Merge pull request #1063 from MBombeck/fix/dev-deps-advisories

Raise the dev-only grpc-js, brace-expansion and undici 7 floors
This commit is contained in:
Marc-André Bombeck authored and GitHub committed 2026-09-30 23:15:59 +02:00
commit 70ce666d00
2 files changed
+36 -22

No files matched your search

+27 -22
View File
@@ -27,6 +27,11 @@ overrides:
valibot@<1.4.2: ^1.4.2
'@humanfs/node@<0.16.8': ^0.16.8
esbuild@>=0.27.3 <0.28.1: ^0.28.1
'@grpc/grpc-js@>=1.14.0 <1.14.5': ^1.14.5
brace-expansion@<1.1.21: ^1.1.21
brace-expansion@>=2.0.0 <2.1.7: ^2.1.7
brace-expansion@>=4.0.0 <5.0.12: ^5.0.12
undici@>=7.0.0 <7.29.1: ^7.29.1
importers:
@@ -679,8 +684,8 @@ packages:
'@floating-ui/utils@0.2.12':
resolution: {integrity: sha512-HpCo8tmWzLVad5s2d19EhAz5zqrrQ6s69qd6moPMQvkOuSwDT1YgRfWSVuc4ennqrgv3OHppiOGMQ7oC13yIww==}
'@grpc/grpc-js@1.14.4':
resolution: {integrity: sha512-k9Dj3DV/itK9D06Y8f190Qgop7/Ui+D0njFV3LHMPwPT75DpXLQohE9Wmz0QElrJnzsjB7KPWiKJbOl7IPDArQ==}
'@grpc/grpc-js@1.14.5':
resolution: {integrity: sha512-7VZM+SVdEcUUqSQeNI3zM8Qs/BhQKZndPo2h5VkYkAM8Iz0wJIa8mKV5ekQGqG8UUsnkQ0NMxIxwkIHYvj0qOw==}
engines: {node: '>=12.10.0'}
'@grpc/proto-loader@0.7.15':
@@ -3525,14 +3530,14 @@ packages:
bowser@2.14.1:
resolution: {integrity: sha512-tzPjzCxygAKWFOJP011oxFHs57HzIhOEracIgAePE4pqB3LikALKnSzUyU4MGs9/iCEUuHlAJTjTc5M+u7YEGg==}
brace-expansion@1.1.18:
resolution: {integrity: sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==}
brace-expansion@1.1.21:
resolution: {integrity: sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==}
brace-expansion@2.1.4:
resolution: {integrity: sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==}
brace-expansion@2.1.7:
resolution: {integrity: sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==}
brace-expansion@5.0.9:
resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==}
brace-expansion@5.0.12:
resolution: {integrity: sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==}
engines: {node: 20 || >=22}
braces@3.0.3:
@@ -6604,8 +6609,8 @@ packages:
undici-types@8.9.0:
resolution: {integrity: sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg==}
undici@7.29.0:
resolution: {integrity: sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==}
undici@7.30.0:
resolution: {integrity: sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==}
engines: {node: '>=20.18.1'}
undici@8.11.2:
@@ -7451,7 +7456,7 @@ snapshots:
open: 8.4.2
picomatch: 4.0.5
systeminformation: 5.33.1
undici: 7.29.0
undici: 7.30.0
which: 4.0.0
yocto-spinner: 1.2.2
@@ -7583,7 +7588,7 @@ snapshots:
'@floating-ui/utils@0.2.12': {}
'@grpc/grpc-js@1.14.4':
'@grpc/grpc-js@1.14.5':
dependencies:
'@grpc/proto-loader': 0.8.1
'@js-sdsl/ordered-map': 4.4.2
@@ -10292,16 +10297,16 @@ snapshots:
bowser@2.14.1: {}
brace-expansion@1.1.18:
brace-expansion@1.1.21:
dependencies:
balanced-match: 1.0.2
concat-map: 0.0.1
brace-expansion@2.1.4:
brace-expansion@2.1.7:
dependencies:
balanced-match: 1.0.2
brace-expansion@5.0.9:
brace-expansion@5.0.12:
dependencies:
balanced-match: 4.0.4
@@ -10715,7 +10720,7 @@ snapshots:
dockerode@5.0.1(supports-color@7.2.0):
dependencies:
'@balena/dockerignore': 1.0.2
'@grpc/grpc-js': 1.14.4
'@grpc/grpc-js': 1.14.5
'@grpc/proto-loader': 0.7.15
docker-modem: 5.0.7(supports-color@7.2.0)
protobufjs: 7.6.5
@@ -12121,19 +12126,19 @@ snapshots:
minimatch@10.2.6:
dependencies:
brace-expansion: 5.0.9
brace-expansion: 5.0.12
minimatch@3.1.5:
dependencies:
brace-expansion: 1.1.18
brace-expansion: 1.1.21
minimatch@5.1.9:
dependencies:
brace-expansion: 2.1.4
brace-expansion: 2.1.7
minimatch@9.0.9:
dependencies:
brace-expansion: 2.1.4
brace-expansion: 2.1.7
minimist@1.2.8: {}
@@ -13176,7 +13181,7 @@ snapshots:
tailwind-merge: 3.6.0
ts-morph: 26.0.0
tsconfig-paths: 4.2.0
undici: 7.29.0
undici: 7.30.0
validate-npm-package-name: 7.0.2
zod: 3.25.76
zod-to-json-schema: 3.25.2(zod@3.25.76)
@@ -13705,7 +13710,7 @@ snapshots:
undici-types@8.9.0: {}
undici@7.29.0: {}
undici@7.30.0: {}
undici@8.11.2: {}
+9
View File
@@ -83,6 +83,15 @@ overrides:
# patched line is the same minor, so nothing downstream moves.
"esbuild@>=0.27.3 <0.28.1": "^0.28.1"
# Development-only copies (test containers, build tooling) that the
# dependency alerts flag: gRPC under the test containers, brace-expansion on
# three major lines, and undici 7 next to the app's own undici 8.
"@grpc/grpc-js@>=1.14.0 <1.14.5": "^1.14.5"
"brace-expansion@<1.1.21": "^1.1.21"
"brace-expansion@>=2.0.0 <2.1.7": "^2.1.7"
"brace-expansion@>=4.0.0 <5.0.12": "^5.0.12"
"undici@>=7.0.0 <7.29.1": "^7.29.1"
allowBuilds:
"@prisma/engines": true
prisma: true