Skip to content

chore: resolve open dependabot security alerts #580

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jonathannorris merged 2 commits into from
Jul 27, 2026
+24 −103
Merged

chore: resolve open dependabot security alerts #580

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
9765653
chore: resolve open dependabot security alerts
jonathannorris Jul 27, 2026
6e6e8d6
chore: revert sharp bump due to new LGPL-licensed libvips artifact
jonathannorris Jul 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 4 additions & 3 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -167,7 +167,7 @@
"axios@npm:^1.13.6": "^1.18.0",
"axios@npm:^1.6.0": "^1.18.0",
"tmp": "^0.2.6",
"shell-quote": "^1.8.4",
"shell-quote": "^1.9.0",
"yeoman-environment": "^6.0.1",
"uuid@npm:8.0.0": "^11.1.1",
"ip-address": "^10.1.1",
Expand Down Expand Up @@ -198,12 +198,13 @@
"picomatch@npm:^4.0.2": "^4.0.4",
"picomatch@npm:^4.0.3": "^4.0.4",
"hono": "^4.12.25",
"@hono/node-server": "^1.19.13",
"@hono/node-server": "^2.0.5",
"follow-redirects": "^1.16.0",
"vite@npm:^5.0.0 || ^6.0.0 || ^7.0.0-0": "^7.3.2",
"lodash": "^4.18.1",
"postcss": "^8.5.10",
"fast-uri@npm:^3.0.1": "^3.1.2",
"fast-uri@npm:^3.0.1": "^3.1.4",
"sigstore@npm:^1.3.0": "^4.1.1",
"qs@npm:^6.14.0": "^6.15.2",
"qs@npm:^6.14.1": "^6.15.2",
"ws@npm:8.18.0": "^8.20.1",
Expand Down
120 changes: 20 additions & 100 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -542,11 +542,11 @@ __metadata:
linkType: hard

"@emnapi/runtime@npm:^1.7.0":
version: 1.9.0
resolution: "@emnapi/runtime@npm:1.9.0"
version: 1.11.3
resolution: "@emnapi/runtime@npm:1.11.3"
dependencies:
tslib: "npm:^2.4.0"
checksum: 10c0/f825e53b2d3f9d31fd880e669197d006bb5158c3a52ab25f0546f3d52ac58eb539a4bd1dcc378af6c10d202956fa064b28ab7b572a76de58972c0b8656a692ef
checksum: 10c0/a00f1020fefb9d4145c367f93a9fddb383a00da8ffd7871e20b19659890379b83aeecb9f84d7d0eda5456343f4a09eb05b0acb5153b0d3d889539dedb1ed87c3
languageName: node
linkType: hard

Expand Down Expand Up @@ -841,12 +841,12 @@ __metadata:
languageName: node
linkType: hard

"@hono/node-server@npm:^1.19.13":
version: 1.19.14
resolution: "@hono/node-server@npm:1.19.14"
"@hono/node-server@npm:^2.0.5":
version: 2.0.12
resolution: "@hono/node-server@npm:2.0.12"
peerDependencies:
hono: ^4
checksum: 10c0/41a099bb3705d96aac44b7a8db8805f2a22ce8a0f767a27b6d10b74a9964925df01c5f35d3631e882f8bcdeee3518884c30f40588ac8c960d88bf71048ba0df3
checksum: 10c0/c3f56e286ddf81394cab02f74391ebead7d601c1140f2bbcafe24e09b49ceb77519982965b0e069b0c2c9ad1840cba088ac67844a6c98b356f7eedf28801db0d
languageName: node
linkType: hard

Expand Down Expand Up @@ -2269,15 +2269,6 @@ __metadata:
languageName: node
linkType: hard

"@sigstore/bundle@npm:^1.1.0":
version: 1.1.0
resolution: "@sigstore/bundle@npm:1.1.0"
dependencies:
"@sigstore/protobuf-specs": "npm:^0.2.0"
checksum: 10c0/f29af2c59eefceb2c6fb88e6acb31efd7400a46968324ad60c19f054bcac3c16f6e2dfa5162feaeb57e3b1688dcd0b659a9d00ca27bbe7907d472758da15586c
languageName: node
linkType: hard

"@sigstore/bundle@npm:^4.0.0":
version: 4.0.0
resolution: "@sigstore/bundle@npm:4.0.0"
Expand All @@ -2294,31 +2285,13 @@ __metadata:
languageName: node
linkType: hard

