Skip to content

Commit c5f2171

Browse files
committed
chore(security): tighten override matchers + add ajv/socket.io-parser/postcss/yaml/semver/defu
1 parent 3ca8f9f commit c5f2171

2 files changed

Lines changed: 201 additions & 295 deletions

File tree

package.json

Lines changed: 12 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -102,16 +102,23 @@
102102
"systeminformation@>=5.0.0 <5.31.0": "^5.31.0",
103103
"lodash@>=4.0.0 <4.18.0": "^4.18.0",
104104
"lodash-es@>=4.0.0 <4.18.0": "^4.18.0",
105-
"dompurify@<3.4.0": "^3.4.1",
105+
"dompurify@>=3 <3.4.0": "^3.4.1",
106106
"vite@>=5.0.0 <6.4.2": "^6.4.2",
107107
"rollup@>=4 <4.59.0": "^4.59.0",
108-
"flatted@<3.4.2": "^3.4.2",
109-
"picomatch@>=4.0.0 <4.0.4": "^4.0.4",
108+
"flatted@>=3 <3.4.2": "^3.4.2",
109+
"picomatch@>=2 <2.3.2": "^2.3.2",
110+
"picomatch@>=4 <4.0.4": "^4.0.4",
110111
"minimatch@>=3 <3.1.3": "^3.1.3",
111-
"protobufjs@<7.5.5": "^7.5.5",
112+
"protobufjs@>=7 <7.5.5": "^7.5.5",
112113
"fast-xml-parser@>=4 <4.5.5": "^4.5.5",
113114
"fast-xml-parser@>=5 <5.7.0": "^5.7.0",
114-
"path-to-regexp@<0.1.13": "^0.1.13"
115+
"path-to-regexp@>=0.1 <0.1.13": "^0.1.13",
116+
"ajv@>=8 <8.18.0": "^8.18.0",
117+
"socket.io-parser@>=4 <4.2.6": "^4.2.6",
118+
"postcss@>=8 <8.5.10": "^8.5.10",
119+
"yaml@>=2 <2.8.3": "^2.8.3",
120+
"semver@>=5 <5.7.2": "^5.7.2",
121+
"defu@>=6 <6.1.5": "^6.1.5"
115122
},
116123
"onlyBuiltDependencies": [
117124
"@depot/cli",

0 commit comments

Comments
 (0)