From eac939300e5284b5ddc1d3e580518b235f43c56d Mon Sep 17 00:00:00 2001 From: Maksim Zakharov <251575087+bit-byte0@users.noreply.github.com> Date: Wed, 2 Sep 2026 15:41:54 +0400 Subject: [PATCH] chore(security): override browserslist vulnerable range (GHSA-c83g-rgw3-j3cx, GHSA-73wf-gq98-2v4g) --- pnpm-lock.yaml | 113 +++++++++++++++++++++----------------------- pnpm-workspace.yaml | 1 + 2 files changed, 54 insertions(+), 60 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index b791564322bb..607ea8fad055 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -222,6 +222,7 @@ overrides: '@hono/node-server@<2.0.12': ^2.0.12 dompurify@<=3.4.12: ^3.4.13 nanoid@<3.3.17: ^3.3.17 + browserslist@<4.28.7: ^4.28.7 patchedDependencies: babel-core@6.26.3: c0f53059bb7026b811209ee3af7fd4c700c900c615d0a0b14981ce911fcf3392 @@ -7308,10 +7309,6 @@ packages: resolution: {integrity: sha512-WLbYiXzD3y/ATLZFufV/rZvWdZOs+Z/+5v1rBZ463Jn398pa6kcde27cvozYnBoxXblGZTFfoPpsaEw0orU5BA==} engines: {node: '>=0.10.0'} - archiver-utils@5.0.2: - resolution: {integrity: sha512-wuLJMmIBQYCsGZgYLTy5FIB2pF6Lfb6cXMSF8Qywwk3t20zWnAi7zLcQFdKQmIB8wyZpY5ER38x08GbwtR2cLA==} - engines: {node: '>= 14'} - archiver@8.0.0: resolution: {integrity: sha512-fV1orZfsnPn9BaSByR/qE67rJCLJEy2Ox5bq7nJh+jquWaNh6Sfec75kJ2T6PtdGUbPQlrVoSVCEOa5SdiTQ1g==} engines: {node: '>=18'} @@ -7792,8 +7789,8 @@ packages: resolution: {integrity: sha512-lGe34o6EHj9y3Kts9R4ZYs/Gr+6N7MCaMlIFA3F1R2O5/m7K06AxfSeO5530PEERE6/WyEg3lsuyw4GHlPZHog==} engines: {node: ^4.5.0 || >= 5.9} - baseline-browser-mapping@2.10.43: - resolution: {integrity: sha512-AjYpR78kDWAY3Efj+cDTFH9t9SCoL7OoTp1BOb0mQV7S+6CiLwnWM3FyxhJtdPufDFKzmCSFoUncKjWgJEZTCQ==} + baseline-browser-mapping@2.11.20: + resolution: {integrity: sha512-H0ulySigv6icDJ1F7SjtdCD6PrhTpdYCmP0CactWy1+ekh0AFd0o1Wn5T8b+hnTmdBx19u9yhL6wvCylXMY7zw==} engines: {node: '>=6.0.0'} hasBin: true @@ -7915,8 +7912,8 @@ packages: engines: {node: '>= 0.8'} hasBin: true - browserslist@4.28.6: - resolution: {integrity: sha512-FQBYNK15VMslhLHpA7+n+n1GOlF1kId2xcCg7/j95f24AOF6VDYMNH4mFxF7KuaTdv627faazpOAjFzMrfJOUw==} + browserslist@4.28.8: + resolution: {integrity: sha512-V2NpofLblG64mfOtSgDhOJESZEGogzDMBv/q+W6oc4LXWP/q75eOXoOaaOu1EOadB9U4Bwx/e0yzbvwKH8zalA==} engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7} hasBin: true @@ -8029,6 +8026,9 @@ packages: caniuse-lite@1.0.30001806: resolution: {integrity: sha512-72Cuvd95zbSYPKq6Fhg8eDJRlzgWDf7/mtoZv6Qe/DYNCEBdNxoA3+rZAU2ZhGCpZlns3EssFavaZomckT5Uuw==} + caniuse-lite@1.0.30001810: + resolution: {integrity: sha512-TITQPUkaz+aVk5GL6NhOdwk1aEaNTSDPsGFWrTuhKGtjTF70jL/Oht2W4c6rXUe5fu7Ie19VIahAXHIIiWWNeg==} + canvg@3.0.11: resolution: {integrity: sha512-5ON+q7jCTgMp9cjpu4Jo6XbvfYwSB2Ow3kzHKfIyJfaCAOHLbdKPQqGKgfED/R5B+3TFFfe8pegYA+b423SRyA==} engines: {node: '>=10.0.0'} @@ -9196,8 +9196,8 @@ packages: engines: {node: '>=0.12.18'} hasBin: true - electron-to-chromium@1.5.393: - resolution: {integrity: sha512-kiDJdIUawuEIcp9XoICKp1iTYDEbgguIPq526N1Q7jIQDeQ3CqoMx71025PI/7E48Ddtw2HuWsVjY7afEgNxmg==} + electron-to-chromium@1.5.418: + resolution: {integrity: sha512-UzS26r3AEbG5wSoGVpJKqwHIU9zwQN7LHdVIThDrJpS0I5KdlXFMEb8543fhc9dVnIIAST6ar8rhwa00AL5MlA==} elegant-spinner@1.0.1: resolution: {integrity: sha512-B+ZM+RXvRqQaAmkMlO/oSe5nMUOaUnyfGYCEHoR8wrXsZR2mA0XVibsxV1bvTwxdRWah1PkQqso2EzhILGHtEQ==} @@ -9672,6 +9672,7 @@ packages: eslint@9.39.4: resolution: {integrity: sha512-XoMjdBOwe/esVgEvLmNsD3IRHkm7fbKIUGvrleloJXUZgDHig2IPWNniv+GwjyJXzuNqVjlr5+4yVUZjycJwfQ==} engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0} + deprecated: This version is no longer supported. Please see https://eslint.org/version-support for other options. hasBin: true peerDependencies: jiti: '*' @@ -12868,8 +12869,8 @@ packages: node-notifier@9.0.1: resolution: {integrity: sha512-fPNFIp2hF/Dq7qLDzSg4vZ0J4e9v60gJR+Qx7RbjbWqzPDdEqeVpEx5CFeDAELIl+A/woaaNn1fQ5nEVerMxJg==} - node-releases@2.0.51: - resolution: {integrity: sha512-wRNIrw4DmVLKQlbgOMdkMx27Wrpzes2hh5Jtbi2bjPd+4wJstWIqP5A+lscnqbm0xxmT5Bpg8Lec5ItEBwx6BQ==} + node-releases@2.0.54: + resolution: {integrity: sha512-YHs7BmmcsdAI5Ozuf8JZo6PT0mv2GIWC9vMfvUC3dp65M8hn7Ux8CPL+2oBI7juNuj9d0ndhTcznq2ODBps9cQ==} engines: {node: '>=18'} node-source-walk@6.0.2: @@ -16122,11 +16123,11 @@ packages: resolution: {integrity: sha512-aZwGpamFO61g3OlfT7OQCHqhGnW43ieH9WZeP7QxN/G/jS4jfqUkZxoryvJgVPEcrl5NL/ggHsSmLMHuH64Lhg==} engines: {node: '>=4'} - update-browserslist-db@1.2.3: - resolution: {integrity: sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w==} + update-browserslist-db@1.3.2: + resolution: {integrity: sha512-UQ+MSxlhRm1bzjhU+DcuXfjFO1FzNtqhK5+9Yvlp90ItDLk5vT932A0rFu619nf7RVS+Y/VeaUW1jaRDqZ8VJw==} hasBin: true peerDependencies: - browserslist: '>= 4.21.0' + browserslist: ^4.28.7 uri-js@4.4.1: resolution: {integrity: sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==} @@ -17110,7 +17111,7 @@ snapshots: ansi-colors: 4.1.3 autoprefixer: 10.4.21(postcss@8.5.23) babel-loader: 10.0.0(@babel/core@7.29.7)(webpack@5.105.0(@swc/core@1.15.46(@swc/helpers@0.5.23))(esbuild@0.28.1)) - browserslist: 4.28.6 + browserslist: 4.28.8 copy-webpack-plugin: 14.0.0(webpack@5.105.0(@swc/core@1.15.46(@swc/helpers@0.5.23))(esbuild@0.28.1)) css-loader: 7.1.2(webpack@5.105.0(@swc/core@1.15.46(@swc/helpers@0.5.23))(esbuild@0.28.1)) esbuild-wasm: 0.28.1 @@ -17199,7 +17200,7 @@ snapshots: ansi-colors: 4.1.3 autoprefixer: 10.4.21(postcss@8.5.23) babel-loader: 