"@sigstore/protobuf-specs@npm:^0.2.0":
version: 0.2.1
resolution: "@sigstore/protobuf-specs@npm:0.2.1"
checksum: 10c0/756b3bc64e7f21d966473208cd3920fcde6744025f7deb1d3be1d2b6261b825178b393db7458cd191b2eab947e516eacd6f91aa2f4545d8c045431fb699ac357
languageName: node
linkType: hard

"@sigstore/protobuf-specs@npm:^0.5.0":
version: 0.5.1
resolution: "@sigstore/protobuf-specs@npm:0.5.1"
checksum: 10c0/4284797bcac5f7250b7cb7000a67e76045d38da05a24a5912085b2472e0635efe4db3c6dd118e4023d7ba7ec5adc06cc8c35bf750cf2b39743e73c9f35311fe0
languageName: node
linkType: hard

"@sigstore/sign@npm:^1.0.0":
version: 1.0.0
resolution: "@sigstore/sign@npm:1.0.0"
dependencies:
"@sigstore/bundle": "npm:^1.1.0"
"@sigstore/protobuf-specs": "npm:^0.2.0"
make-fetch-happen: "npm:^11.0.1"
checksum: 10c0/579b4ba31acd662fc9053e6c1e49fda320fa7faf95233d9f7daa87cf198f6f785658fed2791d18d340176f55da300c178c00fcb4871a7d8582df446a09ac6287
languageName: node
linkType: hard

"@sigstore/sign@npm:^4.1.1":
version: 4.1.1
resolution: "@sigstore/sign@npm:4.1.1"
Expand All @@ -2333,16 +2306,6 @@ __metadata:
languageName: node
linkType: hard

"@sigstore/tuf@npm:^1.0.3":
version: 1.0.3
resolution: "@sigstore/tuf@npm:1.0.3"
dependencies:
"@sigstore/protobuf-specs": "npm:^0.2.0"
tuf-js: "npm:^1.1.7"
checksum: 10c0/28abf11f05e12dab0e5d53f09743921e7129519753b3ab79e6cfc2400c80a06bc4f233c430dcd4236f8ca6db1aaf20fdd93999592cef0ea4c08f9731c63d09d4
languageName: node
linkType: hard

"@sigstore/tuf@npm:^4.0.2":
version: 4.0.2
resolution: "@sigstore/tuf@npm:4.0.2"
Expand Down Expand Up @@ -2479,30 +2442,13 @@ __metadata:
languageName: node
linkType: hard

"@tufjs/canonical-json@npm:1.0.0":
version: 1.0.0
resolution: "@tufjs/canonical-json@npm:1.0.0"
checksum: 10c0/6d28fdfa1fe22cc6a3ff41de8bf74c46dee6d4ff00e8a33519d84e060adaaa04bbdaf17fbcd102511fbdd5e4b8d2a67341c9aaf0cd641be1aea386442f4b1e88
languageName: node
linkType: hard

"@tufjs/canonical-json@npm:2.0.0":
version: 2.0.0
resolution: "@tufjs/canonical-json@npm:2.0.0"
checksum: 10c0/52c5ffaef1483ed5c3feedfeba26ca9142fa386eea54464e70ff515bd01c5e04eab05d01eff8c2593291dcaf2397ca7d9c512720e11f52072b04c47a5c279415
languageName: node
linkType: hard

"@tufjs/models@npm:1.0.4":
version: 1.0.4
resolution: "@tufjs/models@npm:1.0.4"
dependencies:
"@tufjs/canonical-json": "npm:1.0.0"
minimatch: "npm:^9.0.0"
checksum: 10c0/99bcfa6ecd642861a21e4874c4a687bb57f7c2ab7e10c6756b576c2fa4a6f2be3d21ba8e76334f11ea2846949b514b10fa59584aaee0a100e09e9263114b635b
languageName: node
linkType: hard

"@tufjs/models@npm:4.1.0":
version: 4.1.0
resolution: "@tufjs/models@npm:4.1.0"
Expand Down Expand Up @@ -5225,10 +5171,10 @@ __metadata:
languageName: node
linkType: hard

