From 758cdbdb9e4c2f4052cfff4dedbd6ed58cabaafd Mon Sep 17 00:00:00 2001 From: Distronode <254259913+distronode-com@users.noreply.github.com> Date: Fri, 11 Sep 2026 02:06:31 -0400 Subject: [PATCH] deps: clear the fourteen advisories Scorecard reports, by version bump only MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit OpenSSF Scorecard's OSV check reports fourteen advisories against this tree. None of them needs a code change; all but one are closed by moving a version. Go: GO-2026-6303 · GO-2026-6354 · GO-2026-6355 · GO-2026-5932 golang.org/x/crypto v0.53.0 -> v0.56.0 Nothing behavioural changes here. The affected packages in those four advisories are x/crypto/ssh and x/crypto/openpgp; this tree imports only bcrypt and argon2 (internal/keyvault/keyvault.go, internal/handler/{claim,email_auth,invites}.go, cmd/calnode/reset_admin.go), neither of which is touched by any of them. The bump is still worth taking so the module graph stops reporting them. go.sum moves two lines and no other module moves. The `go` directive goes from `go 1.26` to `go 1.26.0` because x/crypto v0.56.0 declares `go 1.26.0` and the go command requires the main module to be at least that; `go 1.26` alone now fails with "updates to go.mod needed". Same language version, written out. GHSA-q7pp-wcgr-pffx github.com/disintegration/imaging v1.6.2 -> not fixed upstream Left alone deliberately: there is no fixed release. imaging is also not on a reachable path for it here. Every call site (avatar.go, branding_settings.go) goes through decodeUploadedImage in internal/handler/image_upload.go, which sniffs the content type with http.DetectContentType and rejects anything that is not JPEG, PNG, GIF or WebP before decoding, and it caps decoded pixels. imaging itself is only ever asked for imaging.Fit on an already-decoded image.Image - its decoders are never called. Frontend: GHSA-29g2-3rmr-qm68 · GHSA-866w-xmhq-wj7x · GHSA-wqjv-9729-c5q2 @sveltejs/kit ^2.65.1 -> ^2.70.2 (resolves 2.70.3) All three are in Kit's server runtime, which this project never runs: the admin app builds with adapter-static and fallback: '200.html' (see frontend/svelte.config.js) and is served as static files embedded into the Go binary. The bump is still the right answer rather than an exception note - the dependency is in the tree, and five minors of Kit fixes come with it. GHSA-p63j-vcc4-9vmv @vitest/browser ^4.1.9 -> ^4.1.10 (resolves 4.1.11) vitest ^4.1.9 -> ^4.1.10 (resolves 4.1.11) @vitest/browser-playwright ^4.1.9 -> ^4.1.10 (resolves 4.1.11) Test-only, but rated critical. Vitest's packages peer-depend on each other at an exact version, so all three move together or pnpm reports an unmet peer. GHSA-fxqj-rqcc-2cmp · GHSA-r28c-9q8g-f849 postcss 8.5.15 -> 8.5.28 (transitive: vite, shadcn-svelte) GHSA-28wg-ghj8-5hjv · GHSA-2v37-7h3g-55p8 nanoid 3.3.12 -> 3.3.19 (transitive: postcss) Both moved inside their parents' existing ranges, lockfile only. GHSA-pxg6-pf52-xh8x cookie 0.6.0 -> 0.7.2 (transitive: @sveltejs/kit) This one needs a pnpm override, which is why there is now an `overrides` block. @sveltejs/kit 2.70.3 - the newest 2.x - still declares cookie ^0.6.0, and for a 0.x version that caret means >=0.6.0 <0.7.0, so the fixed 0.7.0 cannot be reached within the range. The override is scoped to that range (`cookie@^0.6.0`) so it does not touch the separate cookie 1.1.1 that msw pulls in, which was never affected. Worth flagging for review: forcing a dependency inside Kit is a maintainer's call. The risk here is small - cookie 0.7.x is the same API with stricter validation of names, paths and domains, and under adapter-static the Kit code that calls it never executes - but it is an override and it should be dropped the moment Kit widens its range. Verified: pnpm install --frozen-lockfile, pnpm build and pnpm test:visual (Vitest browser mode, 5/5) all pass; pnpm audit reports no known vulnerabilities. On the Go side go build ./..., go vet ./... and go test ./internal/keyvault/... ./internal/handler/... all pass. Co-Authored-By: Claude Opus 5 (1M context) --- frontend/package.json | 13 +- frontend/pnpm-lock.yaml | 317 +++++++++++++++++++++------------------- go.mod | 4 +- go.sum | 4 +- 4 files changed, 175 insertions(+), 163 deletions(-) diff --git a/frontend/package.json b/frontend/package.json index 8753ea1..d8d22e3 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -7,7 +7,10 @@ "pnpm": { "onlyBuiltDependencies": [ "msw" - ] + ], + "overrides": { + "cookie@^0.6.0": "^0.7.2" + } }, "scripts": { "dev": "vite dev", @@ -25,12 +28,12 @@ "@internationalized/date": "^3.12.2", "@lucide/svelte": "^1.20.0", "@sveltejs/adapter-static": "^3.0.10", - "@sveltejs/kit": "^2.65.1", + "@sveltejs/kit": "^2.70.2", "@sveltejs/vite-plugin-svelte": "^7.1.2", "@tailwindcss/vite": "^4.3.1", "@types/node": "^26.0.1", - "@vitest/browser": "^4.1.9", - "@vitest/browser-playwright": "^4.1.9", + "@vitest/browser": "^4.1.10", + "@vitest/browser-playwright": "^4.1.10", "bits-ui": "^2.18.1", "playwright": "^1.61.0", "shadcn-svelte": "1.3.0", @@ -42,7 +45,7 @@ "tw-animate-css": "^1.4.0", "typescript": "^5.7.3", "vite": "^8.0.16", - "vitest": "^4.1.9", + "vitest": "^4.1.10", "vitest-browser-svelte": "^2.1.1" } } diff --git a/frontend/pnpm-lock.yaml b/frontend/pnpm-lock.yaml index a0674ad..98fb47d 100644 --- a/frontend/pnpm-lock.yaml +++ b/frontend/pnpm-lock.yaml @@ -4,6 +4,9 @@ settings: autoInstallPeers: true excludeLinksFromLockfile: false +overrides: + cookie@^0.6.0: ^0.7.2 + importers: .: @@ -26,10 +29,10 @@ importers: version: 1.20.0(svelte@5.56.3) '@sveltejs/adapter-static': specifier: ^3.0.10 - version: 3.0.10(@sveltejs/kit@2.65.1(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))) + version: 3.0.10(@sveltejs/kit@2.70.3(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))) '@sveltejs/kit': - specifier: ^2.65.1 - version: 2.65.1(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) + specifier: ^2.70.2 + version: 2.70.3(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) '@sveltejs/vite-plugin-svelte': specifier: ^7.1.2 version: 7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) @@ -40,14 +43,14 @@ importers: specifier: ^26.0.1 version: 26.0.1 '@vitest/browser': - specifier: ^4.1.9 - version: 4.1.9(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))(vitest@4.1.9) + specifier: ^4.1.10 + version: 4.1.11(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))(vitest@4.1.11) '@vitest/browser-playwright': - specifier: ^4.1.9 - version: 4.1.9(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(playwright@1.61.0)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))(vitest@4.1.9) + specifier: ^4.1.10 + version: 4.1.11(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(playwright@1.61.0)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))(vitest@4.1.11) bits-ui: specifier: ^2.18.1 - version: 2.18.1(@internationalized/date@3.12.2)(@sveltejs/kit@2.65.1(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3) + version: 2.18.1(@internationalized/date@3.12.2)(@sveltejs/kit@2.70.3(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3) playwright: specifier: ^1.61.0 version: 1.61.0 @@ -79,11 +82,11 @@ importers: specifier: ^8.0.16 version: 8.0.16(@types/node@26.0.1)(jiti@2.7.0) vitest: - specifier: ^4.1.9 - version: 4.1.9(@types/node@26.0.1)(@vitest/browser-playwright@4.1.9)(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) + specifier: ^4.1.10 + version: 4.1.11(@types/node@26.0.1)(@vitest/browser-playwright@4.1.11)(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) vitest-browser-svelte: specifier: ^2.1.1 - version: 2.1.1(svelte@5.56.3)(vitest@4.1.9) + version: 2.1.1(svelte@5.56.3)(vitest@4.1.11) packages: @@ -108,12 +111,12 @@ packages: '@floating-ui/utils@0.2.11': resolution: {integrity: sha512-RiB/yIh78pcIxl6lLMG0CgBXAZ2Y0eVHqMPYugu+9U0AeT6YBeiJpf7lbdJNIugFP5SIjwNRgo4DhR1Qxi26Gg==} - '@inquirer/ansi@2.0.7': - resolution: {integrity: sha512-3eTuUO1vH2cZm2ZKHeQxnOqlTi9EfZDGgIe3BL3I4u+rJHocr9Fz86M4fjYABPvFnQG/gGK551HqDiIcETwU6Q==} + '@inquirer/ansi@2.0.8': + resolution: {integrity: sha512-WpQM+Ti6Z40EFwwt+uL2p4UabT+W179zHp6HhLVOzfbwnVn05IPO/eXIZXGNqcT1jbQ15SujNLzQ39k4QPPxBQ==} engines: {node: '>=23.5.0 || ^22.13.0 || ^20.17.0'} - '@inquirer/confirm@6.1.1': - resolution: {integrity: sha512-eb8DBZcz/2qHWQda4rk2JiQk5h9QV/cVHi1yjt0f69WFZMRFn0sJTye3EAP8icut8UDMjQPsaH5KbcOogefrFQ==} + '@inquirer/confirm@6.3.2': + resolution: {integrity: sha512-Xvr/0HggjddPtGppuqVmxhTw+Hr8PvsZ/k0HmOEaAqQEt80OITNkFWnsdNmyT0/eM4Ab+iJLx2R8rctlEyfSVg==} engines: {node: '>=23.5.0 || ^22.13.0 || ^20.17.0'} peerDependencies: '@types/node': '>=18' @@ -121,8 +124,8 @@ packages: '@types/node': optional: true - '@inquirer/core@11.2.1': - resolution: {integrity: sha512-Qd6GJT1yVyrZZCfN8W2qKF5ApmqryXRhRKCuip8h01x2w/esJQ2XIYc6f9abMIHgKQdBfFTSOdbHRLAhuM09UA==} + '@inquirer/core@12.0.3': + resolution: {integrity: sha512-wsSy0sznmXwkty+2PzZwx00Cazc/E0r0B7mAzdGROz2Ct+DFZXaK7WDjGZvgjRldxH5ZhFVfF2lgkYrqgOw2KA==} engines: {node: '>=23.5.0 || ^22.13.0 || ^20.17.0'} peerDependencies: '@types/node': '>=18' @@ -130,12 +133,12 @@ packages: '@types/node': optional: true - '@inquirer/figures@2.0.7': - resolution: {integrity: sha512-aJ8TBPOGB6f/2qziPfElISTCEd5XOYTFckA2SGjhNmiKzfK/u4ot3v0DUzGVdUnKjN10EqnnEPck36BkyfLnJw==} + '@inquirer/figures@2.0.9': + resolution: {integrity: sha512-EAWgUTGQ/Umgga51dE3B2PUHbufuXarDfg86uVgoSgNHNNQnyFKcOrQLWVqYMghuSyHh8+2HUH0Js9cTC1WAdg==} engines: {node: '>=23.5.0 || ^22.13.0 || ^20.17.0'} - '@inquirer/type@4.0.7': - resolution: {integrity: sha512-t28inv14nMQ1PhKpsJPY+kEs/c00qzeCOS2gTNRyTjG5d6qsVA2fItxW4hkvGZ5lvanGLdtCzVIx5dwdRpN1+g==} + '@inquirer/type@4.1.1': + resolution: {integrity: sha512-yJoHYrMnxIsJZCY+0Vb66Dy3he3kL3e2wOBKhoSwWWAzZAY82emlxwgprCtp6yRixvNRNq9ztfRWQYPNr3Go7A==} engines: {node: '>=23.5.0 || ^22.13.0 || ^20.17.0'} peerDependencies: '@types/node': '>=18' @@ -306,8 +309,8 @@ packages: peerDependencies: '@sveltejs/kit': ^2.0.0 - '@sveltejs/kit@2.65.1': - resolution: {integrity: sha512-Sa1rFYYqBB+zv3rIxAg/CsFskR/x4aj5BY/hvLxBd9r/mqbipxM945As1K3PqsDicJAyekPR0BlWoVIiw2OHYg==} + '@sveltejs/kit@2.70.3': + resolution: {integrity: sha512-UDvEYuZqAMbfB/oXIoqKvbKcb7YczK5zYrzmsGV1zRJk03jntwp8dXiYoIJotxAndsKvcPFtx9H1GRSKFdSHgg==} engines: {node: '>=18.13'} hasBin: true peerDependencies: @@ -451,12 +454,12 @@ packages: '@types/estree@1.0.9': resolution: {integrity: sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==} - '@types/node@25.9.3': - resolution: {integrity: sha512-603BddQMv3pUcr4U2dhujk83N2tTDVr/34wII2B6bJy6g+8WD6yUb11jszNs0gdi4PesVWl7ABt8nYMVpnLUcg==} - '@types/node@26.0.1': resolution: {integrity: sha512-fc3KiUoBt6kie0N9bIW3E47vZsuaMf0PM2AaUpLCLT0s/LvX1nxAim6Fc049cNxODPpGm6qRAuUOB86SkRuPQw==} + '@types/node@26.5.1': + resolution: {integrity: sha512-CzNm2FezW4VR/LjG6yUdiEgLE/rAQ9Slj5gCu/C2VrdcW7I0ahNZ8DRbHT7zOZ6r3ONgd/bsQIeSaoDGrd1C6g==} + '@types/set-cookie-parser@2.4.10': resolution: {integrity: sha512-GGmQVGpQWUe5qglJozEjZV/5dyxbOOZ0LHe/lqyWssB88Y4svNfst0uqBVscdDeIKl5Jy5+aPSvy7mI9tYRguw==} @@ -466,22 +469,22 @@ packages: '@types/trusted-types@2.0.7': resolution: {integrity: sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==} - '@vitest/browser-playwright@4.1.9': - resolution: {integrity: sha512-Bq1rOGf9waevzG3EOkO/dene6bvKTUsZMVg8S1i+WH3JcMjuXEjiahP9rAqZRELUqjBySOJsvvSWqK/B3wjKQw==} + '@vitest/browser-playwright@4.1.11': + resolution: {integrity: sha512-riLBxPqwnJ0lWs2DN2WeUfYeKLoAjbP2Xx8cLQdSddzMi20sksIa6K2mPz79DyMZKKVKH2ksOC2yJvtNcZg8cg==} peerDependencies: playwright: '*' - vitest: 4.1.9 + vitest: 4.1.11 - '@vitest/browser@4.1.9': - resolution: {integrity: sha512-j1BKtWmPcqpMhmx/L9EPLgAJpCb0zKfwoWLmqBbxaogCXHjOwHFSEoHCBfnGtx93xKQwilZ26m+UOsHqHMkRNg==} + '@vitest/browser@4.1.11': + resolution: {integrity: sha512-bwMovvAeuTFOK5kIFevw4VEf+1gVEICv4SYK4k3knJOxl6b1zEWud8mYKD73e1B0odAn174h1MofURy2TPWf3w==} peerDependencies: - vitest: 4.1.9 + vitest: 4.1.11 - '@vitest/expect@4.1.9': - resolution: {integrity: sha512-vl/rYsUKcBr3SnQn166+XR5ZQcgMx3DQhFWdfli/cWpLnLUmbxZvyrJZotLFUryib+LtArYMSTJ5RbQ57ZqrlA==} + '@vitest/expect@4.1.11': + resolution: {integrity: sha512-VX2x5vNJXET47KAFzwERI+KRMtTTCSWTfSMKsW7JsUsXV4psq++e3DvZpuTDOpHcxytiDs6p2nhVb2tVDiiUYw==} - '@vitest/mocker@4.1.9': - resolution: {integrity: sha512-EVkXzBjrPGM+cK8/ANWgBrkUCfJfb38/EfTSO8h7pWvKkyPkpWxvR7BkD2MyItMF62C97zAEoqdpUixwR/e+Rw==} + '@vitest/mocker@4.1.11': + resolution: {integrity: sha512-2XJVD55d1o5AZous5CCGKS74g/riOj9odEt2bQpCVZeblHyHdnMeFl4jl0XjU21stf4mbjUkew2eXQZt65g5CQ==} peerDependencies: msw: ^2.4.9 vite: ^6.0.0 || ^7.0.0 || ^8.0.0 @@ -491,20 +494,20 @@ packages: vite: optional: true - '@vitest/pretty-format@4.1.9': - resolution: {integrity: sha512-s0iufns3iIFitdgm+YR7g1whCAaGtXz459VS9/PqyKDEEFgYIhsHOQmXgIgDuYCt7DeQmiZT0Qe2OA2p4ZPu5A==} + '@vitest/pretty-format@4.1.11': + resolution: {integrity: sha512-yiZzPbGTS9Sr/JpFl8zHrcIkAofNbFV6k21vIgQN/cY/oxZeXhJv5sc/MBJ5jFKWmWs+oJHw0UXLZjmf931+Vw==} - '@vitest/runner@4.1.9': - resolution: {integrity: sha512-KXLMDtc7oe70+3mJfGrPUWPesswH+3sTxAMAMl8DG7I8IUQT4XW718dY5ID3vPUcmlu27CcKfY4P3h3I29SLJg==} + '@vitest/runner@4.1.11': + resolution: {integrity: sha512-LztvUgdwMNJMIkj3hQnnxiC2Xy1zNxq928W/xhjCLaNCzqTZOudjwbQf6v9IntZGPw132i2Lq2rgTRZHD3JHNw==} - '@vitest/snapshot@4.1.9': - resolution: {integrity: sha512-Jc7RKGNBo8Z28WYIm0Niej4xdSPByRf6mU58VpHQkd6Zh05rlnA+twjbK5HyeIGHxrzsc3mJgS43uM0CZKzaIA==} + '@vitest/snapshot@4.1.11': + resolution: {integrity: sha512-pN7ikn1ON7h8ee4gIAp4AzyK+zBtJPzVbqOgu5LCEh4VaJVbPQcgYQYJIMGQPXVeJJq1fnfazis7a5pFNPahog==} - '@vitest/spy@4.1.9': - resolution: {integrity: sha512-fHpsS6mIi+PiEW+vcRVOMkX1oSaPKne3VOclSFICPcGOmfKgXPU5iAah+wcNcj2xPrCCmfq99IDGf+EojhhvhA==} + '@vitest/spy@4.1.11': + resolution: {integrity: sha512-apNa/prQy2qCeywhnixOHPRCgGNhvg7T4Dapfl1GahLp/R+uhBm5cPyFoNVyqsNd2h1nJxL6BqqdIjiABL60YA==} - '@vitest/utils@4.1.9': - resolution: {integrity: sha512-A51o8ymO5PpqlWNnBP9ZHPXDIpuMtTLlGSjN7la4US+LJzoUMyhwjA5QXlm39JexgwHKW4Xjs8Z2d3dLCXOeuA==} + '@vitest/utils@4.1.11': + resolution: {integrity: sha512-zTCVGpyFsGWBhllOyKlTw/vnr6D9qxsfSDyfbyZmTyjHw5N/VuvzHpHoQjm2ZJzn4RJgx5w4r7V0er69CmLgPQ==} acorn@8.17.0: resolution: {integrity: sha512-xRQbDb9BnwDafYNn6Vwl839DYVjqXYb1XVGtWAZ1kcDc6iwAL4hg3B1dZlRiuENFeO2H53gFG3in621AdERVAg==} @@ -572,8 +575,8 @@ packages: convert-source-map@2.0.0: resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==} - cookie@0.6.0: - resolution: {integrity: sha512-U71cyTamuh1CRNCfpGY6to28lxvNwPG4Guz/EVjgf3Jmzv0vlDp1atT9eS5dDjMYHucpHbWns6Lwf3BKz6svdw==} + cookie@0.7.2: + resolution: {integrity: sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==} engines: {node: '>= 0.6'} cookie@1.1.1: @@ -799,8 +802,8 @@ packages: resolution: {integrity: sha512-dkEJPVvun4FryqBmZ5KhDo0K9iDXAwn08tMLDinNdRBNPcYEDiWYysLcc6k3mjTMlbP9KyylvRpd4wFtwrT9rw==} engines: {node: ^20.17.0 || >=22.9.0} - nanoid@3.3.12: - resolution: {integrity: sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==} + nanoid@3.3.19: + resolution: {integrity: sha512-Y2tUNy4ouw6tq5oDSKeQYGOyhkUBhNOcGV/02KC+6kd9eDGqdZd++mjMiIDilrBYvjEnCYvVtsuHCuP+okSfug==} engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} hasBin: true @@ -841,8 +844,8 @@ packages: resolution: {integrity: sha512-LKWqWJRhstyYo9pGvgor/ivk2w94eSjE3RGVuzLGlr3NmD8bf7RcYGze1mNdEHRP6TRP6rMuDHk5t44hnTRyow==} engines: {node: '>=14.19.0'} - postcss@8.5.15: - resolution: {integrity: sha512-FfR8sjd4em2T6fb3I2MwAJU7HWVMr9zba+enmQeeWFfCbm+UOC/0X4DS8XtpUTMwWMGbjKYP7xjfNekzyGmB3A==} + postcss@8.5.28: + resolution: {integrity: sha512-RRuzqDtt5Y9h3quz5hWhK+TPnsmVs6WwSU6LkJMeY4HstUEDuYTG8UJSdawMRzmzAtV+KEoG8N3Qg2qLy5vM/A==} engines: {node: ^10 || ^12 || >=14} readdirp@4.1.2: @@ -882,6 +885,9 @@ packages: set-cookie-parser@3.1.0: resolution: {integrity: sha512-kjnC1DXBHcxaOaOXBHBeRtltsDG2nUiUni+jP92M9gYdW12rsmx92UsfpH7o5tDRs7I1ZZPSQJQGv3UaRfCiuw==} + set-cookie-parser@3.1.2: + resolution: {integrity: sha512-5/r/lTwbJ3zQ+qwdUFZYeRNqda7P5HD8zQKqlSjdGt1/S0cjLAphHusj4Y58ahDtWn/g32xrIS58/ikOvwl0Lw==} + shadcn-svelte@1.3.0: resolution: {integrity: sha512-Pd4ICWTkTks/b2YU4c9vF2XsX1x5HFPRl5bKszS1LcnWS83x+7T4WiIvbWz8Qh9knkcGZ+SCz1+Dmhdq+AYooA==} hasBin: true @@ -992,19 +998,19 @@ packages: resolution: {integrity: sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==} engines: {node: '>=14.0.0'} - tldts-core@7.4.3: - resolution: {integrity: sha512-27ep5H9PzdBrNd5OFM/j3WCU8F3kPwM9D0BOaOf7uYfxMJfyr0K5Tjj69Gri+sZlh2WXd5buIm47NuPF29CDiw==} + tldts-core@7.4.12: + resolution: {integrity: sha512-nYNzS2WRf4QJmjzFFgAxLOBjyBxAGRbCy9PVBPaglcYyYajh40VBn+v5Ngr96ZMc7oM0+aCJdtQnNejvdBnXMQ==} - tldts@7.4.3: - resolution: {integrity: sha512-A3BDQBeeukYPzB4QdQ1DtdlUmp4x2OCH8n5UVhEWbyANxNep8GavottKzd1xYKFJKjUgMyPT7EzOfnBO55s8Sg==} + tldts@7.4.12: + resolution: {integrity: sha512-WylhSDKVeYnWXL3a+vKTaOxjnOeEGw938hImY8zoRWJjRRK/Jp1K+IihBzIONpUmW4e3WmXT6q5FW6vlESVZCA==} hasBin: true totalist@3.0.1: resolution: {integrity: sha512-sf4i37nQ2LBx4m3wB74y+ubopq6W/dIzXg0FDGjsYnZHVa1Da8FH853wlL2gtUhg+xJXjfk3kUZS3BRoQeoQBQ==} engines: {node: '>=6'} - tough-cookie@6.0.1: - resolution: {integrity: sha512-LktZQb3IeoUWB9lqR5EWTHgW/VTITCXg4D21M+lvybRVdylLrRMnqaIONLVb5mav8vM19m44HIcGq4qASeu2Qw==} + tough-cookie@6.0.2: + resolution: {integrity: sha512-exgYmnmL/sJpR3upZfXG5PoatXQii55xAiXGXzY+sROLZ/Y+SLcp9PgJNI9Vz37HpQ74WvDcLT8eqm+kV3FzrA==} engines: {node: '>=16'} tslib@2.8.1: @@ -1013,8 +1019,8 @@ packages: tw-animate-css@1.4.0: resolution: {integrity: sha512-7bziOlRqH0hJx80h/3mbicLW7o8qLsH5+RaLR2t+OHM3D0JlWGODQKQ4cxbK7WlvmUxpcj6Kgu6EKqjrGFe3QQ==} - type-fest@5.7.0: - resolution: {integrity: sha512-1URUxUqfHFM1c+zfSPsa3gnkO7Aq21qyH75SIduNYz4SzY964rn1X2vCMQaHSHhktiw+0kPa2iyb6PUpXqB6Vg==} + type-fest@5.9.0: + resolution: {integrity: sha512-yANm3Jr3GiJ1qgJlxGAVxTOIcEOk1rhQHamlXtnrCK7EHP4HeM9OGxtMg/W7HFdrVzw/ZWJKGVIJusVH85sLtw==} engines: {node: '>=20'} typescript@5.9.3: @@ -1022,12 +1028,12 @@ packages: engines: {node: '>=14.17'} hasBin: true - undici-types@7.24.6: - resolution: {integrity: sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==} - undici-types@8.3.0: resolution: {integrity: sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ==} + undici-types@8.9.0: + resolution: {integrity: sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg==} + until-async@3.0.2: resolution: {integrity: sha512-IiSk4HlzAMqTUseHHe3VhIGyuFmN90zMTpD3Z3y8jeQbzLIq500MVM7Jq2vUAnTKAFPJrqwkzr6PoTcPhGcOiw==} @@ -1088,20 +1094,20 @@ packages: svelte: ^3 || ^4 || ^5 || ^5.0.0-next.0 vitest: ^4.0.0 - vitest@4.1.9: - resolution: {integrity: sha512-nE3/LEyc0z87uHYLZebqCUOaJr2hdtuPp7BQ4BosVFnfltxgAvMG08NyrSGlPpOUWvR27c5flSmYFTNr78L9GQ==} + vitest@4.1.11: + resolution: {integrity: sha512-fhACrNXUidIbGSBr5FlbuBkO7VWC1ZyLl0DO4CU2DrQoAPxX84Ysxs+HeGQpii5lZWV1Q4gBZTTu49mF+A6Edw==} engines: {node: ^20.0.0 || ^22.0.0 || >=24.0.0} hasBin: true peerDependencies: '@edge-runtime/vm': '*' '@opentelemetry/api': ^1.9.0 '@types/node': ^20.0.0 || ^22.0.0 || >=24.0.0 - '@vitest/browser-playwright': 4.1.9 - '@vitest/browser-preview': 4.1.9 - '@vitest/browser-webdriverio': 4.1.9 - '@vitest/coverage-istanbul': 4.1.9 - '@vitest/coverage-v8': 4.1.9 - '@vitest/ui': 4.1.9 + '@vitest/browser-playwright': 4.1.11 + '@vitest/browser-preview': 4.1.11 + '@vitest/browser-webdriverio': 4.1.11 + '@vitest/coverage-istanbul': 4.1.11 + '@vitest/coverage-v8': 4.1.11 + '@vitest/ui': 4.1.11 happy-dom: '*' jsdom: '*' vite: ^6.0.0 || ^7.0.0 || ^8.0.0 @@ -1158,8 +1164,8 @@ packages: resolution: {integrity: sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==} engines: {node: '>=12'} - yargs@17.7.2: - resolution: {integrity: sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==} + yargs@17.7.3: + resolution: {integrity: sha512-GZtjxm/J/4TSxuL3FNYjCmLktBTnIw/rVmKSIyKeYAZpmJB2ig9VauCC5xsa82GNKVKDAqpOn3KVzNt0zmrU0g==} engines: {node: '>=12'} zimmerframe@1.1.4: @@ -1196,22 +1202,22 @@ snapshots: '@floating-ui/utils@0.2.11': {} - '@inquirer/ansi@2.0.7': + '@inquirer/ansi@2.0.8': optional: true - '@inquirer/confirm@6.1.1(@types/node@26.0.1)': + '@inquirer/confirm@6.3.2(@types/node@26.0.1)': dependencies: - '@inquirer/core': 11.2.1(@types/node@26.0.1) - '@inquirer/type': 4.0.7(@types/node@26.0.1) + '@inquirer/core': 12.0.3(@types/node@26.0.1) + '@inquirer/type': 4.1.1(@types/node@26.0.1) optionalDependencies: '@types/node': 26.0.1 optional: true - '@inquirer/core@11.2.1(@types/node@26.0.1)': + '@inquirer/core@12.0.3(@types/node@26.0.1)': dependencies: - '@inquirer/ansi': 2.0.7 - '@inquirer/figures': 2.0.7 - '@inquirer/type': 4.0.7(@types/node@26.0.1) + '@inquirer/ansi': 2.0.8 + '@inquirer/figures': 2.0.9 + '@inquirer/type': 4.1.1(@types/node@26.0.1) cli-width: 4.1.0 fast-wrap-ansi: 0.2.2 mute-stream: 3.0.0 @@ -1220,10 +1226,10 @@ snapshots: '@types/node': 26.0.1 optional: true - '@inquirer/figures@2.0.7': + '@inquirer/figures@2.0.9': optional: true - '@inquirer/type@4.0.7(@types/node@26.0.1)': + '@inquirer/type@4.1.1(@types/node@26.0.1)': optionalDependencies: '@types/node': 26.0.1 