Repository navigation
Tags
Tags
chore(deps): Update JavaScript dependencies (#673) * chore(deps): Update JavaScript dependencies * chore(deps): Update puppeteer and cssnano to fix vulnerabilities Resolve high/moderate yarn audit findings by moving to patched versions: - puppeteer ^23.0.2 -> ^25.12.0: drops bundled extract-zip (no patch exists; @puppeteer/browsers 3.x uses modern-tar) and removes the proxy-agent -> basic-ftp chain. - cssnano ^5.0.6 -> ^9.3.2: pulls postcss-selector-parser 7.1.6. - .nvmrc 20 -> 26 to match CI (setup-node) and docker/Dockerfile, as required by the newer puppeteer/cssnano Node engine ranges. Remaining audit findings (sprintf-js, braces) are dev-only lint tooling; braces has no upstream patch and sprintf-js requires a major eslint upgrade. Co-Authored-By: Claude <noreply@anthropic.com> Model: claude-opus-4-8 (thinking: medium) * chore(deps): Upgrade eslint and typescript-eslint stack Clear the remaining dev-only yarn audit findings: - eslint ^7.29.0 -> ^8.57.1: switches to js-yaml 4, dropping the argparse -> sprintf-js chain. - @typescript-eslint/eslint-plugin and parser ^4.28.1 -> ^8.46.0: removes the globby -> fast-glob -> micromatch -> braces chain. Stays on the eslintrc config format (no flat-config migration). yarn audit now reports 0 vulnerabilities. Co-Authored-By: Claude <noreply@anthropic.com> Model: claude-opus-4-8 (thinking: medium) --------- Co-authored-by: Claude <noreply@anthropic.com>
chore(deps): bump wagtail from 7.4.2 to 7.4.3 in /requirements (#657) Bumps [wagtail](https://github.com/wagtail/wagtail) from 7.4.2 to 7.4.3. - [Release notes](https://github.com/wagtail/wagtail/releases) - [Changelog](https://github.com/wagtail/wagtail/blob/main/CHANGELOG.txt) - [Commits](wagtail/wagtail@v7.4.2...v7.4.3) --- updated-dependencies: - dependency-name: wagtail dependency-version: 7.4.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
chore(deps): bump lodash from 4.17.23 to 4.18.1 (#616) Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.23...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
chore(deps): bump wagtail from 7.0.5 to 7.0.6 in /requirements (#603) Bumps [wagtail](https://github.com/wagtail/wagtail) from 7.0.5 to 7.0.6. - [Release notes](https://github.com/wagtail/wagtail/releases) - [Changelog](https://github.com/wagtail/wagtail/blob/main/CHANGELOG.txt) - [Commits](wagtail/wagtail@v7.0.5...v7.0.6) --- updated-dependencies: - dependency-name: wagtail dependency-version: 7.0.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
PreviousNext