From 56aa0dd1f2d42f8527f15181c51863a7b4b8c666 Mon Sep 17 00:00:00 2001 From: Jonathan Norris Date: Mon, 2 Nov 2026 09:53:04 -0500 Subject: [PATCH 1/2] chore: resolve open dependabot security alerts --- package.json | 12 ++++++------ yarn.lock | 52 ++++++++++++++++++++++++++-------------------------- 2 files changed, 32 insertions(+), 32 deletions(-) diff --git a/package.json b/package.json index 520706c2..f8070035 100644 --- a/package.json +++ b/package.json @@ -74,7 +74,7 @@ }, "packageManager": "yarn@4.9.2", "resolutions": { - "serialize-javascript": "7.0.5", + "serialize-javascript": "7.1.3", "qs": "^6.16.0", "fast-xml-parser": "^5.7.0", "fast-xml-builder": "^1.1.7", @@ -87,21 +87,21 @@ "js-yaml@^3.13.1": "^3.15.2", "js-yaml@^4.1.0": "^4.3.2", "websocket-driver": "^0.7.5", - "dompurify": "^3.4.16", + "dompurify": "^3.4.17", "form-data": "^4.0.6", "tar": "^7.5.21", - "launch-editor": "^2.14.1", + "launch-editor": "^2.14.2", "@babel/core": "^7.29.6", "http-proxy-middleware": "^2.0.10", "webpack-dev-server": "^5.2.6", - "fast-uri": "^3.1.8", + "fast-uri": "^3.1.9", "svgo": "^3.3.5", "colord": "^2.9.4", - "body-parser": "^1.20.6", + "body-parser": "^1.20.9", "brace-expansion@^1.1.7": "^1.1.21", "brace-expansion@^2.0.1": "^2.1.7", "brace-expansion@^2.0.2": "^2.1.7", - "ip-address": "^10.5.1", + "ip-address": "^10.7.4", "nanoid": "^3.3.17", "browserslist": "^4.28.7", "postcss-selector-parser": "^7.1.6", diff --git a/yarn.lock b/yarn.lock index 8aaae028..e9083ed6 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5422,9 +5422,9 @@ __metadata: languageName: node linkType: hard -"body-parser@npm:^1.20.6": - version: 1.20.6 - resolution: "body-parser@npm:1.20.6" +"body-parser@npm:^1.20.9": + version: 1.20.9 + resolution: "body-parser@npm:1.20.9" dependencies: bytes: "npm:~3.1.2" content-type: "npm:~1.0.5" @@ -5434,11 +5434,11 @@ __metadata: http-errors: "npm:~2.0.1" iconv-lite: "npm:~0.4.24" on-finished: "npm:~2.4.1" - qs: "npm:~6.15.1" + qs: "npm:~6.16.0" raw-body: "npm:~2.5.3" type-is: "npm:~1.6.18" unpipe: "npm:~1.0.0" - checksum: 10/cf3730f79d8d773a1a6f34fdec4bd40cf41b2cf25c17a3b9dfeb81e83b7e62e309285a92ba6bf5d99eee44144083d3122f332757215da37eb4740544432c2766 + checksum: 10/e9ccf7a920205d674a83cdfae0e83ed3cfe32af668706034e9832a8bf3b80f06fbc18a7c26759611f72d334311683a4b1ff73661690038a352e8c3b4a424b709 languageName: node linkType: hard @@ -6935,15 +6935,15 @@ __metadata: languageName: node linkType: hard -"dompurify@npm:^3.4.16": - version: 3.4.16 - resolution: "dompurify@npm:3.4.16" +"dompurify@npm:^3.4.17": + version: 3.4.17 + resolution: "dompurify@npm:3.4.17" dependencies: "@types/trusted-types": "npm:^2.0.7" dependenciesMeta: "@types/trusted-types": optional: true - checksum: 10/a571d0e2bede4f739666afd640398a86854abd27c71ce0724910249e2fd2ca7ddb8098a9ab579d3a5b39058419af694421f8fe859a81fd6d8acda16019a8ab9d + checksum: 10/ae03c068bd351d1201a24a9667cb302c65939f45a0c357edec8b84133108e19ac74f355c2d8b0f30baadadd7f0be2db300d269aa80d3ee15872712ca9ff4e1a8 languageName: node linkType: hard @@ -7539,10 +7539,10 @@ __metadata: languageName: node linkType: hard -"fast-uri@npm:^3.1.8": - version: 3.1.8 - resolution: "fast-uri@npm:3.1.8" - checksum: 10/d3dfa29fd2e5fa2371833699f3f78c975b79f65e52e0ce37604db10dffb85b5b448b5075e93453272cb95fb1c6a759495164e60649ffd69e59ec43f20d44f791 +"fast-uri@npm:^3.1.9": + version: 3.1.9 + resolution: "fast-uri@npm:3.1.9" + checksum: 10/4276cf58661e68b4fefcbc3308a2c8429e5664d2a77b393a79c1cdbe9e5ba80617d27c7ce6685194ae40e4816df73dbd72a0324e5012d94a7e9cf85ee711f658 languageName: node linkType: hard @@ -8805,10 +8805,10 @@ __metadata: languageName: node linkType: hard -"ip-address@npm:^10.5.1": - version: 10.7.3 - resolution: "ip-address@npm:10.7.3" - checksum: 10/04655aa25ad682bb26ecb82281c9d3ecd99da8ecde9c95146f0a96685de90a359432d905bf6c53b5732fed0bfb1f93763cd3c91c3f266eec96cc41bfea987197 +"ip-address@npm:^10.7.4": + version: 10.7.5 + resolution: "ip-address@npm:10.7.5" + checksum: 10/30e328a30851fa944260acd6a618c9a32e7a8f16ff033bab0e7da46beb8572fc9c77514a57e777ba9e0c4e571bab24842c10d2bab96b2856ab602e4ecdd669e1 languageName: node linkType: hard @@ -9326,13 +9326,13 @@ __metadata: languageName: node linkType: hard -"launch-editor@npm:^2.14.1": - version: 2.14.1 - resolution: "launch-editor@npm:2.14.1" +"launch-editor@npm:^2.14.2": + version: 2.14.2 + resolution: "launch-editor@npm:2.14.2" dependencies: picocolors: "npm:^1.1.1" - shell-quote: "npm:^1.8.4" - checksum: 10/335d12ca437280e77070657531c251b6c91c62bc653f70ab66ddd2a6e50131b1b043480411c5b93d54955a0a6eb8ec01e9a5b5cfe2d887341d878d19394a126b + shell-quote: "npm:^1.10.0" + checksum: 10/8a3a82314ed6705d8f6795c409ea31ed2a106d0f0bc0528a60f8b53ec972cce1db9088bb4647987b2ef4bb16b804fcc85e54529acaa26aae22f39eaba704401b languageName: node linkType: hard @@ -13695,10 +13695,10 @@ __metadata: languageName: node linkType: hard -"serialize-javascript@npm:7.0.5": - version: 7.0.5 - resolution: "serialize-javascript@npm:7.0.5" - checksum: 10/6237c76ef6df3d1ad61dd4a393b71ca758c7654f4d1cf77529e513134c0f0660302e03b7ec88a8f3a3daa79e1f93d6de8218ecbc45e073d7cc6b66284a1d3e83 +"serialize-javascript@npm:7.1.3": + version: 7.1.3 + resolution: "serialize-javascript@npm:7.1.3" + checksum: 10/b7135b98cc11870d504923a418bd8156c92520d8b3b799bdda6306a5ca886c777d2530fc864fd90a1fe7b0d7776f815871a6c2a5e77ab57183aa435e4df56127 languageName: node linkType: hard From 4c61d08702504a0095d5e3439c85d0d4c2acc00c Mon Sep 17 00:00:00 2001 From: Jonathan Norris Date: Mon, 9 Nov 2026 08:54:46 -0600 Subject: [PATCH 2/2] chore: resolve remaining dependabot alerts for joi and follow-redirects --- package.json | 3 ++- yarn.lock | 16 ++++++++-------- 2 files changed, 10 insertions(+), 9 deletions(-) diff --git a/package.json b/package.json index f8070035..966afde0 100644 --- a/package.json +++ b/package.json @@ -83,7 +83,7 @@ "ws@^7.3.1": "^7.5.11", "ws@^8.18.0": "^8.21.0", "postcss": "^8.5.23", - "joi": "^17.13.6", + "joi": "^17.13.9", "js-yaml@^3.13.1": "^3.15.2", "js-yaml@^4.1.0": "^4.3.2", "websocket-driver": "^0.7.5", @@ -102,6 +102,7 @@ "brace-expansion@^2.0.1": "^2.1.7", "brace-expansion@^2.0.2": "^2.1.7", "ip-address": "^10.7.4", + "follow-redirects": "^1.16.2", "nanoid": "^3.3.17", "browserslist": "^4.28.7", "postcss-selector-parser": "^7.1.6", diff --git a/yarn.lock b/yarn.lock index e9083ed6..056257d0 100644 --- a/yarn.lock +++ b/yarn.lock @@ -7693,13 +7693,13 @@ __metadata: languageName: node linkType: hard -"follow-redirects@npm:^1.0.0, follow-redirects@npm:^1.16.0": - version: 1.16.1 - resolution: "follow-redirects@npm:1.16.1" +"follow-redirects@npm:^1.16.2": + version: 1.16.3 + resolution: "follow-redirects@npm:1.16.3" peerDependenciesMeta: debug: optional: true - checksum: 10/269c9f38e4bb413d7ab224fb5aa733118288a18e84d4d0a22821a850574624a55d45f2c6735fc09fc1cceedb6343a5539daf6d2dd70bce8980c8336d230a2f50 + checksum: 10/ac3b15f7d18c26be8b38fb314d271b8def49f710388eea76079721792ef1b828fdb6696cacc92962f54bcd2462479fdcf33497502dc20ed0a5a8be1afb092215 languageName: node linkType: hard @@ -9167,16 +9167,16 @@ __metadata: languageName: node linkType: hard -"joi@npm:^17.13.6": - version: 17.13.8 - resolution: "joi@npm:17.13.8" +"joi@npm:^17.13.9": + version: 17.13.9 + resolution: "joi@npm:17.13.9" dependencies: "@hapi/hoek": "npm:^9.3.0" "@hapi/topo": "npm:^5.1.0" "@sideway/address": "npm:^4.1.5" "@sideway/formula": "npm:^3.0.1" "@sideway/pinpoint": "npm:^2.0.0" - checksum: 10/7d8ccb06cee958516748519cb46430b1bf5b732f54428a5daf8f8630290c928be1abb7d3c3c2506d68ba76d1c1abe480e087255c34b839aae47b2ee2c76f587d + checksum: 10/879e9664049463d8fd9387be3813c5c8a29987de82b045688b1b3a69473cb3895200e4fe76d9b329f3522228722f94c5e9117fa45094e3d7443b0a501b161764 languageName: node linkType: hard