sorb/ThreadNet-Web
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 4 Wiki Activity

Satisfy pnpm audit (#34209)

Browse Source 
* Update pnpm

* Update js-sdk lock

* Switch from corepack to a manual pnpm install in docker otherwise it gets upset when js-sdk has a different pnpm version

* Fix pnpm install

* Fix pnpm install

* Install yarn separately now that we no longer corepack

* Iterate

* Satisfy pnpm audit

* Fix bad merge conflict
This commit is contained in:
Michael Telatynski
2026-07-13 14:40:31 +00:00
committed by GitHub
parent 825fab6595
commit f433b5b9eb
2 changed files with 332 additions and 324 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pnpm-lock.yaml
Generated
+308 -313
View File
File diff suppressed because it is too large Load Diff
pnpm-workspace.yaml
+24 -11
View File
@@ -116,22 +116,35 @@ overrides:
"@types/react": "catalog:"
"@types/react-dom": "catalog:"
caniuse-lite: 1.0.30001799
markdown-it: 14.1.1
matrix-widget-api: "^1.17.0"
"@types/node": 25.9.3
config-file-ts: 0.2.8-rc1
node-abi: 4.33.0
"@types/pg-pool": 2.0.7
axios@>1.0.0 <=1.15.0: 1.16.1
esbuild@<=0.24.2: 0.27.4
esbuild@~0.27.0: 0.27.4
follow-redirects@1.15.11: 1.16.0
brace-expansion@>=5 <=5.0.5: 5.0.6
ip-address@>=10 <10.1.1: 10.1.1
uuid@>=11 <11.1.1: 11.1.1
yaml@>=2 <2.8.3: 2.8.4
protobufjs@7 <7.5.8: 7.6.1
"@protobufjs/utf8@1 <1.1.1": 1.1.1
# https://github.com/advisories/GHSA-6v5v-wf23-fmfq
markdown-it: ^14.3.0
axios@>1.0.0 <=1.16.1: ^1.16.1
# https://github.com/advisories/GHSA-g7r4-m6w7-qqqr
esbuild@<=0.27.4: 0.27.4
brace-expansion@>=5 <=5.0.5: ^5.0.6
ip-address@>=10 <10.1.1: ^10.1.1
yaml@>=2 <2.8.3: ^2.8.4
# https://github.com/advisories/GHSA-f38q-mgvj-vph7
protobufjs@7 <7.5.8: ^7.6.3
"@protobufjs/utf8@1 <1.1.1": ^1.1.1
# https://github.com/advisories/GHSA-vmh5-mc38-953g
# https://github.com/advisories/GHSA-vxpw-j846-p89q
# https://github.com/advisories/GHSA-hm92-r4w5-c3mj
# https://github.com/advisories/GHSA-p88m-4jfj-68fv
# https://github.com/advisories/GHSA-pr7r-676h-xcf6
# https://github.com/advisories/GHSA-35p6-xmwp-9g52
# https://github.com/advisories/GHSA-g8m3-5g58-fq7m
undici@7 <7.28.0: ^7.28.0
# https://github.com/advisories/GHSA-fx2h-pf6j-xcff
# https://github.com/advisories/GHSA-4w7w-66w2-5vf9
# https://github.com/advisories/GHSA-v6wh-96g9-6wx3
vite@5: ^6.4.3
vite@6 <6.4.3: ^6.4.3
# Workaround for https://github.com/electron/electron/issues/51619
yauzl: "^3.3.1"
# Convince api-extractor to use an up to date Typescript version