vrr/Pulse
2
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-07-09 16:00:59 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 7

chore(cloudcp/portal): patch dev-dependency advisories

Browse source 
Bump vitest 3.2.4 to 3.2.7 (clears critical GHSA-5xrq-8626-4rwp) and pin
patched transitives via overrides: vite ^7.3.5, esbuild 0.28.1 ($esbuild),
form-data ^4.0.6, postcss ^8.5.10, ws ^8.21.0. Clears 9 Dependabot alerts
(1 critical, 4 high, 3 medium, 1 low) plus a pre-existing ws high-severity
that npm audit surfaced. npm audit now reports 0 vulnerabilities; build,
test, and typecheck green. Refreshes dist build_manifest source_hash for the
new package.json.
This commit is contained in:
rcourtman 2026-07-08 08:25:45 +01:00
parent 99a9560c1f
commit a37c38f0ec
3 changed files with 333 additions and 771 deletions
Download patch file Download diff file Expand all files Collapse all files

2
internal/cloudcp/portal/dist/build_manifest.json vendored
View file

@ -1,5 +1,5 @@
{
"source_hash": "ba206fd32b57fa162bf26df7e590c49f43a953f096c908858a2ddd79c8909396",
"source_hash": "ece2119b2e5fc7be4f49d6b42ab4a214497afac1670c5cd14486678ee54b78e8",
"build_inputs": [
"package.json",
"tsconfig.json",

1091
internal/cloudcp/portal/frontend/package-lock.json generated
View file

File diff suppressed because it is too large Load diff

11
internal/cloudcp/portal/frontend/package.json
View file

@ -9,9 +9,16 @@
"typecheck": "tsc --noEmit -p tsconfig.json"
},
"devDependencies": {
"esbuild": "^0.25.12",
"esbuild": "^0.28.1",
"jsdom": "^24.1.0",
"typescript": "^5.9.3",
"vitest": "^3.2.4"
"vitest": "^3.2.6"
},
"overrides": {
"esbuild": "$esbuild",
"vite": "^7.3.5",
"form-data": "^4.0.6",
"postcss": "^8.5.10",
"ws": "^8.21.0"
}
}