10.0.0(@babel/core@7.29.7)(webpack@5.105.0(@swc/core@1.15.46(@swc/helpers@0.5.23))(esbuild@0.28.1)) - browserslist: 4.28.6 + browserslist: 4.28.8 copy-webpack-plugin: 14.0.0(webpack@5.105.0(@swc/core@1.15.46(@swc/helpers@0.5.23))(esbuild@0.28.1)) css-loader: 7.1.2(webpack@5.105.0(@swc/core@1.15.46(@swc/helpers@0.5.23))(esbuild@0.28.1)) esbuild-wasm: 0.28.1 @@ -17288,7 +17289,7 @@ snapshots: ansi-colors: 4.1.3 autoprefixer: 10.4.27(postcss@8.5.23) babel-loader: 10.0.0(@babel/core@7.29.7)(webpack@5.105.2(@swc/core@1.15.46(@swc/helpers@0.5.23))(esbuild@0.28.1)) - browserslist: 4.28.6 + browserslist: 4.28.8 copy-webpack-plugin: 14.0.0(webpack@5.105.2(@swc/core@1.15.46(@swc/helpers@0.5.23))(esbuild@0.28.1)) css-loader: 7.1.3(webpack@5.105.2(@swc/core@1.15.46(@swc/helpers@0.5.23))(esbuild@0.28.1)) esbuild-wasm: 0.28.1 @@ -17453,7 +17454,7 @@ snapshots: '@inquirer/confirm': 5.1.14(@types/node@20.11.17) '@vitejs/plugin-basic-ssl': 2.1.0(vite@7.3.6(@types/node@20.11.17)(jiti@2.7.0)(less@4.8.1)(lightningcss@1.32.0)(sass-embedded@1.100.0)(sass@1.90.0)(terser@5.43.1)(yaml@2.9.0)) beasties: 0.3.5 - browserslist: 4.28.6 + browserslist: 4.28.8 esbuild: 0.28.1 https-proxy-agent: 7.0.6(supports-color@7.2.0) istanbul-lib-instrument: 6.0.3 @@ -17507,7 +17508,7 @@ snapshots: '@inquirer/confirm': 5.1.14(@types/node@20.19.43) '@vitejs/plugin-basic-ssl': 2.1.0(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.8.1)(lightningcss@1.32.0)(sass-embedded@1.100.0)(sass@1.90.0)(terser@5.43.1)(yaml@2.9.0)) beasties: 0.3.5 - browserslist: 4.28.6 + browserslist: 4.28.8 esbuild: 0.28.1 https-proxy-agent: 7.0.6(supports-color@7.2.0) istanbul-lib-instrument: 6.0.3 @@ -17561,7 +17562,7 @@ snapshots: '@inquirer/confirm': 5.1.21(@types/node@20.12.8) '@vitejs/plugin-basic-ssl': 2.1.4(vite@7.3.6(@types/node@20.12.8)(jiti@2.7.0)(less@4.8.1)(lightningcss@1.32.0)(sass-embedded@1.100.0)(sass@1.97.3)(terser@5.46.0)(yaml@2.9.0)) beasties: 0.4.1 - browserslist: 4.28.6 + browserslist: 4.28.8 esbuild: 0.28.1 https-proxy-agent: 7.0.6(supports-color@7.2.0) istanbul-lib-instrument: 6.0.3 @@ -17924,7 +17925,7 @@ snapshots: dependencies: '@babel/compat-data': 7.29.7 '@babel/helper-validator-option': 7.29.7 - browserslist: 4.28.6 + browserslist: 4.28.8 lru-cache: 5.1.1 semver: 6.3.1 @@ -20820,7 +20821,7 @@ snapshots: '@parcel/utils': 2.16.4 '@parcel/workers': 2.16.4(@parcel/core@2.16.4(@swc/helpers@0.5.23)) base-x: 3.0.11 - browserslist: 4.28.6 + browserslist: 4.28.8 clone: 2.1.2 dotenv: 16.6.1 dotenv-expand: 11.0.7 @@ -20897,7 +20898,7 @@ snapshots: '@parcel/plugin': 2.16.4(@parcel/core@2.16.4(@swc/helpers@0.5.23)) '@parcel/source-map': 2.1.1 '@parcel/utils': 2.16.4 - browserslist: 4.28.6 + browserslist: 4.28.8 lightningcss: 