From 0d38513193561aaf1592655b7736ae6d48977c3e Mon Sep 17 00:00:00 2001 From: Thomas Kosiewski Date: Thu, 5 Nov 2026 21:42:25 +0000 Subject: [PATCH 1/2] fix(deps): clear the moderate dev-dependency advisories that Dependabot cannot fix --- package.json | 9 +-- pnpm-lock.yaml | 184 +++++++++++++++++++++++-------------------------- 2 files changed, 93 insertions(+), 100 deletions(-) diff --git a/package.json b/package.json index 9a28beee..931cd40e 100644 --- a/package.json +++ b/package.json @@ -71,10 +71,10 @@ "oxlint": "1.62.0", "oxlint-tsgolint": "0.22.1", "release-please": "17.9.0", - "rimraf": "6.1.3", + "rimraf": "6.1.4", "tsx": "4.21.0", "typescript": "5.9.3", - "vitest": "4.1.11" + "vitest": "4.1.12" }, "dependencies": { "commander": "14.0.3", @@ -100,12 +100,13 @@ ], "overrides": { "@xmldom/xmldom": "0.8.15", - "brace-expansion": "5.0.11", + "brace-expansion": "5.0.12", "esbuild": "0.28.1", "handlebars": "4.7.10", "js-yaml": "4.3.2", + "minimatch": "11.0.4", "nanoid": "3.3.18", - "postcss": "8.5.18", + "postcss": "8.5.32", "source-map-js": "1.2.2", "tinypool": "2.1.2", "vite": "8.1.6", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 3a51019c..cc026cce 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -6,12 +6,13 @@ settings: overrides: '@xmldom/xmldom': 0.8.15 - brace-expansion: 5.0.11 + brace-expansion: 5.0.12 esbuild: 0.28.1 handlebars: 4.7.10 js-yaml: 4.3.2 + minimatch: 11.0.4 nanoid: 3.3.18 - postcss: 8.5.18 + postcss: 8.5.32 source-map-js: 1.2.2 tinypool: 2.1.2 vite: 8.1.6 @@ -65,8 +66,8 @@ importers: specifier: 17.9.0 version: 17.9.0 rimraf: - specifier: 6.1.3 - version: 6.1.3 + specifier: 6.1.4 + version: 6.1.4 tsx: specifier: 4.21.0 version: 4.21.0 @@ -74,8 +75,8 @@ importers: specifier: 5.9.3 version: 5.9.3 vitest: - specifier: 4.1.11 - version: 4.1.11(@types/node@25.5.0)(vite@8.1.6(@types/node@25.5.0)(esbuild@0.28.1)(tsx@4.21.0)(yaml@2.8.4)) + specifier: 4.1.12 + version: 4.1.12(@types/node@25.5.0)(vite@8.1.6(@types/node@25.5.0)(esbuild@0.28.1)(tsx@4.21.0)(yaml@2.8.4)) optionalDependencies: '@coder/libghostty-vt-node': specifier: 0.1.0-beta.7 @@ -274,6 +275,9 @@ packages: '@iarna/toml@3.0.0': resolution: {integrity: sha512-td6ZUkz2oS3VeleBcN+m//Q6HlCFCPrnI0FZhrt/h4XqLEdOyYp2u21nd8MdsR+WJy5r9PTDaHTDDfhf4H4l6Q==} + '@isaacs/nonrecursive-glob-match@1.0.3': + resolution: {integrity: sha512-SI7kyKHq4XXDRozw+r9GlRZkia1ZkFrpLW98r2IC2Bpr8YkFGE3fvjzmxCG0x78A++69HmDNrDvSMYBZmHGpKA==} + '@jridgewell/sourcemap-codec@1.5.5': resolution: {integrity: sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==} @@ -756,11 +760,11 @@ packages: '@types/unist@2.0.11': resolution: {integrity: sha512-CmBKiL6NNo/OqgmMn95Fk9Whlp2mtvIv+KNpQKN2F4SjvrEesubTRWGYSg+BnWZOnlCaSTU1sMpsBOzgbYhnsA==} - '@vitest/expect@4.1.11': - resolution: {integrity: sha512-VX2x5vNJXET47KAFzwERI+KRMtTTCSWTfSMKsW7JsUsXV4psq++e3DvZpuTDOpHcxytiDs6p2nhVb2tVDiiUYw==} + '@vitest/expect@4.1.12': + resolution: {integrity: sha512-vFlTt+YEu9WBpNjdGayNmlMVzrWPi1+sv853/7t2FU7hpO5gAFBKHzQmkCq5Xjpr+evegF2994LQT3hF3mRlqQ==} - '@vitest/mocker@4.1.11': - resolution: {integrity: sha512-2XJVD55d1o5AZous5CCGKS74g/riOj9odEt2bQpCVZeblHyHdnMeFl4jl0XjU21stf4mbjUkew2eXQZt65g5CQ==} + '@vitest/mocker@4.1.12': + resolution: {integrity: sha512-fKShNpKZzupWZuY0z7egydvL0sqW4INEZBEExMBMAa6izlENEVHwoXgdaTCaBZ5fwlr4xf2o1wXC83n9RpO+NA==} peerDependencies: msw: ^2.4.9 vite: 8.1.6 @@ -770,20 +774,20 @@ packages: vite: optional: true - '@vitest/pretty-format@4.1.11': - resolution: {integrity: sha512-yiZzPbGTS9Sr/JpFl8zHrcIkAofNbFV6k21vIgQN/cY/oxZeXhJv5sc/MBJ5jFKWmWs+oJHw0UXLZjmf931+Vw==} + '@vitest/pretty-format@4.1.12': + resolution: {integrity: sha512-XW9O8+Mxx4VpCtkYdMJLZQQwsVryP9wk7cPKDxtXFfwSak6yRh5+2fep/Y0XF/ElBvJHq8bcYdi6aeuai0opZA==} - '@vitest/runner@4.1.11': - resolution: {integrity: sha512-LztvUgdwMNJMIkj3hQnnxiC2Xy1zNxq928W/xhjCLaNCzqTZOudjwbQf6v9IntZGPw132i2Lq2rgTRZHD3JHNw==} + '@vitest/runner@4.1.12': + resolution: {integrity: sha512-NKlVKCr5QnCe8jijdMnmkpHHU+WTqiLFR6G0pHji9uRjXK9xJl1k1nTw6F3pOOj2PDcsDt2GKQMI7wIsaT491w==} - '@vitest/snapshot@4.1.11': - resolution: {integrity: sha512-pN7ikn1ON7h8ee4gIAp4AzyK+zBtJPzVbqOgu5LCEh4VaJVbPQcgYQYJIMGQPXVeJJq1fnfazis7a5pFNPahog==} + '@vitest/snapshot@4.1.12': + resolution: {integrity: sha512-ko1y1Qgb/slzQ9mr+b89Cuqud8WG1TKtsPD8r7ZUBdvVOGt85Af2HwCqHujrhwJq95hs/9RM7fcAPg57o1vlzw==} - '@vitest/spy@4.1.11': - resolution: {integrity: sha512-apNa/prQy2qCeywhnixOHPRCgGNhvg7T4Dapfl1GahLp/R+uhBm5cPyFoNVyqsNd2h1nJxL6BqqdIjiABL60YA==} + '@vitest/spy@4.1.12': + resolution: {integrity: sha512-RGq9x4JNGNTZHEJxvN0oSiJjeSCExm0n2gZKKJZHY9cX5AVA6M7VJILBT3ZJ/tJ/0J9uWT7fETV9/btoi//vSg==} - '@vitest/utils@4.1.11': - resolution: {integrity: sha512-zTCVGpyFsGWBhllOyKlTw/vnr6D9qxsfSDyfbyZmTyjHw5N/VuvzHpHoQjm2ZJzn4RJgx5w4r7V0er69CmLgPQ==} + '@vitest/utils@4.1.12': + resolution: {integrity: sha512-Q3awXrwOfEV+qc3WmO5ONyE0yO7Q1gQ9/oyHxGLZ/pl7N3NO/ZztqQwKLuwMkV+CA1JYSIeO3gkHnRDIo4AVaA==} '@xmldom/xmldom@0.8.15': resolution: {integrity: sha512-/5NV/vDALVFDXgLmfsy9TRCBlKwO2LNBFzpzvb9iIj+jR+eSc6DLYYvVOdivT/jm7MtU6TebYuRmzEOI7w40UA==} @@ -844,8 +848,8 @@ packages: boolbase@1.0.0: resolution: {integrity: sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==} - brace-expansion@5.0.11: - resolution: {integrity: sha512-awigjhi6cLTh90bdw6+QJ9CtmJmyYhEIi70iCbc8Rozn04Fw9FeQIBjv/E22FFGuCGx1bLJyUfB64x/szUSXUg==} + brace-expansion@5.0.12: + resolution: {integrity: sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==} engines: {node: 20 || >=22} camelcase-keys@6.2.2: @@ -1071,8 +1075,8 @@ packages: ghostty-web@0.4.0: resolution: {integrity: sha512-0puDBik2qapbD/QQBW9o5ZHfXnZBqZWx/ctBiVtKZ6ZLds4NYb+wZuw1cRLXZk9zYovIQ908z3rvFhexAvc5Hg==} - glob@13.0.6: - resolution: {integrity: sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==} + glob@14.0.3: + resolution: {integrity: sha512-A1vjIwC3qpdCso45Iw127gnp7sPhqgY8lUQhDrArIs+GbmfaaVPFuoyy7WyLT9EPZCRZ7j7aLdwUhQmHWesEow==} engines: {node: 18 || 20 || >=22} handlebars@4.7.10: @@ -1301,9 +1305,9 @@ packages: resolution: {integrity: sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==} engines: {node: '>=4'} - minimatch@10.2.5: - resolution: {integrity: sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==} - engines: {node: 18 || 20 || >=22} + minimatch@11.0.4: + resolution: {integrity: sha512-/UJ1dEoVQTjPNDh6SGlUo+ueLMmoHTas4q+8yaAR/5t6nLAIiBDJtoYUh20IYleix7ehiQkgczb84PE3uzHkxg==} + engines: {node: 20 || >=22} minimist-options@4.1.0: resolution: {integrity: sha512-Q4r8ghd80yhO/0j1O3B2BjweX3fiHg9cdOwjJd2J76Q135c+NDxGCqdYKQ1SKBuFfgWbAUzBfvYjPUEeNgqN1A==} @@ -1420,8 +1424,8 @@ packages: path-parse@1.0.7: resolution: {integrity: sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==} - path-scurry@2.0.2: - resolution: {integrity: sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==} + path-scurry@3.0.0: + resolution: {integrity: sha512-1pTbQqH1wIwMi/eleQ5leFTTCkzFsPcgXNjwOA8YGGW/W4/kHT3dssE7Z6NH+zuqNLOzOB0uaD61yl7cAcVhgg==} engines: {node: 18 || 20 || >=22} pathe@2.0.3: @@ -1430,10 +1434,6 @@ packages: picocolors@1.1.1: resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==} - picomatch@4.0.4: - resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==} - engines: {node: '>=12'} - picomatch@4.0.7: resolution: {integrity: sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==} engines: {node: '>=12'} @@ -1448,8 +1448,8 @@ packages: engines: {node: '>=20'} hasBin: true - postcss@8.5.18: - resolution: {integrity: sha512-xdB1oSLHbz1vRWgCDalrCqEFTWzFlhqFC5tIHLMOSUIjhm3XXQ1qrFy8S/ESr1JYRRXqM3c1QFiMZUJdUTqyMQ==} + postcss@8.5.32: + resolution: {integrity: sha512-LJlKCCAUFKOuZxipUdYw1NzIITEsPcgyOG9LkvRJvuKj/bRzbuRY0ARXvL0pWGpsZvn8jku+LMep2eU0seHp8g==} engines: {node: ^10 || ^12 || >=14} quick-lru@4.0.1: @@ -1503,8 +1503,8 @@ packages: resolution: {integrity: sha512-XQBQ3I8W1Cge0Seh+6gjj03LbmRFWuoszgK9ooCpwYIrhhoO80pfq4cUkU5DkknwfOfFteRwlZ56PYOGYyFWdg==} engines: {node: '>= 4'} - rimraf@6.1.3: - resolution: {integrity: sha512-LKg+Cr2ZF61fkcaK1UdkH2yEBBKnYjTyWzTJT6KNPcSPaiT7HSdhtMXQuN5wkTX0Xu72KQ1l8S42rlmexS2hSA==} + rimraf@6.1.4: + resolution: {integrity: sha512-Fk3reQDVPZUMbEm7Zwxz03BWQMW3V5buSk9aU8OckTrO8A1nQtbqvYsAantGNermwsIsXcuOBqcoJ3HuMELctw==} engines: {node: 20 || >=22} hasBin: true @@ -1614,10 +1614,6 @@ packages: resolution: {integrity: sha512-dAqSqE/RabpBKI8+h26GfLq6Vb3JVXs30XYQjdMjaj/c2tS8IYYMbIzP599KtRj7c57/wYApb3QjgRgXmrCukA==} engines: {node: '>=18'} - tinyglobby@0.2.15: - resolution: {integrity: sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==} - engines: {node: '>=12.0.0'} - tinyglobby@0.2.17: resolution: {integrity: sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==} engines: {node: '>=12.0.0'} @@ -1742,20 +1738,20 @@ packages: yaml: optional: true - vitest@4.1.11: - resolution: {integrity: sha512-fhACrNXUidIbGSBr5FlbuBkO7VWC1ZyLl0DO4CU2DrQoAPxX84Ysxs+HeGQpii5lZWV1Q4gBZTTu49mF+A6Edw==} + vitest@4.1.12: + resolution: {integrity: sha512-5eWdz2yb3ajxWF3C8C4TjkXl7FGm3n2E/VlazALrQHzK7nYMSGFnCZto0bbPNl77AwkOZVLk0YnBAejUu0NiWA==} engines: {node: ^20.0.0 || ^22.0.0 || >=24.0.0} hasBin: true peerDependencies: '@edge-runtime/vm': '*' '@opentelemetry/api': ^1.9.0 '@types/node': ^20.0.0 || ^22.0.0 || >=24.0.0 - '@vitest/browser-playwright': 4.1.11 - '@vitest/browser-preview': 4.1.11 - '@vitest/browser-webdriverio': 4.1.11 - '@vitest/coverage-istanbul': 4.1.11 - '@vitest/coverage-v8': 4.1.11 - '@vitest/ui': 4.1.11 + '@vitest/browser-playwright': 4.1.12 + '@vitest/browser-preview': 4.1.12 + '@vitest/browser-webdriverio': ^4.1.11 + '@vitest/coverage-istanbul': 4.1.12 + '@vitest/coverage-v8': 4.1.12 + '@vitest/ui': 4.1.12 happy-dom: '*' jsdom: '*' vite: 8.1.6 @@ -1977,10 +1973,12 @@ snapshots: '@octokit/rest': 20.1.2 '@octokit/types': 13.10.0 js-yaml: 4.3.2 - minimatch: 10.2.5 + minimatch: 11.0.4 '@iarna/toml@3.0.0': {} + '@isaacs/nonrecursive-glob-match@1.0.3': {} + '@jridgewell/sourcemap-codec@1.5.5': {} '@jsep-plugin/assignment@1.3.0(jsep@1.4.0)': @@ -2278,44 +2276,44 @@ snapshots: '@types/unist@2.0.11': {} - '@vitest/expect@4.1.11': + '@vitest/expect@4.1.12': dependencies: '@standard-schema/spec': 1.1.0 '@types/chai': 5.2.3 - '@vitest/spy': 4.1.11 - '@vitest/utils': 4.1.11 + '@vitest/spy': 4.1.12 + '@vitest/utils': 4.1.12 chai: 6.2.2 tinyrainbow: 3.1.0 - '@vitest/mocker@4.1.11(vite@8.1.6(@types/node@25.5.0)(esbuild@0.28.1)(tsx@4.21.0)(yaml@2.8.4))': + '@vitest/mocker@4.1.12(vite@8.1.6(@types/node@25.5.0)(esbuild@0.28.1)(tsx@4.21.0)(yaml@2.8.4))': dependencies: - '@vitest/spy': 4.1.11 + '@vitest/spy': 4.1.12 estree-walker: 3.0.3 magic-string: 0.30.21 optionalDependencies: vite: 8.1.6(@types/node@25.5.0)(esbuild@0.28.1)(tsx@4.21.0)(yaml@2.8.4) - '@vitest/pretty-format@4.1.11': + '@vitest/pretty-format@4.1.12': dependencies: tinyrainbow: 3.1.0 - '@vitest/runner@4.1.11': + '@vitest/runner@4.1.12': dependencies: - '@vitest/utils': 4.1.11 + '@vitest/utils': 4.1.12 pathe: 2.0.3 - '@vitest/snapshot@4.1.11': + '@vitest/snapshot@4.1.12': dependencies: - '@vitest/pretty-format': 4.1.11 - '@vitest/utils': 4.1.11 + '@vitest/pretty-format': 4.1.12 + '@vitest/utils': 4.1.12 magic-string: 0.30.21 pathe: 2.0.3 - '@vitest/spy@4.1.11': {} + '@vitest/spy@4.1.12': {} - '@vitest/utils@4.1.11': + '@vitest/utils@4.1.12': dependencies: - '@vitest/pretty-format': 4.1.11 + '@vitest/pretty-format': 4.1.12 convert-source-map: 2.0.0 tinyrainbow: 3.1.0 @@ -2357,7 +2355,7 @@ snapshots: boolbase@1.0.0: {} - brace-expansion@5.0.11: + brace-expansion@5.0.12: dependencies: balanced-match: 4.0.4 @@ -2547,9 +2545,9 @@ snapshots: expect-type@1.3.0: {} - fdir@6.5.0(picomatch@4.0.4): + fdir@6.5.0(picomatch@4.0.7): optionalDependencies: - picomatch: 4.0.4 + picomatch: 4.0.7 figures@3.2.0: dependencies: @@ -2575,11 +2573,11 @@ snapshots: ghostty-web@0.4.0: {} - glob@13.0.6: + glob@14.0.3: dependencies: - minimatch: 10.2.5 + minimatch: 11.0.4 minipass: 7.1.3 - path-scurry: 2.0.2 + path-scurry: 3.0.0 handlebars@4.7.10: dependencies: @@ -2785,9 +2783,10 @@ snapshots: min-indent@1.0.1: {} - minimatch@10.2.5: + minimatch@11.0.4: dependencies: - brace-expansion: 5.0.11 + '@isaacs/nonrecursive-glob-match': 1.0.3 + brace-expansion: 5.0.12 minimist-options@4.1.0: dependencies: @@ -2935,7 +2934,7 @@ snapshots: path-parse@1.0.7: {} - path-scurry@2.0.2: + path-scurry@3.0.0: dependencies: lru-cache: 11.3.6 minipass: 7.1.3 @@ -2944,8 +2943,6 @@ snapshots: picocolors@1.1.1: {} - picomatch@4.0.4: {} - picomatch@4.0.7: {} playwright-core@1.64.1: {} @@ -2954,7 +2951,7 @@ snapshots: dependencies: playwright-core: 1.64.1 - postcss@8.5.18: + postcss@8.5.32: dependencies: nanoid: 3.3.18 picocolors: 1.1.1 @@ -3041,9 +3038,9 @@ snapshots: retry@0.13.1: {} - rimraf@6.1.3: + rimraf@6.1.4: dependencies: - glob: 13.0.6 + glob: 14.0.3 package-json-from-dist: 1.0.1 rolldown@1.1.5: @@ -3151,15 +3148,10 @@ snapshots: tinyexec@1.1.2: {} - tinyglobby@0.2.15: - dependencies: - fdir: 6.5.0(picomatch@4.0.4) - picomatch: 4.0.4 - tinyglobby@0.2.17: dependencies: - fdir: 6.5.0(picomatch@4.0.4) - picomatch: 4.0.4 + fdir: 6.5.0(picomatch@4.0.7) + picomatch: 4.0.7 tinypool@2.1.2: {} @@ -3224,7 +3216,7 @@ snapshots: dependencies: lightningcss: 1.32.0 picomatch: 4.0.7 - postcss: 8.5.18 + postcss: 8.5.32 rolldown: 1.1.5 tinyglobby: 0.2.17 optionalDependencies: @@ -3234,25 +3226,25 @@ snapshots: tsx: 4.21.0 yaml: 2.8.4 - vitest@4.1.11(@types/node@25.5.0)(vite@8.1.6(@types/node@25.5.0)(esbuild@0.28.1)(tsx@4.21.0)(yaml@2.8.4)): + vitest@4.1.12(@types/node@25.5.0)(vite@8.1.6(@types/node@25.5.0)(esbuild@0.28.1)(tsx@4.21.0)(yaml@2.8.4)): dependencies: - '@vitest/expect': 4.1.11 - '@vitest/mocker': 4.1.11(vite@8.1.6(@types/node@25.5.0)(esbuild@0.28.1)(tsx@4.21.0)(yaml@2.8.4)) - '@vitest/pretty-format': 4.1.11 - '@vitest/runner': 4.1.11 - '@vitest/snapshot': 4.1.11 - '@vitest/spy': 4.1.11 - '@vitest/utils': 4.1.11 + '@vitest/expect': 4.1.12 + '@vitest/mocker': 4.1.12(vite@8.1.6(@types/node@25.5.0)(esbuild@0.28.1)(tsx@4.21.0)(yaml@2.8.4)) + '@vitest/pretty-format': 4.1.12 + '@vitest/runner': 4.1.12 + '@vitest/snapshot': 4.1.12 + '@vitest/spy': 4.1.12 + '@vitest/utils': 4.1.12 es-module-lexer: 2.1.0 expect-type: 1.3.0 magic-string: 0.30.21 obug: 2.1.1 pathe: 2.0.3 - picomatch: 4.0.4 + picomatch: 4.0.7 std-env: 4.1.0 tinybench: 2.9.0 tinyexec: 1.1.2 - tinyglobby: 0.2.15 + tinyglobby: 0.2.17 tinyrainbow: 3.1.0 vite: 8.1.6(@types/node@25.5.0)(esbuild@0.28.1)(tsx@4.21.0)(yaml@2.8.4) why-is-node-running: 2.3.0 From b589f2bc9bade646f477d90ccc4a662eaa296263 Mon Sep 17 00:00:00 2001 From: Thomas Kosiewski Date: Fri, 6 Nov 2026 00:57:08 +0000 Subject: [PATCH 2/2] fix(deps): drop rimraf, floor the overrides with carets, and lock no release younger than Dependabot's cooldown --- package.json | 27 ++++++------ pnpm-lock.yaml | 115 ++++++++++++++----------------------------------- 2 files changed, 46 insertions(+), 96 deletions(-) diff --git a/package.json b/package.json index 22865baa..c94ed2ad 100644 --- a/package.json +++ b/package.json @@ -39,7 +39,7 @@ }, "scripts": { "build": "tsc -p tsconfig.build.json && node ./scripts/copy-renderer-assets.mjs", - "clean": "rimraf coverage dist .tsconfig.tsbuildinfo .tsconfig.build.tsbuildinfo", + "clean": "node -e \"for (const p of ['coverage', 'dist', '.tsconfig.tsbuildinfo', '.tsconfig.build.tsbuildinfo']) require('node:fs').rmSync(p, { recursive: true, force: true })\"", "cli": "tsx src/cli/main.ts", "doctor": "tsx src/cli/main.ts doctor", "format": "oxfmt . --write", @@ -71,7 +71,6 @@ "oxlint": "1.62.0", "oxlint-tsgolint": "0.22.1", "release-please": "17.9.0", - "rimraf": "6.1.4", "tsx": "4.21.0", "typescript": "5.9.3", "vitest": "4.1.12" @@ -99,18 +98,18 @@ "@parcel/watcher" ], "overrides": { - "@xmldom/xmldom": "0.8.15", - "brace-expansion": "5.0.12", - "esbuild": "0.28.1", - "handlebars": "4.7.10", - "js-yaml": "4.3.2", - "minimatch": "11.0.4", - "nanoid": "3.3.18", - "postcss": "8.5.32", - "source-map-js": "1.2.2", - "tinypool": "2.1.2", - "vite": "8.1.6", - "ws": "8.21.0" + "@xmldom/xmldom": "^0.8.15", + "brace-expansion": "^5.0.12", + "esbuild": "^0.28.1", + "handlebars": "^4.7.10", + "js-yaml": "^4.3.2", + "minimatch": "^11.0.3", + "nanoid": "^3.3.18", + "postcss": "^8.5.32", + "source-map-js": "^1.2.2", + "tinypool": "^2.1.2", + "vite": "^8.1.6", + "ws": "^8.21.0" } } } diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index cc026cce..8bfcd6ae 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -5,18 +5,18 @@ settings: excludeLinksFromLockfile: false overrides: - '@xmldom/xmldom': 0.8.15 - brace-expansion: 5.0.12 - esbuild: 0.28.1 - handlebars: 4.7.10 - js-yaml: 4.3.2 - minimatch: 11.0.4 - nanoid: 3.3.18 - postcss: 8.5.32 - source-map-js: 1.2.2 - tinypool: 2.1.2 - vite: 8.1.6 - ws: 8.21.0 + '@xmldom/xmldom': ^0.8.15 + brace-expansion: ^5.0.12 + esbuild: ^0.28.1 + handlebars: ^4.7.10 + js-yaml: ^4.3.2 + minimatch: ^11.0.3 + nanoid: ^3.3.18 + postcss: ^8.5.32 + source-map-js: ^1.2.2 + tinypool: ^2.1.2 + vite: ^8.1.6 + ws: ^8.21.0 importers: @@ -65,9 +65,6 @@ importers: release-please: specifier: 17.9.0 version: 17.9.0 - rimraf: - specifier: 6.1.4 - version: 6.1.4 tsx: specifier: 4.21.0 version: 4.21.0 @@ -293,12 +290,12 @@ packages: peerDependencies: jsep: ^0.4.0||^1.0.0 - '@napi-rs/wasm-runtime@1.2.7': - resolution: {integrity: sha512-zJccwplOAbgfZju95IUHazLnx9RAPtPN2YGJXI6UbrgeaR9QfPjGrQL6ERkSAtnVCA4Q+83ApGyaX5zdpCaKkQ==} + '@napi-rs/wasm-runtime@1.2.6': + resolution: {integrity: sha512-mRyDmEw9/fCDXCGfL1sbgIw/GUK0PVxRW4YwgPN61F3LQ+fSyoBFarJVzgGyhF6kRzEQZ0FejDqm4WLXSeqQmw==} engines: {node: ^20.19.0 || ^22.13.0 || >=23.5.0} peerDependencies: - '@emnapi/core': ^1.7.1 || 2.0.0-beta.2 || 2.0.0-beta.3 - '@emnapi/runtime': ^1.7.1 || 2.0.0-beta.2 || 2.0.0-beta.3 + '@emnapi/core': ^1.7.1 || 2.0.0-beta.2 + '@emnapi/runtime': ^1.7.1 || 2.0.0-beta.2 '@octokit/auth-token@4.0.0': resolution: {integrity: sha512-tY/msAuJo6ARbK6SPIxZrPBms3xPbfwBrulZe0Wtr/DIY9lje2HeV1uoebShn6mx7SjCHif6EjMvoREj+gZ+SA==} @@ -767,7 +764,7 @@ packages: resolution: {integrity: sha512-fKShNpKZzupWZuY0z7egydvL0sqW4INEZBEExMBMAa6izlENEVHwoXgdaTCaBZ5fwlr4xf2o1wXC83n9RpO+NA==} peerDependencies: msw: ^2.4.9 - vite: 8.1.6 + vite: ^8.1.6 peerDependenciesMeta: msw: optional: true @@ -1075,10 +1072,6 @@ packages: ghostty-web@0.4.0: resolution: {integrity: sha512-0puDBik2qapbD/QQBW9o5ZHfXnZBqZWx/ctBiVtKZ6ZLds4NYb+wZuw1cRLXZk9zYovIQ908z3rvFhexAvc5Hg==} - glob@14.0.3: - resolution: {integrity: sha512-A1vjIwC3qpdCso45Iw127gnp7sPhqgY8lUQhDrArIs+GbmfaaVPFuoyy7WyLT9EPZCRZ7j7aLdwUhQmHWesEow==} - engines: {node: 18 || 20 || >=22} - handlebars@4.7.10: resolution: {integrity: sha512-P5VJMVM7qgBn6vjXMw8WG9uVI+ncf2pi72j4de4yz5ZULLj2RGqLYaKOYGsgyrViQ0tePOVlN1tDCCXXtFqXKg==} engines: {node: '>=0.4.7'} @@ -1274,10 +1267,6 @@ packages: lodash.ismatch@4.4.0: resolution: {integrity: sha512-fPMfXjGQEV9Xsq/8MTSgUf255gawYRbjwMyDbcvDhXgV7enSZA0hynz6vMPnpAb5iONEzBHBPsT+0zes5Z301g==} - lru-cache@11.3.6: - resolution: {integrity: sha512-Gf/KoL3C/MlI7Bt0PGI9I+TeTC/I6r/csU58N4BSNc4lppLBeKsOdFYkK+dX0ABDUMJNfCHTyPpzwwO21Awd3A==} - engines: {node: 20 || >=22} - lru-cache@6.0.0: resolution: {integrity: sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==} engines: {node: '>=10'} @@ -1305,9 +1294,9 @@ packages: resolution: {integrity: sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==} engines: {node: '>=4'} - minimatch@11.0.4: - resolution: {integrity: sha512-/UJ1dEoVQTjPNDh6SGlUo+ueLMmoHTas4q+8yaAR/5t6nLAIiBDJtoYUh20IYleix7ehiQkgczb84PE3uzHkxg==} - engines: {node: 20 || >=22} + minimatch@11.0.3: + resolution: {integrity: sha512-iny/40PEGkNJQ5/Pv6z3nm6FbRAby32GeZRjCUJk2WnNDbgPSTcdI+DDvLqsgBdD4cD5sMtMheqPPnehCCa8Nw==} + engines: {node: 18 || 20 || >=22} minimist-options@4.1.0: resolution: {integrity: sha512-Q4r8ghd80yhO/0j1O3B2BjweX3fiHg9cdOwjJd2J76Q135c+NDxGCqdYKQ1SKBuFfgWbAUzBfvYjPUEeNgqN1A==} @@ -1316,10 +1305,6 @@ packages: minimist@1.2.8: resolution: {integrity: sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==} - minipass@7.1.3: - resolution: {integrity: sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==} - engines: {node: '>=16 || 14 >=14.17'} - modify-values@1.0.1: resolution: {integrity: sha512-xV2bxeN6F7oYjZWTe/YPAy6MN2M+sL4u/Rlm2AHCIVGfo2p1yGmBHQ6vHehl4bRTZBdHu3TSkWdYgkwpYzAGSw==} engines: {node: '>=0.10.0'} @@ -1403,9 +1388,6 @@ packages: resolution: {integrity: sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==} engines: {node: '>=6'} - package-json-from-dist@1.0.1: - resolution: {integrity: sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==} - parse-github-repo-url@1.4.1: resolution: {integrity: sha512-bSWyzBKqcSL4RrncTpGsEKoJ7H8a4L3++ifTAbTFeMHyq2wRV+42DGmQcHIrJIvdcacjIOxEuKH/w4tthF17gg==} @@ -1424,10 +1406,6 @@ packages: path-parse@1.0.7: resolution: {integrity: sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==} - path-scurry@3.0.0: - resolution: {integrity: sha512-1pTbQqH1wIwMi/eleQ5leFTTCkzFsPcgXNjwOA8YGGW/W4/kHT3dssE7Z6NH+zuqNLOzOB0uaD61yl7cAcVhgg==} - engines: {node: 18 || 20 || >=22} - pathe@2.0.3: resolution: {integrity: sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==} @@ -1503,11 +1481,6 @@ packages: resolution: {integrity: sha512-XQBQ3I8W1Cge0Seh+6gjj03LbmRFWuoszgK9ooCpwYIrhhoO80pfq4cUkU5DkknwfOfFteRwlZ56PYOGYyFWdg==} engines: {node: '>= 4'} - rimraf@6.1.4: - resolution: {integrity: sha512-Fk3reQDVPZUMbEm7Zwxz03BWQMW3V5buSk9aU8OckTrO8A1nQtbqvYsAantGNermwsIsXcuOBqcoJ3HuMELctw==} - engines: {node: 20 || >=22} - hasBin: true - rolldown@1.1.5: resolution: {integrity: sha512-t9z29cJjXf/vxQ8dyhCSpt6H6aSwHTk8cT5I3iy6SMXuFpk5mB6PL6XfC8PCwrPTx93udwKUm9HRteAlTGBLiA==} engines: {node: ^20.19.0 || >=22.12.0} @@ -1630,8 +1603,8 @@ packages: resolution: {integrity: sha512-c1PTsA3tYrIsLGkJkzHF+w9F2EyxfXGo4UyJc4pFL++FMjnq0HJS69T3M7d//gKrFKwy429bouPescbjecU+Zw==} engines: {node: '>=8'} - tslib@2.9.1: - resolution: {integrity: sha512-a4Ux9VKuIMHsOS7ENbEq6hK2ZGYIT27Rtl0E4eD9KqwxhKiQeMZE/9xb3IdYwWaSOyIBQLExhQgXDTYoiCxnWA==} + tslib@2.8.1: + resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==} tsx@4.21.0: resolution: {integrity: sha512-5C1sg4USs1lfG0GFb2RLXsdpXqBSEhAaA/0kPL01wxzpMqLILNxIxIOKiILz+cdg/pLnOUxFYOR5yhHU666wbw==} @@ -1702,7 +1675,7 @@ packages: peerDependencies: '@types/node': ^20.19.0 || >=22.12.0 '@vitejs/devtools': ^0.3.0 - esbuild: 0.28.1 + esbuild: ^0.28.1 jiti: '>=1.21.0' less: ^4.0.0 sass: ^1.70.0 @@ -1754,7 +1727,7 @@ packages: '@vitest/ui': 4.1.12 happy-dom: '*' jsdom: '*' - vite: 8.1.6 + vite: ^8.1.6 peerDependenciesMeta: '@edge-runtime/vm': optional: true @@ -1877,17 +1850,17 @@ snapshots: '@emnapi/core@1.11.1': dependencies: '@emnapi/wasi-threads': 1.2.2 - tslib: 2.9.1 + tslib: 2.8.1 optional: true '@emnapi/runtime@1.11.1': dependencies: - tslib: 2.9.1 + tslib: 2.8.1 optional: true '@emnapi/wasi-threads@1.2.2': dependencies: - tslib: 2.9.1 + tslib: 2.8.1 optional: true '@esbuild/aix-ppc64@0.28.1': @@ -1973,7 +1946,7 @@ snapshots: '@octokit/rest': 20.1.2 '@octokit/types': 13.10.0 js-yaml: 4.3.2 - minimatch: 11.0.4 + minimatch: 11.0.3 '@iarna/toml@3.0.0': {} @@ -1989,7 +1962,7 @@ snapshots: dependencies: jsep: 1.4.0 - '@napi-rs/wasm-runtime@1.2.7(@emnapi/core@1.11.1)(@emnapi/runtime@1.11.1)': + '@napi-rs/wasm-runtime@1.2.6(@emnapi/core@1.11.1)(@emnapi/runtime@1.11.1)': dependencies: '@emnapi/core': 1.11.1 '@emnapi/runtime': 1.11.1 @@ -2233,7 +2206,7 @@ snapshots: dependencies: '@emnapi/core': 1.11.1 '@emnapi/runtime': 1.11.1 - '@napi-rs/wasm-runtime': 1.2.7(@emnapi/core@1.11.1)(@emnapi/runtime@1.11.1) + '@napi-rs/wasm-runtime': 1.2.6(@emnapi/core@1.11.1)(@emnapi/runtime@1.11.1) optional: true '@rolldown/binding-win32-arm64-msvc@1.1.5': @@ -2248,7 +2221,7 @@ snapshots: '@tybys/wasm-util@0.10.4': dependencies: - tslib: 2.9.1 + tslib: 2.8.1 optional: true '@types/chai@5.2.3': @@ -2573,12 +2546,6 @@ snapshots: ghostty-web@0.4.0: {} - glob@14.0.3: - dependencies: - minimatch: 11.0.4 - minipass: 7.1.3 - path-scurry: 3.0.0 - handlebars@4.7.10: dependencies: minimist: 1.2.8 @@ -2751,8 +2718,6 @@ snapshots: lodash.ismatch@4.4.0: {} - lru-cache@11.3.6: {} - lru-cache@6.0.0: dependencies: yallist: 4.0.0 @@ -2783,7 +2748,7 @@ snapshots: min-indent@1.0.1: {} - minimatch@11.0.4: + minimatch@11.0.3: dependencies: '@isaacs/nonrecursive-glob-match': 1.0.3 brace-expansion: 5.0.12 @@ -2796,8 +2761,6 @@ snapshots: minimist@1.2.8: {} - minipass@7.1.3: {} - modify-values@1.0.1: {} ms@2.1.3: {} @@ -2917,8 +2880,6 @@ snapshots: p-try@2.2.0: {} - package-json-from-dist@1.0.1: {} - parse-github-repo-url@1.4.1: {} parse-json@5.2.0: @@ -2934,11 +2895,6 @@ snapshots: path-parse@1.0.7: {} - path-scurry@3.0.0: - dependencies: - lru-cache: 11.3.6 - minipass: 7.1.3 - pathe@2.0.3: {} picocolors@1.1.1: {} @@ -3038,11 +2994,6 @@ snapshots: retry@0.13.1: {} - rimraf@6.1.4: - dependencies: - glob: 14.0.3 - package-json-from-dist: 1.0.1 - rolldown@1.1.5: dependencies: '@oxc-project/types': 0.139.0 @@ -3159,7 +3110,7 @@ snapshots: trim-newlines@3.0.1: {} - tslib@2.9.1: + tslib@2.8.1: optional: true tsx@4.21.0: