fix(deps): update vulnerable transitive packages (#21652)

This commit is contained in:
Neil
2026-09-19 03:19:06 -07:00
committed by GitHub
parent 62903b7cf6
commit dcee2c5df3
4 changed files with 42 additions and 53 deletions
+6 -2
View File
@@ -50,9 +50,13 @@
"overrides": {
"@vercel/fun>tar": "7.5.22",
"@vercel/fun>@tootallnate/once": "2.0.1",
"@vercel/node>undici": "5.29.0",
"@vercel/node>undici": "6.28.0",
"@vercel/python-analysis>js-yaml": "4.3.2",
"@vercel/python-analysis>minimatch": "10.2.6"
"@vercel/python-analysis>minimatch": "10.2.6",
"vercel>smol-toml": "1.8.0",
"vercel>undici": "6.28.0",
"@vercel/python-analysis>smol-toml": "1.8.0",
"@vercel/rust>smol-toml": "1.8.0"
}
}
}
+13 -23
View File
@@ -7,9 +7,13 @@ settings:
overrides:
'@vercel/fun>tar': 7.5.22
'@vercel/fun>@tootallnate/once': 2.0.1
'@vercel/node>undici': 5.29.0
'@vercel/node>undici': 6.28.0
'@vercel/python-analysis>js-yaml': 4.3.2
'@vercel/python-analysis>minimatch': 10.2.6
vercel>smol-toml: 1.8.0
vercel>undici: 6.28.0
'@vercel/python-analysis>smol-toml': 1.8.0
'@vercel/rust>smol-toml': 1.8.0
importers:
@@ -544,10 +548,6 @@ packages:
resolution: {integrity: sha512-43/qtrDUokr7LJqoF2c3+RInu/t4zfrpYdoSDfYyhg52rwLV6TnOvdG4fXm7IkSB3wErkcmJS9iEhjVtOSEjjA==}
engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
'@fastify/busboy@2.1.1':
resolution: {integrity: sha512-vBZP4NlzfOlerQTnba4aqZoMhE/a9HY7HRqoOPaETQcSQuWEIyZMHGfVu6w9wGtGK5fED5qRs2DteVCjOH60sA==}
engines: {node: '>=14'}
'@floating-ui/core@1.8.0':
resolution: {integrity: sha512-0CIZ5itps/8x7BG8dEIhs53BvCUH2PCoogtakwRTut+Arm58sJooJ0AuZhLw2HJYIR5cMLNPBSS728sPho2khQ==}
@@ -4302,8 +4302,8 @@ packages:
resolution: {integrity: sha512-MY2/qGx4enyjprQnFaZsHib3Yadh3IXyV2C321GY0pjGfVBu4un0uDJkwgdxqO+Rdx8JMT8IfJIRwbYVz3Ob3Q==}
engines: {node: '>=14'}
smol-toml@1.5.2:
resolution: {integrity: sha512-QlaZEqcAH3/RtNyet1IPIYPsEWAaYyXXv1Krsi+1L/QHppjX4Ifm8MQsBISz9vE8cHicIq3clogsheili5vhaQ==}
smol-toml@1.8.0:
resolution: {integrity: sha512-kCZr2V3ch9i00x8zXRhjUNVcjG9ijES5dDudkXvUVCT5QlJNQWElSJdZqyPemffHoLNUYwOcou0Fy+ojN0uHSQ==}
engines: {node: '>= 18'}
source-map-js@1.2.1:
@@ -4542,10 +4542,6 @@ packages:
undici-types@6.21.0:
resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
undici@5.29.0:
resolution: {integrity: sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==}
engines: {node: '>=14.0'}
undici@6.28.0:
resolution: {integrity: sha512-LIY910g9TI13YS95lrMFrs8Rm/u/irgHeTWoKCoteeJ04CUJ92eEfj0rVn+7VKMPBpUPiUoBKfhNyLI23EE/KA==}
engines: {node: '>=18.17'}
@@ -5090,8 +5086,6 @@ snapshots:
'@eslint/core': 0.17.0
levn: 0.4.1
'@fastify/busboy@2.1.1': {}
'@floating-ui/core@1.8.0':
dependencies:
'@floating-ui/utils': 0.2.12
@@ -6574,7 +6568,7 @@ snapshots:
ts-morph: 12.0.0
tsx: 4.21.0
typescript: 5.9.3
undici: 5.29.0
undici: 6.28.0
