From ab7f796b29073130b5b431600e54c7249b5f127b Mon Sep 17 00:00:00 2001 From: Arshavir Ter-Gabrielyan Date: Fri, 3 Apr 2026 13:22:52 +0200 Subject: [PATCH] chore(deps): fix high-priority Dependabot alerts MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bump direct dependencies and add override for transitive dep: - playwright 1.49.1 → 1.55.1 in docs (high, #117/#118) - validator 13.12.0 → 13.15.35 in apps/wallet (high, #152/#153; also fixes medium #122/#123) - axios <1.8.2 → ^1.8.2 via pnpm override (high, #70) Co-Authored-By: Claude Opus 4.6 --- apps/wallet/package.json | 2 +- docs/package.json | 2 +- package.json | 3 +- pnpm-lock.yaml | 78 ++++++++++++++++++++-------------------- 4 files changed, 44 insertions(+), 41 deletions(-) diff --git a/apps/wallet/package.json b/apps/wallet/package.json index 4bc12927d..42a5aac4a 100644 --- a/apps/wallet/package.json +++ b/apps/wallet/package.json @@ -38,7 +38,7 @@ "fflate": "^0.8.2", "pinia": "2.1.7", "pino": "9.1.0", - "validator": "13.12.0", + "validator": "13.15.35", "vue": "3.5.13", "vue-i18n": "9.14.3", "vue-router": "4.3.2", diff --git a/docs/package.json b/docs/package.json index ec455aad5..c91749d90 100644 --- a/docs/package.json +++ b/docs/package.json @@ -26,7 +26,7 @@ "dependencies": { "@astrojs/starlight": "0.31.1", "astro": "5.18.1", - "playwright": "1.49.1", + "playwright": "1.55.1", "rehype-mermaid": "3.0.0", "sharp": "0.33.5" } diff --git a/package.json b/package.json index 0cf3f3e9a..0b832de98 100644 --- a/package.json +++ b/package.json @@ -45,7 +45,8 @@ "lodash-es@<4.18.0": "^4.18.1", "brace-expansion@^1": "1.1.13", "brace-expansion@^2": "2.0.3", - "lodash@<4.18.0": "^4.18.1" + "lodash@<4.18.0": "^4.18.1", + "axios@<1.8.2": "^1.8.2" } }, "devDependencies": { diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index fc0e770b9..52c65b0c8 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -24,6 +24,7 @@ overrides: brace-expansion@^1: 1.1.13 brace-expansion@^2: 2.0.3 lodash@<4.18.0: ^4.18.1 + axios@<1.8.2: ^1.8.2 importers: @@ -159,8 +160,8 @@ importers: specifier: 9.1.0 version: 9.1.0 validator: - specifier: 13.12.0 - version: 13.12.0 + specifier: 13.15.35 + version: 13.15.35 vue: specifier: 3.5.13 version: 3.5.13(typescript@5.6.2) @@ -232,11 +233,11 @@ importers: specifier: 5.18.1 version: 5.18.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(rollup@4.60.0)(sass@1.77.1)(typescript@5.6.2)(yaml@2.8.3) playwright: - specifier: 1.49.1 - version: 1.49.1 + specifier: 1.55.1 + version: 1.55.1 rehype-mermaid: specifier: 3.0.0 - version: 3.0.0(playwright@1.49.1) + version: 3.0.0(playwright@1.55.1) sharp: specifier: 0.33.5 version: 0.33.5 @@ -3210,8 +3211,8 @@ packages: resolution: {integrity: sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ==} engines: {node: '>=8.0.0'} - axios@1.7.9: - resolution: {integrity: sha512-LhLcE7Hbiryz8oMDdDptSrWowmB4Bl6RCt6sIJKpRB4XtVf0iEgewX3au/pJqm+Py1kCASkb/FFKjxQaLtxJvw==} + axios@1.14.0: + resolution: {integrity: sha512-3Y8yrqLSwjuzpXuZ0oIYZ/XGgLwUIBU3uLvbcpb0pidD9ctpShJd43KSlEEkVQg6DS0G9NKyzOvBfUtDKEyHvQ==} axobject-query@4.1.0: resolution: {integrity: sha512-qIj0G9wZbMGNLjLmg1PT6v2mE9AH2zlnADJD/2tC6E00hgmhUOfEB6greHPAfLRSufHqROIUTkw6E+M3lH0PTQ==} @@ -4249,8 +4250,8 @@ packages: resolution: {integrity: sha512-9UbaD6XdAL97+k/n+N7JwX46K/M6Zc6KcFYskrYL8wbBV/Uyk0CTAMY0VT+qiK5PM7AIc9aTWYtq65U7T+aCNQ==} engines: {node: '>=8'} - follow-redirects@1.15.9: - resolution: {integrity: sha512-gew4GsXizNgdoRyqmyfMHyAmXsZDk6mHkSxZFCzW9gwlbtOW44CDtYavM+y+72qD/Vq2l550kMF52DT8fOLJqQ==} + follow-redirects@1.15.11: + resolution: {integrity: sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ==} engines: {node: '>=4.0'} peerDependencies: debug: '*' @@ -5531,18 +5532,13 @@ packages: pkg-types@1.2.1: resolution: {integrity: sha512-sQoqa8alT3nHjGuTjuKgOnvjo4cljkufdtLMnO2LBP/wRwuDlo1tkaEdMxCRhyGRPacv/ztlZgDPm2b7FAmEvw==} - playwright-core@1.49.1: - resolution: {integrity: sha512-BzmpVcs4kE2CH15rWfzpjzVGhWERJfmnXmniSyKeRZUs9Ws65m+RGIi7mjJK/euCegfn3i7jvqWeWyHe9y3Vgg==} - engines: {node: '>=18'} - hasBin: true - playwright-core@1.52.0: resolution: {integrity: sha512-l2osTgLXSMeuLZOML9qYODUQoPPnUsKsb5/P6LJ2e6uPKXUdPK5WYhN4z03G+YNbWmGDY4YENauNu4ZKczreHg==} engines: {node: '>=18'} hasBin: true - playwright@1.49.1: - resolution: {integrity: sha512-VYL8zLoNTBxVOrJBbDuRgDWa3i+mfQgDTrL8Ah9QXZ7ax4Dsj0MSq5bYgytRnDVVe+njoKnfsYkH3HzqVj5UZA==} + playwright-core@1.55.1: + resolution: {integrity: sha512-Z6Mh9mkwX+zxSlHqdr5AOcJnfp+xUWLCt9uKV18fhzA8eyxUd8NUWzAjxUh55RZKSYwDGX0cfaySdhZJGMoJ+w==} engines: {node: '>=18'} hasBin: true @@ -5551,6 +5547,11 @@ packages: engines: {node: '>=18'} hasBin: true + playwright@1.55.1: + resolution: {integrity: sha512-cJW4Xd/G3v5ovXtJJ52MAOclqeac9S/aGGgRzLabuF8TnIb6xHvMzKIa6JmrRzUkeXJgfL1MhukP0NK6l39h3A==} + engines: {node: '>=18'} + hasBin: true + points-on-curve@0.2.0: resolution: {integrity: sha512-0mYKnYYe9ZcqMCWhUjItv/oHjvgEsfKvnUTg8sAtnHr3GVy7rGkXCb6d5cSyqrWqL4k81b9CPg3urd+T7aop3A==} @@ -5644,8 +5645,9 @@ packages: proto-list@1.2.4: resolution: {integrity: sha512-vtK/94akxsTMhe0/cbfpR+syPuszcuwhqVjJq26CuNDgFGj682oRBXOP5MJpv2r7JtE8MsiepGIqvvOTBwn2vA==} - proxy-from-env@1.1.0: - resolution: {integrity: sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==} + proxy-from-env@2.1.0: + resolution: {integrity: sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==} + engines: {node: '>=10'} psl@1.9.0: resolution: {integrity: sha512-E/ZsdU4HLs/68gYzgGTkMicWTLPdAftJLfJFlLUAAKZGkStNU72sZjT66SnMDVOfOWY/YAoiD7Jxa9iHvngcag==} @@ -6468,8 +6470,8 @@ packages: resolution: {integrity: sha512-OljLrQ9SQdOUqTaQxqL5dEfZWrXExyyWsozYlAWFawPVNuD83igl7uJD2RTkNMbniIYgt8l81eCJGIdQF7avLQ==} engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0} - validator@13.12.0: - resolution: {integrity: sha512-c1Q0mCiPlgdTVVVIJIrBuxNicYE+t/7oKeI9MWLj3fh/uq2Pxh/3eeWbVZ4OcGW1TUf53At0njHw5SMdA3tmMg==} + validator@13.15.35: + resolution: {integrity: sha512-TQ5pAGhd5whStmqWvYF4OjQROlmv9SMFVt37qoCBdqRffuuklWYQlCNnEs2ZaIBD1kZRNnikiZOS1eqgkar0iw==} engines: {node: '>= 0.10'} vfile-location@5.0.3: @@ -10099,11 +10101,11 @@ snapshots: atomic-sleep@1.0.0: {} - axios@1.7.9: + axios@1.14.0: dependencies: - follow-redirects: 1.15.9 + follow-redirects: 1.15.11 form-data: 4.0.5 - proxy-from-env: 1.1.0 + proxy-from-env: 2.1.0 transitivePeerDependencies: - debug @@ -11311,7 +11313,7 @@ snapshots: flattie@1.1.1: {} - follow-redirects@1.15.9: {} + follow-redirects@1.15.11: {} fontace@0.4.1: dependencies: @@ -12360,12 +12362,12 @@ snapshots: merge2@1.4.1: {} - mermaid-isomorphic@3.0.0(playwright@1.49.1): + mermaid-isomorphic@3.0.0(playwright@1.55.1): dependencies: '@fortawesome/fontawesome-free': 6.7.2 mermaid: 11.4.1 optionalDependencies: - playwright: 1.49.1 + playwright: 1.55.1 transitivePeerDependencies: - supports-color @@ -12807,7 +12809,7 @@ snapshots: '@yarnpkg/lockfile': 1.1.0 '@yarnpkg/parsers': 3.0.0-rc.46 '@zkochan/js-yaml': 0.0.7 - axios: 1.7.9 + axios: 1.14.0 chalk: 4.1.2 cli-cursor: 3.1.0 cli-spinners: 2.6.1 @@ -13078,19 +13080,19 @@ snapshots: mlly: 1.7.3 pathe: 1.1.2 - playwright-core@1.49.1: {} - playwright-core@1.52.0: {} - playwright@1.49.1: + playwright-core@1.55.1: {} + + playwright@1.52.0: dependencies: - playwright-core: 1.49.1 + playwright-core: 1.52.0 optionalDependencies: fsevents: 2.3.2 - playwright@1.52.0: + playwright@1.55.1: dependencies: - playwright-core: 1.52.0 + playwright-core: 1.55.1 optionalDependencies: fsevents: 2.3.2 @@ -13173,7 +13175,7 @@ snapshots: proto-list@1.2.4: {} - proxy-from-env@1.1.0: {} + proxy-from-env@2.1.0: {} psl@1.9.0: {} @@ -13307,19 +13309,19 @@ snapshots: '@types/hast': 3.0.4 hast-util-format: 1.1.0 - rehype-mermaid@3.0.0(playwright@1.49.1): + rehype-mermaid@3.0.0(playwright@1.55.1): dependencies: '@types/hast': 3.0.4 hast-util-from-html-isomorphic: 2.0.0 hast-util-to-text: 4.0.2 - mermaid-isomorphic: 3.0.0(playwright@1.49.1) + mermaid-isomorphic: 3.0.0(playwright@1.55.1) mini-svg-data-uri: 1.4.4 space-separated-tokens: 2.0.2 unified: 11.0.5 unist-util-visit-parents: 6.0.1 vfile: 6.0.3 optionalDependencies: - playwright: 1.49.1 + playwright: 1.55.1 transitivePeerDependencies: - supports-color @@ -14126,7 +14128,7 @@ snapshots: validate-npm-package-name@5.0.1: {} - validator@13.12.0: {} + validator@13.15.35: {} vfile-location@5.0.3: dependencies: