From 906b29291eddec49adf47456072f33f956e40efc Mon Sep 17 00:00:00 2001 From: Corwin Marsh Date: Fri, 23 Oct 2026 09:40:50 -0700 Subject: [PATCH] fix: patch vulnerable security tooling transitives --- package.json | 10 +++--- pnpm-lock.yaml | 94 +++++++++++++++++++++++++------------------------- 2 files changed, 52 insertions(+), 52 deletions(-) diff --git a/package.json b/package.json index 7a69701..e9489c7 100644 --- a/package.json +++ b/package.json @@ -260,14 +260,14 @@ "mocha>diff": "8.0.3", "mocha>serialize-javascript": "7.0.5", "@azure/msal-node>uuid": "14.0.0", - "brace-expansion@>=1.0.0 <1.1.17": "1.1.18", - "brace-expansion@>=2.0.0 <2.1.3": "2.1.4", - "brace-expansion@>=5.0.0 <5.0.9": "5.0.9", - "fast-uri@>=3.0.0 <3.1.6": "3.1.7", + "brace-expansion@>=1.0.0 <1.1.21": "1.1.21", + "brace-expansion@>=2.0.0 <2.1.7": "2.1.7", + "brace-expansion@>=5.0.0 <5.0.12": "5.0.12", + "fast-uri@>=3.0.0 <3.1.8": "3.1.9", "js-yaml@>=4.0.0 <4.3.2": "4.3.2", "markdown-it>linkify-it": "5.0.2", "typed-rest-client>qs": "6.16.0", - "npm-run-all>shell-quote": "1.10.0" + "npm-run-all>shell-quote": "1.11.0" }, "onlyBuiltDependencies": [ "@vscode/vsce-sign", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index c810654..93fc1b2 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -8,14 +8,14 @@ overrides: mocha>diff: 8.0.3 mocha>serialize-javascript: 7.0.5 '@azure/msal-node>uuid': 14.0.0 - brace-expansion@>=1.0.0 <1.1.17: 1.1.18 - brace-expansion@>=2.0.0 <2.1.3: 2.1.4 - brace-expansion@>=5.0.0 <5.0.9: 5.0.9 - fast-uri@>=3.0.0 <3.1.6: 3.1.7 + brace-expansion@>=1.0.0 <1.1.21: 1.1.21 + brace-expansion@>=2.0.0 <2.1.7: 2.1.7 + brace-expansion@>=5.0.0 <5.0.12: 5.0.12 + fast-uri@>=3.0.0 <3.1.8: 3.1.9 js-yaml@>=4.0.0 <4.3.2: 4.3.2 markdown-it>linkify-it: 5.0.2 typed-rest-client>qs: 6.16.0 - npm-run-all>shell-quote: 1.10.0 + npm-run-all>shell-quote: 1.11.0 importers: @@ -1003,14 +1003,14 @@ packages: boundary@2.0.0: resolution: {integrity: sha512-rJKn5ooC9u8q13IMCrW0RSp31pxBCHE3y9V/tp3TdWSLf8Em3p6Di4NBpfzbJge9YjjFEsD0RtFEjtvHL5VyEA==} - brace-expansion@1.1.18: - resolution: {integrity: sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==} + brace-expansion@1.1.21: + resolution: {integrity: sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==} - brace-expansion@2.1.4: - resolution: {integrity: sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==} + brace-expansion@2.1.7: + resolution: {integrity: sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==} - brace-expansion@5.0.9: - resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==} + brace-expansion@5.0.12: + resolution: {integrity: sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==} engines: {node: 20 || >=22} braces@3.0.3: @@ -1513,8 +1513,8 @@ packages: fast-levenshtein@2.0.6: resolution: {integrity: sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==} - fast-uri@3.1.7: - resolution: {integrity: sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==} + fast-uri@3.1.9: + resolution: {integrity: sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==} fastq@1.20.1: resolution: {integrity: sha512-GGToxJ/w1x32s/D2EKND7kTil4n8OVk/9mycTc4VDza13lOvpUZTGX3mFSCtV9ksdGBVzvsyAVLM6mHFThxXxw==} @@ -1571,8 +1571,8 @@ packages: flatted@3.4.2: resolution: {integrity: sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==} - follow-redirects@1.16.0: - resolution: {integrity: sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==} + follow-redirects@1.16.1: + resolution: {integrity: sha512-FNvFGzoMLWmE6Yj9spb/zjd7yiNCHiAW9/Tg9CXrQ8wuu32HtlJOwWO11OJafl5FfY3DxTdQ0vj42zU1kvv5jg==} engines: {node: '>=4.0'} peerDependencies: debug: '*' @@ -1698,8 +1698,8 @@ packages: graceful-fs@4.2.11: resolution: {integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==} - handlebars@4.7.9: - resolution: {integrity: sha512-4E71E0rpOaQuJR2A3xDZ+GM1HyWYv1clR58tC8emQNeQe3RH7MAzSbat+V0wG78LQBo6m6bzSG/L4pBuCsgnUQ==} + handlebars@4.7.10: + resolution: {integrity: sha512-P5VJMVM7qgBn6vjXMw8WG9uVI+ncf2pi72j4de4yz5ZULLj2RGqLYaKOYGsgyrViQ0tePOVlN1tDCCXXtFqXKg==} engines: {node: '>=0.4.7'} hasBin: true @@ -2214,8 +2214,8 @@ packages: resolution: {integrity: sha512-hXdUTZYIVOt1Ex//jAQi+wTZZpUpwBj/0QsOzqegb3rGMMeJiSEu5xLHnYfBrRV4RH2+OCSOO95Is/7x1WJ4bw==} engines: {node: '>=10'} - markdown-it@14.2.0: - resolution: {integrity: sha512-1TGiQiJVRQ3NPmZH6sx5Cfnmg6GQm9jvC1ch4TK511NjSJvjzKLzn5pPfZRNZkRPZP0HqCioSndqH8v2nRaWVQ==} + markdown-it@14.3.3: + resolution: {integrity: sha512-L//tDAkjTjJCU6pBUSBTgs3Kg4InVaZuUZog/b6V12UKhcDQ7S78877ibbCanRExwPuYP1CZD7Gd2dxSy1GXRg==} hasBin: true marked-terminal@7.3.0: @@ -2917,8 +2917,8 @@ packages: resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==} engines: {node: '>=8'} - shell-quote@1.10.0: - resolution: {integrity: sha512-w1aiOKwKuRgtwAReIIj89puqg+I7GvX4IbLrvmhXbzQsj1+Zwi4VO3+fa6ZF91TWSjIxoEkKnMeHcLEODK5ZXA==} + shell-quote@1.11.0: + resolution: {integrity: sha512-JdxDPD0DBTyu08pq0kPC0xSNet/qsU07qT6IsX1AS8oO2ICNRY4ldNa8OAI6PuwAH8tG3lxEhbqmyp4Dw4036g==} engines: {node: '>= 0.4'} side-channel-list@1.0.0: @@ -3273,12 +3273,12 @@ packages: undici-types@7.24.6: resolution: {integrity: sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==} - undici@6.28.0: - resolution: {integrity: sha512-LIY910g9TI13YS95lrMFrs8Rm/u/irgHeTWoKCoteeJ04CUJ92eEfj0rVn+7VKMPBpUPiUoBKfhNyLI23EE/KA==} + undici@6.29.1: + resolution: {integrity: sha512-EvRlUt/QqAEvXdQeRMYUfwOQsfzpDztykrG2owGEE/rBOBoYv9uF39ZzsNDh4lTFHhTr2XOZjKkYgueD12ZmGA==} engines: {node: '>=18.17'} - undici@7.29.0: - resolution: {integrity: sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==} + undici@7.30.1: + resolution: {integrity: sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==} engines: {node: '>=20.18.1'} unicode-emoji-modifier-base@1.0.0: @@ -3482,7 +3482,7 @@ snapshots: '@actions/http-client@4.0.1': dependencies: tunnel: 0.0.6 - undici: 