From 27a7c1bf5b53805936f220fcd9fb681fa188bd0e Mon Sep 17 00:00:00 2001 From: Jonathan Norris Date: Mon, 10 Aug 2026 14:35:53 -0400 Subject: [PATCH] chore: resolve open dependabot security alerts - js-yaml (4.x) 4.3.0 -> 4.3.1 via markdownlint-cli2, eslint, @redocly/openapi-core, cosmiconfig resolutions (high, alert #284) - js-yaml (3.x) 3.15.0 -> 3.15.1 via gray-matter resolution (high, alert #285) - mermaid 11.15.0 -> 11.16.1 via @docusaurus/theme-mermaid resolution (medium/low, alerts #283, #281, #279, #277, #275) - nanoid 3.3.16 -> 3.3.17 via postcss resolution (high, alert #287) Signed-off-by: Jonathan Norris --- package.json | 13 +++++--- yarn.lock | 93 +++++++++------------------------------------------- 2 files changed, 23 insertions(+), 83 deletions(-) diff --git a/package.json b/package.json index 03738c8b0..4f9b71028 100644 --- a/package.json +++ b/package.json @@ -170,15 +170,18 @@ "uuid": "^14.0.0", "websocket-driver": "^0.7.5", "yaml": "^2.8.3", - "markdownlint-cli2/js-yaml": "^4.3.0", - "js-yaml@npm:^4.1.0": "^4.3.0", - "gray-matter/js-yaml": "^3.15.0", - "@docusaurus/theme-mermaid/mermaid": "^11.15.0", + "markdownlint-cli2/js-yaml": "^4.3.1", + "js-yaml@npm:^4.1.0": "^4.3.1", + "@redocly/openapi-core/js-yaml": "^4.3.1", + "cosmiconfig/js-yaml": "^4.3.1", + "gray-matter/js-yaml": "^3.15.1", + "@docusaurus/theme-mermaid/mermaid": "^11.16.1", "ws": "^8.20.1", "styled-components/postcss": "^8.5.10", "webpack": "5.104.1", "fast-uri": ">=3.1.2", "@babel/plugin-transform-modules-systemjs": ">=7.29.4", - "ip-address": "^10.3.1" + "ip-address": "^10.3.1", + "nanoid": "^3.3.17" } } diff --git a/yarn.lock b/yarn.lock index 5f7b7de27..ac3890b7c 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1816,14 +1816,14 @@ __metadata: languageName: node linkType: hard -"@braintree/sanitize-url@npm:^7.1.1, @braintree/sanitize-url@npm:^7.1.2": +"@braintree/sanitize-url@npm:^7.1.2": version: 7.1.2 resolution: "@braintree/sanitize-url@npm:7.1.2" checksum: 10c0/62f2aa0cf58626e3880b2dc1025c42064b4639abd157ae4e1c35f4c2f5031e9273772046a423979845069c814e27ff818e8e669280dc53585e6f033d5b7a59cb languageName: node linkType: hard -"@chevrotain/types@npm:~11.1.1, @chevrotain/types@npm:~11.1.2": +"@chevrotain/types@npm:~11.1.2": version: 11.1.2 resolution: "@chevrotain/types@npm:11.1.2" checksum: 10c0/c0c4679a3d407df34e18d5adfa7ac599b4a2bfddbf68da6e43678b9b3e16ab911de7766b37b9fc466261c3dead3db1b620e2e344f800fa9f0f381720475eda8f @@ -3765,15 +3765,6 @@ __metadata: languageName: node linkType: hard -"@mermaid-js/parser@npm:^1.1.1": - version: 1.1.1 - resolution: "@mermaid-js/parser@npm:1.1.1" - dependencies: - "@chevrotain/types": "npm:~11.1.1" - checksum: 10c0/66414d9d66f3a86a6751427cb8890a00beaaee2b7eba34c21b34b60cdaf9237d21e9b50b9bf1f560a01a600ee332d33b949fd8f12cbda3238aba50edc0dfdf15 - languageName: node - linkType: hard - "@mermaid-js/parser@npm:^1.2.0": version: 1.2.0 resolution: "@mermaid-js/parser@npm:1.2.0" @@ -7740,13 +7731,6 @@ __metadata: languageName: node linkType: hard -"cytoscape@npm:^3.33.1": - version: 3.33.3 - resolution: "cytoscape@npm:3.33.3" - checksum: 10c0/f0d01f682d3e443cbeea9aa294ccd6934442362df3ce259e7b0fe3b9a8ce534d901840c503db8b53da814542bc1508f7f14a69e4fe725f919c25483a7200efe7 - languageName: node - linkType: hard - "cytoscape@npm:^3.33.3": version: 3.34.0 resolution: "cytoscape@npm:3.34.0" @@ -8150,13 +8134,6 @@ __metadata: languageName: node linkType: hard -"dayjs@npm:^1.11.19": - version: 1.11.20 - resolution: "dayjs@npm:1.11.20" - checksum: 10c0/8af525e2aa100c8db9923d706c42b2b2d30579faf89456619413a5c10916efc92c2b166e193c27c02eb3174b30aa440ee1e7b72b0a2876b3da651d204db848a0 - languageName: node - linkType: hard - "dayjs@npm:^1.11.20": version: 1.11.21 resolution: "dayjs@npm:1.11.21" @@ -11827,26 +11804,26 @@ __metadata: languageName: node linkType: hard -"js-yaml@npm:^3.15.0": - version: 3.15.0 - resolution: "js-yaml@npm:3.15.0" +"js-yaml@npm:^3.15.1": + version: 3.15.1 + resolution: "js-yaml@npm:3.15.1" dependencies: argparse: "npm:^1.0.7" esprima: "npm:^4.0.0" bin: js-yaml: bin/js-yaml.js - checksum: 10c0/ca966bd354ac5b1b7a4694ebdba46526796aa3a6a99529fa540af2abf85918bd155a50ccc0166b413130a00622999973754458ec01e7095bc902177bfdbd5b64 + checksum: 10c0/6c693b8c59ffe12021df3b36994b090df19d920826dd810baab81652b40861e1974509dd11fe92225ab4c00cc14de053300c94db015c2c0e211edea39b118737 languageName: node linkType: hard -"js-yaml@npm:^4.3.0": - version: 4.3.0 - resolution: "js-yaml@npm:4.3.0" +"js-yaml@npm:^4.3.1": + version: 4.3.1 + resolution: "js-yaml@npm:4.3.1" dependencies: argparse: "npm:^2.0.1" bin: js-yaml: bin/js-yaml.js - checksum: 10c0/058b30473d6915ca5b4feb11e2f7d4d97242f98d00a798ed48dd90b46b7c640398afe9128c5db22c5300f8c6528fe2a174b9a93f351a70ebc28c6203938d8bff + checksum: 10c0/13c500ca322e0c3f8c81686e6ecda96d2ea37b45247a420c17c7db36932d6965cc27391abc2d1a104501600e7f0d947a5f8b7be6db619c4fefa87901b3512807 languageName: node linkType: hard @@ -11970,17 +11947,6 @@ __metadata: languageName: node linkType: hard -"katex@npm:^0.16.25": - version: 0.16.45 - resolution: "katex@npm:0.16.45" - dependencies: - commander: "npm:^8.3.0" - bin: - katex: cli.js - checksum: 10c0/f715eb9a73daff68ac14dcc8c2f47f02f5fc756a74077d22479e64e06872b2b44f0d81f1c91a98a9873722a08841388a869a0b9ddb96b224362eb8054ddf533a - languageName: node - linkType: hard - "katex@npm:^0.16.45": version: 0.16.47 resolution: "katex@npm:0.16.47" @@ -12762,7 +12728,7 @@ __metadata: languageName: node linkType: hard -"mermaid@npm:11.16.1": +"mermaid@npm:11.16.1, mermaid@npm:^11.16.1": version: 11.16.1 resolution: "mermaid@npm:11.16.1" dependencies: @@ -12791,35 +12757,6 @@ __metadata: languageName: node linkType: hard -"mermaid@npm:^11.15.0": - version: 11.15.0 - resolution: "mermaid@npm:11.15.0" - dependencies: - "@braintree/sanitize-url": "npm:^7.1.1" - "@iconify/utils": "npm:^3.0.2" - "@mermaid-js/parser": "npm:^1.1.1" - "@types/d3": "npm:^7.4.3" - "@upsetjs/venn.js": "npm:^2.0.0" - cytoscape: "npm:^3.33.1" - cytoscape-cose-bilkent: "npm:^4.1.0" - cytoscape-fcose: "npm:^2.2.0" - d3: "npm:^7.9.0" - d3-sankey: "npm:^0.12.3" - dagre-d3-es: "npm:7.0.14" - dayjs: "npm:^1.11.19" - dompurify: "npm:^3.3.1" - es-toolkit: "npm:^1.45.1" - katex: "npm:^0.16.25" - khroma: "npm:^2.1.0" - marked: "npm:^16.3.0" - roughjs: "npm:^4.6.6" - stylis: "npm:^4.3.6" - ts-dedent: "npm:^2.2.0" - uuid: "npm:^11.1.0 || ^12 || ^13 || ^14.0.0" - checksum: 10c0/9085b47c30b66a1e94e07c93951d9e53e5c89ec8c9fff8814233bddeecf6b8eaf9036d3168e4d1360c3f5d07cd051c666da96860eb0f22f064bd749499a0c83f - languageName: node - linkType: hard - "methods@npm:~1.1.2": version: 1.1.2 resolution: "methods@npm:1.1.2" @@ -13723,12 +13660,12 @@ __metadata: languageName: node linkType: hard -"nanoid@npm:^3.3.16": - version: 3.3.16 - resolution: "nanoid@npm:3.3.16" +"nanoid@npm:^3.3.17": + version: 3.3.18 + resolution: "nanoid@npm:3.3.18" bin: nanoid: bin/nanoid.cjs - checksum: 10c0/bbf2dcffe22d2b62d16de2711752070b539c0f644c7916f823ad6521986b2078cbe524f2d6240f58c46e9141ea0c7b87a029e100c0f7f175228cacaf30e41bba + checksum: 10c0/b994b4e396730f8be2520923284e2040d61eaee55cc6d4935ef6d38d34bafdc46133eda4d3faea5073bda545aa6079d82b886caeac5c731cf9ac18bcc1301425 languageName: node linkType: hard