhUmR4h5y5V8KF8iBCqJb8YFrBJ++XBTeGcWIaQOYXGN19JM0FoiOjAhwuDoln8owMgXcWBmgHtYSkky2w==} + baseline-browser-mapping@2.11.30: + resolution: {integrity: sha512-YJs6Pz17RMNv8HoyKREtCY38E3BV1nPkWVmIb+XN1uHC1Vqt3KZCH/uJH9ZKRoiKb/icZ6tvehyee6RZNbFfRA==} engines: {node: '>=6.0.0'} hasBin: true @@ -12823,8 +12823,8 @@ packages: browser-stdout@1.3.1: resolution: {integrity: sha512-qhAVI1+Av2X7qelOfAIYwXONood6XlZE/fXaBSmW/T5SzLAmCgzi+eiWE7fUvbHaeNBQH13UftjpXxsfLkMpgw==} - browserslist@4.29.3: - resolution: {integrity: sha512-1R4kiYKXGViqEN0CnoDrXc1StD9niAwu+j2dukWzrD4bJgsD4lDmEp0CRbc6E/vYJIfTHwPmwyaKtVSudICdPA==} + browserslist@4.29.4: + resolution: {integrity: sha512-2TcbbiwXEq+N0kD36tykpCfyyQigUXmuwNQbnPp4Xk4PX9JOqVIKjJlIDjpH7uY6tmRGoAd+apeT1p60T8wsdA==} engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7} hasBin: true @@ -12945,8 +12945,8 @@ packages: resolution: {integrity: sha512-Gmy6FhYlCY7uOElZUSbxo2UCDH8owEk996gkbrpsgGtrJLM3J7jGxl9Ic7Qwwj4ivOE5AWZWRMecDdF7hqGjFA==} engines: {node: '>=10'} - caniuse-lite@1.0.30001816: - resolution: {integrity: sha512-+8Yx7BXCoqk6IF8yTicjfUR6D/ldJzdlsodlEOiOSPmhK844WIgk67/zIQaGAOxNkZyyvBlrRFnLvqKIoqbAFw==} + caniuse-lite@1.0.30001817: + resolution: {integrity: sha512-uZ1JG80BwhtMalIAGPxPfmNhHyd/B/nTdr3hITWlRamSyAdUStP1Gop01e7SD5q6J90ixJvWDbvmiFVfDgn4bw==} caseless@0.12.0: resolution: {integrity: sha512-4tYFyifaFfGacoiObjJegolkwSU4xQNGbVgUiNYVUxbQ2x2lUsFvY4hVgVzGiIe6WLOPqycWXA40l+PWsxthUw==} @@ -14020,8 +14020,8 @@ packages: electron-publish@26.15.3: resolution: {integrity: sha512-g/2bn8YTavY4cuS5F+jOS7zmZbXXBV8KZ8yHKfJjFPoKtzBqrpCdNPxBd3tqdBwP7BVd0lGzf7Bk2s0KesWZ4Q==} - electron-to-chromium@1.5.459: - resolution: {integrity: sha512-4SC9HHSFjO/liAhifpdOL5hG9b4BP7/5G3y3UPZVO8trlAXr1CaUEEJL0gWK3kOcYcZrOA5rkwG45Gra/lTIgg==} + electron-to-chromium@1.5.460: + resolution: {integrity: sha512-rRaVC7bNUyGsL+GMtmZfv3AfgG6za7gE9v5bT0PIbjEerddA0IQ+tCK05NFAXqCpNlrxBZqbFqquyxHRQONHTA==} electron-updater@6.8.9: resolution: {integrity: sha512-ZhVxM9iGONUpZGI1FxdMRgJjUFXi7AYGVa5PwKlO1tV1/4zDxQmfKpXOHVztKrd6L9rLcFjERvi1Mf2vxyTkig==} @@ -14421,11 +14421,8 @@ packages: fast-levenshtein@3.0.0: resolution: {integrity: sha512-hKKNajm46uNmTlhHSyZkmToAc56uZJwYq7yrciZjqOxnlfQwERDQJmHPUp7m1m9wx8vgOe8IaCKZ5Kv2k1DdCQ==} - fast-uri@3.1.6: - resolution: {integrity: sha512-7Ical1vFEMr0onbVzEDIreM22I4khW+fzyQPwvAFWBp1iwdshSZRsL4jjRvPG9JP1uiqMHRto+YU6R2/CzDz5Q==} - - fast-uri@3.1.8: - resolution: {integrity: sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==} + fast-uri@3.1.9: + resolution: {integrity: sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==} fast-xml-builder@1.2.0: resolution: {integrity: sha512-00aAWieqff+ZJhsXA4g1g7M8k+7AYoMUUHF+/zFb5U6Uv/P0Vl4QZo84/IcufzYalLuEj9928bXN9PbbFzMF0Q==} @@ -15779,8 +15776,8 @@ packages: jose@5.10.0: resolution: {integrity: sha512-s+3Al/p9g32Iq+oqXxkW//7jk2Vig6FF1CFqzVXoTUXt2qz89YWbL+OwS17NFYEvxC35n0FKeGO2LGYSxeM2Gg==} - jose@6.2.12: - resolution: {integrity: sha512-9NiFmJEex0sy2Dk58j2UGBSHgUs2ypF9eZSu4L6vjOX3Dp96Sw1F3uL+H+D1sx02jZZdzUT0HgvCy59CuvXcWw==} + jose@6.2.13: + resolution: {integrity: sha512-7TIg10ZE1x82YediN+lcrPNvGMKge9yFHQD+Qho/b8y2adfugU3AsvvHfxV0fzyFllT6l9xCjf4RWY9g/Z9PJQ==} jose@6.2.8: resolution: {integrity: sha512-Bsdjwm3Qsd/P0jR+BHDe3LytDfY7WBq2HmCCLIwuVRHMuEC9ae7/R474GIUdF1NgCyZjzVo/A9DOiOBtXq8ZoQ==} @@ -21085,7 +21082,7 @@ snapshots: dependencies: '@babel/compat-data': 7.29.7 '@babel/helper-validator-option': 7.29.7 - browserslist: 4.29.3 + browserslist: 4.29.4 lru-cache: 5.1.1 semver: 6.3.1 @@ -23502,7 +23499,7 @@ snapshots: express: 5.3.0 express-rate-limit: 8.7.1(express@5.3.0) hono: 4.13.13 - jose: 6.2.12 + jose: 6.2.13 json-schema-typed: 8.0.2 pkce-challenge: 5.0.1 raw-body: 3.0.2 @@ -23524,7 +23521,7 @@ snapshots: express: 5.3.0 express-rate-limit: 8.7.1(express@5.3.0) hono: 4.13.13 - jose: 6.2.12 + jose: 6.2.13 json-schema-typed: 8.0.2 pkce-challenge: 5.0.1 raw-body: 3.0.2 @@ -23546,7 +23543,7 @@ snapshots: express: 5.3.0 express-rate-limit: 8.7.1(express@5.3.0) hono: 4.13.13 - jose: 6.2.12 + jose: 6.2.13 json-schema-typed: 8.0.2 pkce-challenge: 5.0.1 raw-body: 3.0.2 @@ -23568,7 +23565,7 @@ snapshots: express: 5.3.0 express-rate-limit: 8.7.1(express@5.3.0) hono: 4.13.13 - jose: 6.2.12 + jose: 6.2.13 json-schema-typed: 8.0.2 pkce-challenge: 5.0.1 raw-body: 3.0.2 @@ -23590,7 +23587,7 @@ snapshots: express: 5.3.0 express-rate-limit: 8.7.1(express@5.3.0) hono: 4.13.13 - jose: 6.2.12 + jose: 6.2.13 json-schema-typed: 8.0.2 pkce-challenge: 5.0.1 raw-body: 3.0.2 @@ -26513,14 +26510,14 @@ snapshots: ajv@8.18.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.6 + fast-uri: 3.1.9 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 ajv@8.20.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.8 + fast-uri: 3.1.9 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -26909,7 +26906,7 @@ snapshots: base64-js@1.5.1: {} - baseline-browser-mapping@2.11.29: {} + baseline-browser-mapping@2.11.30: {} basic-ftp@5.3.0: {} @@ -27048,13 +27045,13 @@ snapshots: browser-stdout@1.3.1: {} - browserslist@4.29.3: + browserslist@4.29.4: dependencies: - baseline-browser-mapping: 2.11.29 - caniuse-lite: 1.0.30001816 - electron-to-chromium: 1.5.459 + baseline-browser-mapping: 2.11.30 + caniuse-lite: 1.0.30001817 + electron-to-chromium: 1.5.460 node-releases: 2.0.59 - update-browserslist-db: 1.3.4(browserslist@4.29.3) + update-browserslist-db: 1.3.4(browserslist@4.29.4) bs-logger@0.2.6: dependencies: @@ -27192,7 +27189,7 @@ snapshots: camelcase@6.3.0: {} - caniuse-lite@1.0.30001816: {} + caniuse-lite@1.0.30001817: {} caseless@0.12.0: {} @@ -28420,7 +28417,7 @@ snapshots: transitivePeerDependencies: - supports-color - electron-to-chromium@1.5.459: {} + electron-to-chromium@1.5.460: {} electron-updater@6.8.9: dependencies: @@ -29165,9 +29162,7 @@ snapshots: dependencies: fastest-levenshtein: 1.0.16 - fast-uri@3.1.6: {} - - fast-uri@3.1.8: {} + fast-uri@3.1.9: {} fast-xml-builder@1.2.0: dependencies: @@ -31094,7 +31089,7 @@ snapshots: jose@5.10.0: {} - jose@6.2.12: {} + jose@6.2.13: {} jose@6.2.8: {} @@ -35656,9 +35651,9 @@ snapshots: graceful-fs: 4.2.11 node-int64: 0.4.0 - update-browserslist-db@1.3.4(browserslist@4.29.3): + update-browserslist-db@1.3.4(browserslist@4.29.4): dependencies: - browserslist: 4.29.3 + browserslist: 4.29.4 escalade: 3.2.0 picocolors: 1.1.1 @@ -35969,7 +35964,7 @@ snapshots: '@webassemblyjs/wasm-parser': 1.14.1 acorn: 8.19.0 acorn-import-phases: 1.0.4(acorn@8.19.0) - browserslist: 4.29.3 + browserslist: 4.29.4 chrome-trace-event: 1.0.4 enhanced-resolve: 5.26.0 es-module-lexer: 2.3.2 @@ -36010,7 +36005,7 @@ snapshots: '@webassemblyjs/wasm-parser': 1.14.1 acorn: 8.19.0 acorn-import-phases: 1.0.4(acorn@8.19.0) - browserslist: 4.29.3 + browserslist: 4.29.4 chrome-trace-event: 1.0.4 enhanced-resolve: 5.26.0 es-module-lexer: 2.3.2