transitivePeerDependencies:
- '@emnapi/core'
- '@emnapi/runtime'
@@ -6599,7 +6593,7 @@ snapshots:
fs-extra: 11.1.1
js-yaml: 4.3.2
minimatch: 10.2.6
smol-toml: 1.5.2
smol-toml: 1.8.0
zod: 3.22.4
'@vercel/python@13.0.0(@vercel/build-utils@14.9.0)':
@@ -6646,7 +6640,7 @@ snapshots:
'@vercel/build-utils': 14.9.0
execa: 5.1.1
get-port: 5.1.1
smol-toml: 1.5.2
smol-toml: 1.8.0
'@vercel/sandbox@3.1.0':
dependencies:
@@ -9486,7 +9480,7 @@ snapshots:
signal-exit@4.0.2: {}
smol-toml@1.5.2: {}
smol-toml@1.8.0: {}
source-map-js@1.2.1: {}
@@ -9759,10 +9753,6 @@ snapshots:
undici-types@6.21.0: {}
undici@5.29.0:
dependencies:
'@fastify/busboy': 2.1.1
undici@6.28.0: {}
undici@7.29.0: {}
@@ -9902,8 +9892,8 @@ snapshots:
jsonc-parser: 3.3.1
luxon: 3.7.2
sandbox: 4.1.0
smol-toml: 1.5.2
undici: 5.29.0
smol-toml: 1.8.0
undici: 6.28.0
uuid: 14.0.1
zod: 4.1.11
optionalDependencies:
+22 -28
View File
@@ -6,6 +6,7 @@ settings:
overrides:
xcode>uuid: 11.1.1
query-string: 9.5.1
patchedDependencies:
expo-notifications@55.0.27:
@@ -3839,9 +3840,9 @@ packages:
decimal.js@10.6.0:
resolution: {integrity: sha512-YpgQiITW3JXGntzdUmyUR1V812Hn8T1YVXhCu+wO3OpS4eU9l4YdD3qjyiKdV6mvV29zapkMeD390UVEf2lkUg==}
decode-uri-component@0.2.2:
resolution: {integrity: sha512-FqUYQ+8o158GyGTrMFJms9qh3CqTKvAqgqsTnkLI8sKu0028orqBhxNMFkFen0zGyg6epACD32pjVk58ngIErQ==}
engines: {node: '>=0.10'}
decode-uri-component@0.5.0:
resolution: {integrity: sha512-1BiQVoK8C9gUbQU6NzAtO/tkz2qOFpEObMWpcFvhx4fYnj4Oc5yzaJN/LD36ihkVUdXyh5ZekzX+yM+ty/SrPg==}
engines: {node: '>=14.16'}
dedent@1.7.2:
resolution: {integrity: sha512-WzMx3mW98SN+zn3hgemf4OzdmyNhhhKz5Ay0pUfQiMQ3e1g+xmTJWp/pKdwKVXhdSkAEGIIzqeuWrL3mV/AXbA==}
@@ -4565,9 +4566,9 @@ packages:
resolution: {integrity: sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==}
engines: {node: '>=8'}
filter-obj@1.1.0:
resolution: {integrity: sha512-8rXg1ZnX7xzy2NGDVkBVaAy+lSlPNwad13BtgSlLuxfIslyt5Vg64U7tFcCt4WS1R0hvtnQybT/IyCkGZ3DpXQ==}
engines: {node: '>=0.10.0'}
filter-obj@5.1.0:
resolution: {integrity: sha512-qWeTREPoT7I0bifpPUXtxkZJ1XJzxWtfoWWkdVGqa+eCr3SHW/Ocp89o8vLvbUuQnadybJpjOKu4V+RwO6sGng==}
engines: {node: '>=14.16'}
finalhandler@1.1.2:
resolution: {integrity: sha512-aAWcW57uxVNrQZqFXjITpW3sIUQmHGG3qSb9mUah9MgMC4NeWhNOlNjXEYq3HjRAvL6arUviZGGJsBg6z0zsWA==}
@@ -6014,9 +6015,9 @@ packages:
pure-rand@6.1.0:
resolution: {integrity: sha512-bVWawvoZoBYpp6yIoQtQXHZjmz35RSVHnUOTefl8Vcjr8snTPY1wnpSPMWekcFwbxI6gtmT7rSYPFvz71ldiOA==}
query-string@7.1.3:
resolution: {integrity: sha512-hh2WYhq4fi8+b+/2Kg9CEge4fDPvHS534aOOvOZeQ3+Vf2mCFsaFBYj0i+iXcAq6I9Vzp5fjMFBlONvayDC1qg==}
engines: {node: '>=6'}
query-string@9.5.1:
resolution: {integrity: sha512-/zO3RwuRCMTIcEgq6YMv4OrtEE1XzBG7w5N6zc6ydYnkWYOWsnLI/5894hYEzfESfMOT4cHCsRTIdxsSl1KjGg==}
engines: {node: '>=18'}
querystringify@2.2.0:
