mirror of
https://github.com/MODSetter/SurfSense.git
synced 2026-10-19 15:44:27 +00:00
eae437648d
Clears the 7 open Dependabot alerts on surfsense_backend/scripts/whatsapp-bridge/package-lock.json. All four packages are transitive, so only the lockfile changes; package.json is untouched and lockfileVersion stays 3. sharp 0.34.5 -> 0.35.4 (peer dep of @whiskeysockets/baileys; bundled libvips 1.2.4 -> 1.3.3) - GHSA-f88m-g3jw-g9cj (libvips CVE-2026-33327, -33328, -35590, -35591) - GHSA-rgj7-g3m4-5g8c (libheif) protobufjs 7.6.1 -> 7.6.6 (via baileys and libsignal) - GHSA-f38q-mgvj-vph7 (CVE-2026-54269) - GHSA-j3f2-48v5-ccww (CVE-2026-59877) qs 6.15.2 -> 6.16.0 (via express and body-parser) - GHSA-4mjr-xmp4-gh2g (CVE-2026-82417) - GHSA-x5fp-wj9c-mxmx (CVE-2026-82562) body-parser 2.2.2 -> 2.3.0 (via express 5.2.1) - GHSA-v422-hmwv-36x6 (CVE-2026-12590) Moved along with them: semver 7.8.5 (required by sharp 0.35), side-channel 1.1.1 (required by qs 6.16), content-type 2.1.0 nested under body-parser, @emnapi/runtime 1.11.3 (sharp-wasm32), and @protobufjs/inquire dropped by protobufjs 7.6.6. sharp 0.35 needs Node >= 20.9.0; the bridge image (node:20-alpine) ships 20.20.x. sharp 0.35.5 (published 2026-09-27) was skipped as younger than seven days, so versions were resolved with npm update --before=2026-09-23. Deferred: nothing. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| docker | ||
| whatsapp-bridge | ||
| backfill_image_artifacts.py | ||
| backfill_podcast_artifacts.py | ||
| backfill_video_artifacts.py | ||
| check_migration_flow.py | ||
| check_zero_publication_bootstrap.py | ||
| correct_license_email.py | ||
| create_sandbox_snapshot.py | ||
| e2e_amazon_scraper.py | ||
| e2e_google_maps_deep.py | ||
| e2e_google_maps_scraper.py | ||
| e2e_google_search.py | ||
| e2e_indeed_scraper.py | ||
| e2e_instagram_scraper.py | ||
| e2e_phase3_crawl_billing.py | ||
| e2e_reddit_scraper.py | ||
| e2e_tiktok_scrape.py | ||
| e2e_walmart_scraper.py | ||
| e2e_youtube_scraper.py | ||
| issue_enterprise_license.py | ||
| migrate_knowledge_store.py | ||
| opensandbox_spike.py | ||
| probe_openrouter_dead_models.py | ||
| purge_hosted_accounts.py | ||
| register_webhook.py | ||
| revoke_refresh_tokens_cutover.py | ||
| scale_google_search.py | ||
| stress_google_search.py | ||
| sweep_model_compatibility.py | ||
| verify_chat_image_capability.py | ||