"fast-uri@npm:^3.1.2":
version: 3.1.2
resolution: "fast-uri@npm:3.1.2"
checksum: 10c0/5b35641895959f3f7ab7a7b1b5542bded159346f25ec9f256817b206d50b64eda5828e90d605a2e2fc645c90519a7259c2bab2c942ee728c88b88e5be21b090d
"fast-uri@npm:^3.1.4":
version: 3.1.4
resolution: "fast-uri@npm:3.1.4"
checksum: 10c0/f90948821ceb49980f64f89b8216ba498f5957f26035be813526a55b6145d26cbd63ef5618d5205a3292b31edc9c08589749350cd72bd86c7095eb434dceb757
languageName: node
linkType: hard

Expand Down Expand Up @@ -7174,7 +7120,7 @@ __metadata:
languageName: node
linkType: hard

"make-fetch-happen@npm:^11.0.0, make-fetch-happen@npm:^11.0.1, make-fetch-happen@npm:^11.1.1":
"make-fetch-happen@npm:^11.0.0":
version: 11.1.1
resolution: "make-fetch-happen@npm:11.1.1"
dependencies:
Expand Down Expand Up @@ -9405,11 +9351,11 @@ __metadata:
linkType: hard

"semver@npm:^7.7.3":
version: 7.7.4
resolution: "semver@npm:7.7.4"
version: 7.8.5
resolution: "semver@npm:7.8.5"
bin:
semver: bin/semver.js
checksum: 10c0/5215ad0234e2845d4ea5bb9d836d42b03499546ddafb12075566899fc617f68794bb6f146076b6881d755de17d6c6cc73372555879ec7dce2c2feee947866ad2
checksum: 10c0/b1f3127a5be8125a94f37188b361c212466c292c6910adce3ec106cff5dc211ccaedc4739c11bb70fda59d6fc1f040a9bca289f4e093451521a2372e5231fe0c
languageName: node
linkType: hard

Expand Down Expand Up @@ -9572,10 +9518,10 @@ __metadata:
languageName: node
linkType: hard

"shell-quote@npm:^1.8.4":
version: 1.8.4
resolution: "shell-quote@npm:1.8.4"
checksum: 10c0/86c93678bc394cb81f5ddcdc87df9c95d279ef9652775cd1cd1eed361404169a8d8cbaacaeed232ab09919e36ee1e5363863570390d78571f8c22b7f6312fb40
"shell-quote@npm:^1.9.0":
version: 1.10.0
resolution: "shell-quote@npm:1.10.0"
checksum: 10c0/46ee59bfd972ce6a45500c44ed130dff2d0a7d6fbac9841e59d548518cad8060a06393c9a5dcbc0cede294ad80b2a2cd8c904679e09265f53efc0a0879f30961
languageName: node
linkType: hard

Expand Down Expand Up @@ -9673,22 +9619,7 @@ __metadata:
languageName: node
linkType: hard

"sigstore@npm:^1.3.0":
version: 1.9.0
resolution: "sigstore@npm:1.9.0"
dependencies:
"@sigstore/bundle": "npm:^1.1.0"
"@sigstore/protobuf-specs": "npm:^0.2.0"
"@sigstore/sign": "npm:^1.0.0"
"@sigstore/tuf": "npm:^1.0.3"
make-fetch-happen: "npm:^11.0.1"
bin:
sigstore: bin/sigstore.js
checksum: 10c0/64091a95f7a2073ab833bc172aadae0768b84c513a4e3dd3c6f55a1120ea774c293521b7eb6de510dd00562b4351acc2b9295b604c725a9c524fe4f81e4e8203
languageName: node
linkType: hard

"sigstore@npm:^4.0.0":
"sigstore@npm:^4.0.0, sigstore@npm:^4.1.1":
version: 4.1.1
resolution: "sigstore@npm:4.1.1"
dependencies:
Expand Down Expand Up @@ -10338,17 +10269,6 @@ __metadata:
languageName: node
linkType: hard

"tuf-js@npm:^1.1.7":
version: 1.1.7
resolution: "tuf-js@npm:1.1.7"
dependencies:
"@tufjs/models": "npm:1.0.4"
debug: "npm:^4.3.4"
make-fetch-happen: "npm:^11.1.1"
checksum: 10c0/7c4980ada7a55f2670b895e8d9345ef2eec4a471c47f6127543964a12a8b9b69f16002990e01a138cd775aa954880b461186a6eaf7b86633d090425b4273375b
languageName: node
linkType: hard

"tuf-js@npm:^4.1.0":
version: 4.1.0
resolution: "tuf-js@npm:4.1.0"
Expand Down
Loading