resolution: {integrity: sha512-FIqgj2EUvTa7R50u0rGsyTftzjYmv/a3hO345bZNrqabNqjtgiDMgmo4mkUjd+nzU5oF3dClKqFIPUKybUyqoQ==}
@@ -6452,9 +6453,9 @@ packages:
resolution: {integrity: sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==}
engines: {node: '>=0.10.0'}
split-on-first@1.1.0:
resolution: {integrity: sha512-43ZssAJaMusuKWL8sKUBQXHWOpq8d6CfN/u1p4gUzfJkM05C8rxTmYrkIPTXapZpORA6LkkzcUulJ8FqA7Uudw==}
engines: {node: '>=6'}
split-on-first@3.0.0:
resolution: {integrity: sha512-qxQJTx2ryR0Dw0ITYyekNQWpz6f8dGd7vffGNflQQ3Iqj9NJ6qiZ7ELpZsJ/QBhIVAiDfXdag3+Gp8RvWa62AA==}
engines: {node: '>=12'}
sprintf-js@1.0.3:
resolution: {integrity: sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==}
@@ -6501,10 +6502,6 @@ packages:
resolution: {integrity: sha512-uyQK/mx5QjHun80FLJTfaWE7JtwfRMKBLkMne6udYOmvH0CawotVa7TfgYHzAnpphn4+TweIx1QKMnRIbipmUg==}
engines: {node: '>= 0.10.0'}
strict-uri-encode@2.0.0:
resolution: {integrity: sha512-QwiXZgpRcKkhTj2Scnn++4PKtWsH0kpzZ62L2R6c/LUVYv7hVnZqcg2+sMuT6R7Jusu1vviK/MFsu6kNJfWlEQ==}
engines: {node: '>=4'}
strictdom@1.0.1:
resolution: {integrity: sha512-cEmp9QeXXRmjj/rVp9oyiqcvyocWab/HaoN4+bwFeZ7QzykJD6L3yD4v12K1x0tHpqRqVpJevN3gW7kyM39Bqg==}
@@ -9969,7 +9966,7 @@ snapshots:
escape-string-regexp: 4.0.0
fast-deep-equal: 3.1.3
nanoid: 3.3.18
query-string: 7.1.3
query-string: 9.5.1
react: 19.2.8
react-is: 19.2.6
use-latest-callback: 0.2.6(react@19.2.8)
@@ -11422,7 +11419,7 @@ snapshots:
decimal.js@10.6.0: {}
decode-uri-component@0.2.2: {}
decode-uri-component@0.5.0: {}
dedent@1.7.2: {}
@@ -12233,7 +12230,7 @@ snapshots:
fast-deep-equal: 3.1.3
invariant: 2.2.4
nanoid: 3.3.18
query-string: 7.1.3
query-string: 9.5.1
react: 19.2.8
react-fast-compare: 3.2.2
react-native: 0.83.10(patch_hash=44876634a8efbb0f2c3f66cd4332be170ec821d1cbfc0264ac80680983e8513d)(@babel/core@7.29.7)(@react-native/metro-config@0.85.2(@babel/core@7.29.7))(@types/react@19.2.14)(react@19.2.8)
@@ -12389,7 +12386,7 @@ snapshots:
dependencies:
to-regex-range: 5.0.1
filter-obj@1.1.0: {}
filter-obj@5.1.0: {}
finalhandler@1.1.2:
dependencies:
@@ -14286,12 +14283,11 @@ snapshots:
pure-rand@6.1.0: {}
query-string@7.1.3:
query-string@9.5.1:
dependencies:
decode-uri-component: 0.2.2
filter-obj: 1.1.0
split-on-first: 1.1.0
strict-uri-encode: 2.0.0
decode-uri-component: 0.5.0
filter-obj: 5.1.0
split-on-first: 3.0.0
querystringify@2.2.0: {}
@@ -14815,7 +14811,7 @@ snapshots:
source-map@0.6.1: {}
split-on-first@1.1.0: {}
split-on-first@3.0.0: {}
sprintf-js@1.0.3: {}
@@ -14859,8 +14855,6 @@ snapshots:
stream-buffers@2.2.0: {}
strict-uri-encode@2.0.0: {}
strictdom@1.0.1: {}
string-length@4.0.2:
+1
View File
@@ -5,6 +5,7 @@ minimumReleaseAge: 4320
overrides:
xcode>uuid: 11.1.1
query-string: 9.5.1
patchedDependencies:
expo-notifications@55.0.27: patches/expo-notifications@55.0.27.patch