1.32.0 nullthrows: 1.1.1 transitivePeerDependencies: @@ -21157,7 +21158,7 @@ snapshots: '@parcel/plugin': 2.16.4(@parcel/core@2.16.4(@swc/helpers@0.5.23)) '@parcel/source-map': 2.1.1 '@parcel/utils': 2.16.4 - browserslist: 4.28.6 + browserslist: 4.28.8 json5: 2.2.3 nullthrows: 1.1.1 semver: 7.8.5 @@ -21171,7 +21172,7 @@ snapshots: '@parcel/plugin': 2.16.4(@parcel/core@2.16.4(@swc/helpers@0.5.23)) '@parcel/source-map': 2.1.1 '@parcel/utils': 2.16.4 - browserslist: 4.28.6 + browserslist: 4.28.8 lightningcss: 1.32.0 nullthrows: 1.1.1 transitivePeerDependencies: @@ -21207,7 +21208,7 @@ snapshots: '@parcel/utils': 2.16.4 '@parcel/workers': 2.16.4(@parcel/core@2.16.4(@swc/helpers@0.5.23)) '@swc/helpers': 0.5.23 - browserslist: 4.28.6 + browserslist: 4.28.8 nullthrows: 1.1.1 regenerator-runtime: 0.14.1 semver: 7.8.5 @@ -23881,16 +23882,6 @@ snapshots: dependencies: buffer-equal: 1.0.1 - archiver-utils@5.0.2: - dependencies: - glob: 10.5.0 - graceful-fs: 4.2.11 - is-stream: 2.0.1 - lazystream: 1.0.1 - lodash: 4.18.1 - normalize-path: 3.0.0 - readable-stream: 4.7.0 - archiver@8.0.0: dependencies: async: 3.2.6 @@ -24104,7 +24095,7 @@ snapshots: autoprefixer@10.4.21(postcss@8.5.23): dependencies: - browserslist: 4.28.6 + browserslist: 4.28.8 caniuse-lite: 1.0.30001806 fraction.js: 4.3.7 normalize-range: 0.1.2 @@ -24114,7 +24105,7 @@ snapshots: autoprefixer@10.4.27(postcss@8.5.23): dependencies: - browserslist: 4.28.6 + browserslist: 4.28.8 caniuse-lite: 1.0.30001806 fraction.js: 5.3.4 picocolors: 1.1.1 @@ -24123,7 +24114,7 @@ snapshots: autoprefixer@10.5.4(postcss@8.5.23): dependencies: - browserslist: 4.28.6 + browserslist: 4.28.8 caniuse-lite: 1.0.30001806 fraction.js: 5.3.4 picocolors: 1.1.1 @@ -24523,7 +24514,7 @@ snapshots: base64id@2.0.0: {} - baseline-browser-mapping@2.10.43: {} + baseline-browser-mapping@2.11.20: {} basic-auth@2.0.1: dependencies: @@ -24753,13 +24744,13 @@ snapshots: vm-browserify: 1.1.2 xtend: 4.0.2 - browserslist@4.28.6: + browserslist@4.28.8: dependencies: - baseline-browser-mapping: 2.10.43 - caniuse-lite: 1.0.30001806 - electron-to-chromium: 1.5.393 - node-releases: 2.0.51 - update-browserslist-db: 1.2.3(browserslist@4.28.6) + baseline-browser-mapping: 2.11.20 + caniuse-lite: 1.0.30001810 + electron-to-chromium: 1.5.418 + node-releases: 2.0.54 + update-browserslist-db: 1.3.2(browserslist@4.28.8) bs-logger@0.2.6: dependencies: @@ -24874,6 +24865,8 @@ snapshots: caniuse-lite@1.0.30001806: {} + caniuse-lite@1.0.30001810: {} + canvg@3.0.11: dependencies: '@babel/runtime': 7.29.7 @@ -25381,7 +25374,7 @@ snapshots: core-js-compat@3.49.0: dependencies: - browserslist: 4.28.6 + browserslist: 4.28.8 core-js@2.6.12: {} @@ -26184,7 +26177,7 @@ snapshots: ejs@5.0.1: {} - electron-to-chromium@1.5.393: {} + electron-to-chromium@1.5.418: {} elegant-spinner@1.0.1: {} @@ -31761,7 +31754,7 @@ snapshots: '@rollup/wasm-node': 4.62.2 ajv: 8.20.0 ansi-colors: 4.1.3 - browserslist: 4.28.6 + browserslist: 4.28.8 chokidar: 4.0.3 commander: 14.0.3 dependency-graph: 1.0.0 @@ -31791,7 +31784,7 @@ snapshots: '@rollup/plugin-json': 6.1.0(rollup@4.59.0) '@rollup/wasm-node': 4.62.2 ajv: 8.20.0 - browserslist: 4.28.6 + browserslist: 4.28.8 chokidar: 5.0.0 commander: 14.0.3 dependency-graph: 1.0.0 @@ -31882,7 +31875,7 @@ snapshots: uuid: 14.0.1 which: 2.0.2 - node-releases@2.0.51: {} + node-releases@2.0.54: {} node-source-walk@6.0.2: dependencies: @@ -36150,9 +36143,9 @@ snapshots: upath@1.2.0: {} - update-browserslist-db@1.2.3(browserslist@4.28.6): + update-browserslist-db@1.3.2(browserslist@4.28.8): dependencies: - browserslist: 4.28.6 + browserslist: 4.28.8 escalade: 3.2.0 picocolors: 1.1.1 @@ -36900,7 +36893,7 @@ snapshots: '@webassemblyjs/wasm-parser': 1.14.1 acorn: 8.17.0 acorn-import-phases: 1.0.4(acorn@8.17.0) - browserslist: 4.28.6 + browserslist: 4.28.8 chrome-trace-event: 1.0.4 enhanced-resolve: 5.24.2 es-module-lexer: 2.3.1 @@ -36932,7 +36925,7 @@ snapshots: '@webassemblyjs/wasm-parser': 1.14.1 acorn: 8.17.0 acorn-import-phases: 1.0.4(acorn@8.17.0) - browserslist: 4.28.6 + browserslist: 4.28.8 chrome-trace-event: 1.0.4 enhanced-resolve: 5.24.2 es-module-lexer: 2.3.1 @@ -36964,7 +36957,7 @@ snapshots: '@webassemblyjs/wasm-parser': 1.14.1 acorn: 8.17.0 acorn-import-phases: 1.0.4(acorn@8.17.0) - browserslist: 4.28.6 + browserslist: 4.28.8 chrome-trace-event: 1.0.4 enhanced-resolve: 5.24.2 es-module-lexer: 2.3.1 @@ -36996,7 +36989,7 @@ snapshots: '@webassemblyjs/wasm-parser': 1.14.1 acorn: 8.17.0 acorn-import-phases: 1.0.4(acorn@8.17.0) - browserslist: 4.28.6 + browserslist: 4.28.8 chrome-trace-event: 1.0.4 enhanced-resolve: 5.24.2 es-module-lexer: 2.3.1 @@ -37028,7 +37021,7 @@ snapshots: '@webassemblyjs/wasm-parser': 1.14.1 acorn: 8.17.0 acorn-import-phases: 1.0.4(acorn@8.17.0) - browserslist: 4.28.6 + browserslist: 4.28.8 chrome-trace-event: 1.0.4 enhanced-resolve: 5.24.2 es-module-lexer: 2.3.1 @@ -37062,7 +37055,7 @@ snapshots: '@webassemblyjs/wasm-parser': 1.14.1 acorn: 8.17.0 acorn-import-phases: 1.0.4(acorn@8.17.0) - browserslist: 4.28.6 + browserslist: 4.28.8 chrome-trace-event: 1.0.4 enhanced-resolve: 5.24.2 es-module-lexer: 2.3.1 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 95e64f44c5f9..7fe8110e81da 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -64,6 +64,7 @@ overrides: "@hono/node-server@<2.0.12": ^2.0.12 "dompurify@<=3.4.12": "^3.4.13" "nanoid@<3.3.17": "^3.3.17" + "browserslist@<4.28.7": "^4.28.7" catalog: axe-core: ^4.12.1