6.28.0 + undici: 6.29.1 '@actions/io@3.0.2': {} @@ -4056,7 +4056,7 @@ snapshots: p-filter: 4.1.0 semantic-release: 25.0.5(typescript@6.0.3) tinyglobby: 0.2.16 - undici: 7.29.0 + undici: 7.30.1 url-join: 5.0.0 transitivePeerDependencies: - supports-color @@ -4355,7 +4355,7 @@ snapshots: hosted-git-info: 4.1.0 jsonc-parser: 3.3.1 leven: 3.1.0 - markdown-it: 14.2.0 + markdown-it: 14.3.3 mime: 1.6.0 minimatch: 10.2.5 parse-semver: 1.1.1 @@ -4403,7 +4403,7 @@ snapshots: ajv@8.20.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.7 + fast-uri: 3.1.9 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -4489,16 +4489,16 @@ snapshots: boundary@2.0.0: {} - brace-expansion@1.1.18: + brace-expansion@1.1.21: dependencies: balanced-match: 1.0.2 concat-map: 0.0.1 - brace-expansion@2.1.4: + brace-expansion@2.1.7: dependencies: balanced-match: 1.0.2 - brace-expansion@5.0.9: + brace-expansion@5.0.12: dependencies: balanced-match: 4.0.4 @@ -4592,7 +4592,7 @@ snapshots: parse5: 7.3.0 parse5-htmlparser2-tree-adapter: 7.1.0 parse5-parser-stream: 7.1.2 - undici: 7.29.0 + undici: 7.30.1 whatwg-mimetype: 4.0.0 chokidar@4.0.3: @@ -4701,7 +4701,7 @@ snapshots: dependencies: '@simple-libs/stream-utils': 1.2.0 conventional-commits-filter: 5.0.0 - handlebars: 4.7.9 + handlebars: 4.7.10 meow: 13.2.0 semver: 7.7.4 @@ -5143,7 +5143,7 @@ snapshots: fast-levenshtein@2.0.6: {} - fast-uri@3.1.7: {} + fast-uri@3.1.9: {} fastq@1.20.1: dependencies: @@ -5194,7 +5194,7 @@ snapshots: flatted@3.4.2: {} - follow-redirects@1.16.0: {} + follow-redirects@1.16.1: {} for-each@0.3.5: dependencies: @@ -5339,7 +5339,7 @@ snapshots: graceful-fs@4.2.11: {} - handlebars@4.7.9: + handlebars@4.7.10: dependencies: minimist: 1.2.8 neo-async: 2.6.2 @@ -5837,7 +5837,7 @@ snapshots: dependencies: semver: 7.8.5 - markdown-it@14.2.0: + markdown-it@14.3.3: dependencies: argparse: 2.0.1 entities: 4.5.0 @@ -5897,19 +5897,19 @@ snapshots: minimatch@10.2.5: dependencies: - brace-expansion: 5.0.9 + brace-expansion: 5.0.12 minimatch@10.2.6: dependencies: - brace-expansion: 5.0.9 + brace-expansion: 5.0.12 minimatch@3.1.5: dependencies: - brace-expansion: 1.1.18 + brace-expansion: 1.1.21 minimatch@9.0.9: dependencies: - brace-expansion: 2.1.4 + brace-expansion: 2.1.7 minimist@1.2.8: {} @@ -6013,7 +6013,7 @@ snapshots: minimatch: 3.1.5 pidtree: 0.3.1 read-pkg: 3.0.0 - shell-quote: 1.10.0 + shell-quote: 1.11.0 string.prototype.padend: 3.1.6 npm-run-path@4.0.1: @@ -6099,7 +6099,7 @@ snapshots: dependencies: '@vscode/vsce': 3.9.2 commander: 6.2.1 - follow-redirects: 1.16.0 + follow-redirects: 1.16.1 is-ci: 2.0.0 leven: 3.1.0 semver: 7.8.1 @@ -6547,7 +6547,7 @@ snapshots: shebang-regex@3.0.0: {} - shell-quote@1.10.0: {} + shell-quote@1.11.0: {} side-channel-list@1.0.0: dependencies: @@ -6951,9 +6951,9 @@ snapshots: undici-types@7.24.6: {} - undici@6.28.0: {} + undici@6.29.1: {} - undici@7.29.0: {} + undici@7.30.1: {} unicode-emoji-modifier-base@1.0.0: {}