optional: true @@ -1348,18 +1354,18 @@ snapshots: dependencies: acorn: 8.17.0 - '@sveltejs/adapter-static@3.0.10(@sveltejs/kit@2.65.1(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))': + '@sveltejs/adapter-static@3.0.10(@sveltejs/kit@2.70.3(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))': dependencies: - '@sveltejs/kit': 2.65.1(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) + '@sveltejs/kit': 2.70.3(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) - '@sveltejs/kit@2.65.1(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))': + '@sveltejs/kit@2.70.3(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))': dependencies: '@standard-schema/spec': 1.1.0 '@sveltejs/acorn-typescript': 1.0.10(acorn@8.17.0) '@sveltejs/vite-plugin-svelte': 7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) '@types/cookie': 0.6.0 acorn: 8.17.0 - cookie: 0.6.0 + cookie: 0.7.2 devalue: 5.8.1 esm-env: 1.2.2 kleur: 4.1.5 @@ -1475,18 +1481,18 @@ snapshots: '@types/estree@1.0.9': {} - '@types/node@25.9.3': - dependencies: - undici-types: 7.24.6 - optional: true - '@types/node@26.0.1': dependencies: undici-types: 8.3.0 + '@types/node@26.5.1': + dependencies: + undici-types: 8.9.0 + optional: true + '@types/set-cookie-parser@2.4.10': dependencies: - '@types/node': 25.9.3 + '@types/node': 26.5.1 optional: true '@types/statuses@2.0.6': @@ -1494,29 +1500,29 @@ snapshots: '@types/trusted-types@2.0.7': {} - '@vitest/browser-playwright@4.1.9(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(playwright@1.61.0)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))(vitest@4.1.9)': + '@vitest/browser-playwright@4.1.11(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(playwright@1.61.0)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))(vitest@4.1.11)': dependencies: - '@vitest/browser': 4.1.9(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))(vitest@4.1.9) - '@vitest/mocker': 4.1.9(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) + '@vitest/browser': 4.1.11(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))(vitest@4.1.11) + '@vitest/mocker': 4.1.11(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) playwright: 1.61.0 tinyrainbow: 3.1.0 - vitest: 4.1.9(@types/node@26.0.1)(@vitest/browser-playwright@4.1.9)(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) + vitest: 4.1.11(@types/node@26.0.1)(@vitest/browser-playwright@4.1.11)(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) transitivePeerDependencies: - bufferutil - msw - utf-8-validate - vite - '@vitest/browser@4.1.9(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))(vitest@4.1.9)': + '@vitest/browser@4.1.11(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))(vitest@4.1.11)': dependencies: '@blazediff/core': 1.9.1 - '@vitest/mocker': 4.1.9(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) - '@vitest/utils': 4.1.9 + '@vitest/mocker': 4.1.11(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) + '@vitest/utils': 4.1.11 magic-string: 0.30.21 pngjs: 7.0.0 sirv: 3.0.2 tinyrainbow: 3.1.0 - vitest: 4.1.9(@types/node@26.0.1)(@vitest/browser-playwright@4.1.9)(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) + vitest: 4.1.11(@types/node@26.0.1)(@vitest/browser-playwright@4.1.11)(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) ws: 8.21.0 transitivePeerDependencies: - bufferutil @@ -1524,45 +1530,45 @@ snapshots: - utf-8-validate - vite - '@vitest/expect@4.1.9': + '@vitest/expect@4.1.11': dependencies: '@standard-schema/spec': 1.1.0 '@types/chai': 5.2.3 - '@vitest/spy': 4.1.9 - '@vitest/utils': 4.1.9 + '@vitest/spy': 4.1.11 + '@vitest/utils': 4.1.11 chai: 6.2.2 tinyrainbow: 3.1.0 - '@vitest/mocker@4.1.9(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))': + '@vitest/mocker@4.1.11(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))': dependencies: - '@vitest/spy': 4.1.9 + '@vitest/spy': 4.1.11 estree-walker: 3.0.3 magic-string: 0.30.21 optionalDependencies: msw: 2.14.6(@types/node@26.0.1)(typescript@5.9.3) vite: 8.0.16(@types/node@26.0.1)(jiti@2.7.0) - '@vitest/pretty-format@4.1.9': + '@vitest/pretty-format@4.1.11': dependencies: tinyrainbow: 3.1.0 - '@vitest/runner@4.1.9': + '@vitest/runner@4.1.11': dependencies: - '@vitest/utils': 4.1.9 + '@vitest/utils': 4.1.11 pathe: 2.0.3 - '@vitest/snapshot@4.1.9': + '@vitest/snapshot@4.1.11': dependencies: - '@vitest/pretty-format': 4.1.9 - '@vitest/utils': 4.1.9 + '@vitest/pretty-format': 4.1.11 + '@vitest/utils': 4.1.11 magic-string: 0.30.21 pathe: 2.0.3 - '@vitest/spy@4.1.9': {} + '@vitest/spy@4.1.11': {} - '@vitest/utils@4.1.9': + '@vitest/utils@4.1.11': dependencies: - '@vitest/pretty-format': 4.1.9 + '@vitest/pretty-format': 4.1.11 convert-source-map: 2.0.0 tinyrainbow: 3.1.0 @@ -1582,15 +1588,15 @@ snapshots: axobject-query@4.1.0: {} - bits-ui@2.18.1(@internationalized/date@3.12.2)(@sveltejs/kit@2.65.1(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3): + bits-ui@2.18.1(@internationalized/date@3.12.2)(@sveltejs/kit@2.70.3(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3): dependencies: '@floating-ui/core': 1.7.5 '@floating-ui/dom': 1.7.6 '@internationalized/date': 3.12.2 esm-env: 1.2.2 - runed: 0.35.1(@sveltejs/kit@2.65.1(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3) + runed: 0.35.1(@sveltejs/kit@2.70.3(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3) svelte: 5.56.3 - svelte-toolbelt: 0.10.6(@sveltejs/kit@2.65.1(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3) + svelte-toolbelt: 0.10.6(@sveltejs/kit@2.70.3(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3) tabbable: 6.4.0 transitivePeerDependencies: - '@sveltejs/kit' @@ -1625,7 +1631,7 @@ snapshots: convert-source-map@2.0.0: {} - cookie@0.6.0: {} + cookie@0.7.2: {} cookie@1.1.1: optional: true @@ -1699,7 +1705,7 @@ snapshots: headers-polyfill@5.0.1: dependencies: '@types/set-cookie-parser': 2.4.10 - set-cookie-parser: 3.1.0 + set-cookie-parser: 3.1.2 optional: true inline-style-parser@0.2.7: {} @@ -1781,7 +1787,7 @@ snapshots: msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3): dependencies: - '@inquirer/confirm': 6.1.1(@types/node@26.0.1) + '@inquirer/confirm': 6.3.2(@types/node@26.0.1) '@mswjs/interceptors': 0.41.9 '@open-draft/deferred-promise': 3.0.0 '@types/statuses': 2.0.6 @@ -1795,10 +1801,10 @@ snapshots: rettime: 0.11.11 statuses: 2.0.2 strict-event-emitter: 0.5.1 - tough-cookie: 6.0.1 - type-fest: 5.7.0 + tough-cookie: 6.0.2 + type-fest: 5.9.0 until-async: 3.0.2 - yargs: 17.7.2 + yargs: 17.7.3 optionalDependencies: typescript: 5.9.3 transitivePeerDependencies: @@ -1808,7 +1814,7 @@ snapshots: mute-stream@3.0.0: optional: true - nanoid@3.3.12: {} + nanoid@3.3.19: {} node-fetch-native@1.6.7: {} @@ -1836,9 +1842,9 @@ snapshots: pngjs@7.0.0: {} - postcss@8.5.15: + postcss@8.5.28: dependencies: - nanoid: 3.3.12 + nanoid: 3.3.19 picocolors: 1.1.1 source-map-js: 1.2.1 @@ -1876,14 +1882,14 @@ snapshots: esm-env: 1.2.2 svelte: 5.56.3 - runed@0.35.1(@sveltejs/kit@2.65.1(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3): + runed@0.35.1(@sveltejs/kit@2.70.3(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3): dependencies: dequal: 2.0.3 esm-env: 1.2.2 lz-string: 1.5.0 svelte: 5.56.3 optionalDependencies: - '@sveltejs/kit': 2.65.1(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) + '@sveltejs/kit': 2.70.3(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) sade@1.8.1: dependencies: @@ -1891,11 +1897,14 @@ snapshots: set-cookie-parser@3.1.0: {} + set-cookie-parser@3.1.2: + optional: true + shadcn-svelte@1.3.0(svelte@5.56.3): dependencies: commander: 14.0.3 node-fetch-native: 1.6.7 - postcss: 8.5.15 + postcss: 8.5.28 svelte: 5.56.3 tailwind-merge: 3.6.0 @@ -1956,10 +1965,10 @@ snapshots: runed: 0.28.0(svelte@5.56.3) svelte: 5.56.3 - svelte-toolbelt@0.10.6(@sveltejs/kit@2.65.1(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3): + svelte-toolbelt@0.10.6(@sveltejs/kit@2.70.3(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3): dependencies: clsx: 2.1.1 - runed: 0.35.1(@sveltejs/kit@2.65.1(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3) + runed: 0.35.1(@sveltejs/kit@2.70.3(@sveltejs/vite-plugin-svelte@7.1.2(svelte@5.56.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3)(typescript@5.9.3)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)))(svelte@5.56.3) style-to-object: 1.0.14 svelte: 5.56.3 transitivePeerDependencies: @@ -2014,37 +2023,37 @@ snapshots: tinyrainbow@3.1.0: {} - tldts-core@7.4.3: + tldts-core@7.4.12: optional: true - tldts@7.4.3: + tldts@7.4.12: dependencies: - tldts-core: 7.4.3 + tldts-core: 7.4.12 optional: true totalist@3.0.1: {} - tough-cookie@6.0.1: + tough-cookie@6.0.2: dependencies: - tldts: 7.4.3 + tldts: 7.4.12 optional: true tslib@2.8.1: {} tw-animate-css@1.4.0: {} - type-fest@5.7.0: + type-fest@5.9.0: dependencies: tagged-tag: 1.0.0 optional: true typescript@5.9.3: {} - undici-types@7.24.6: - optional: true - undici-types@8.3.0: {} + undici-types@8.9.0: + optional: true + until-async@3.0.2: optional: true @@ -2052,7 +2061,7 @@ snapshots: dependencies: lightningcss: 1.32.0 picomatch: 4.0.4 - postcss: 8.5.15 + postcss: 8.5.28 rolldown: 1.0.3 tinyglobby: 0.2.17 optionalDependencies: @@ -2064,21 +2073,21 @@ snapshots: optionalDependencies: vite: 8.0.16(@types/node@26.0.1)(jiti@2.7.0) - vitest-browser-svelte@2.1.1(svelte@5.56.3)(vitest@4.1.9): + vitest-browser-svelte@2.1.1(svelte@5.56.3)(vitest@4.1.11): dependencies: '@testing-library/svelte-core': 1.0.0(svelte@5.56.3) svelte: 5.56.3 - vitest: 4.1.9(@types/node@26.0.1)(@vitest/browser-playwright@4.1.9)(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) + vitest: 4.1.11(@types/node@26.0.1)(@vitest/browser-playwright@4.1.11)(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) - vitest@4.1.9(@types/node@26.0.1)(@vitest/browser-playwright@4.1.9)(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)): + vitest@4.1.11(@types/node@26.0.1)(@vitest/browser-playwright@4.1.11)(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)): dependencies: - '@vitest/expect': 4.1.9 - '@vitest/mocker': 4.1.9(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) - '@vitest/pretty-format': 4.1.9 - '@vitest/runner': 4.1.9 - '@vitest/snapshot': 4.1.9 - '@vitest/spy': 4.1.9 - '@vitest/utils': 4.1.9 + '@vitest/expect': 4.1.11 + '@vitest/mocker': 4.1.11(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0)) + '@vitest/pretty-format': 4.1.11 + '@vitest/runner': 4.1.11 + '@vitest/snapshot': 4.1.11 + '@vitest/spy': 4.1.11 + '@vitest/utils': 4.1.11 es-module-lexer: 2.1.0 expect-type: 1.3.0 magic-string: 0.30.21 @@ -2094,7 +2103,7 @@ snapshots: why-is-node-running: 2.3.0 optionalDependencies: '@types/node': 26.0.1 - '@vitest/browser-playwright': 4.1.9(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(playwright@1.61.0)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))(vitest@4.1.9) + '@vitest/browser-playwright': 4.1.11(msw@2.14.6(@types/node@26.0.1)(typescript@5.9.3))(playwright@1.61.0)(vite@8.0.16(@types/node@26.0.1)(jiti@2.7.0))(vitest@4.1.11) transitivePeerDependencies: - msw @@ -2118,7 +2127,7 @@ snapshots: yargs-parser@21.1.1: optional: true - yargs@17.7.2: + yargs@17.7.3: dependencies: cliui: 8.0.1 escalade: 3.2.0 diff --git a/go.mod b/go.mod index 8b8a9a9..1ea6bd5 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/calnode/calnode -go 1.26 +go 1.26.0 toolchain go1.26.6 @@ -10,7 +10,7 @@ require ( github.com/modelcontextprotocol/go-sdk v1.6.1 github.com/pressly/goose/v3 v3.27.1 github.com/yuin/goldmark v1.8.2 - golang.org/x/crypto v0.53.0 + golang.org/x/crypto v0.56.0 golang.org/x/image v0.45.0 golang.org/x/oauth2 v0.36.0 golang.org/x/text v0.41.0 diff --git a/go.sum b/go.sum index 5dc4a22..8a2af3f 100644 --- a/go.sum +++ b/go.sum @@ -48,8 +48,8 @@ github.com/yuin/goldmark v1.8.2 h1:kEGpgqJXdgbkhcOgBxkC0X0PmoPG1ZyoZ117rDVp4zE= github.com/yuin/goldmark v1.8.2/go.mod h1:ip/1k0VRfGynBgxOz0yCqHrbZXhcjxyuS66Brc7iBKg= go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0= go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y= -golang.org/x/crypto v0.53.0 h1:QZ4Muo8THX6CizN2vPPd5fBGHyogrdK9fG4wLPFUsto= -golang.org/x/crypto v0.53.0/go.mod h1:DNLU434OwVakk9PzuwV8w62mAJpRJL3vsgcfp4Qnsio= +golang.org/x/crypto v0.56.0 h1:GUh5Ii4J5jtcseSMiRqr1jXCNHoxjeV9Fmekc2oLy6Y= +golang.org/x/crypto v0.56.0/go.mod h1:OMW5y6CY9l38uPLmxU6l6pwcXp1obtLo3e6gT7gQR2I= golang.org/x/image v0.0.0-20191009234506-e7c1f5e7dbb8/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0= golang.org/x/image v0.45.0 h1:FMb1nTbH5H9vF55SriQHgFw5GnNL9Jg6L25BwXKzhB0= golang.org/x/image v0.45.0/go.mod h1:n62x/7RqlwXDvGsSU4u6IUTUf6KghUZ9Bt7cG/T9Fx4=