From d1f9b87f43bf595fef60ec63a522698acd4870d7 Mon Sep 17 00:00:00 2001 From: Patrick Erichsen Date: Mon, 3 Aug 2026 18:55:09 -0700 Subject: [PATCH] chore: refresh audited dependency pins (#3389) Update the five newly vulnerable dependency pins and refresh the lockfile so repository CI remains enforceable. --- bun.lock | 27 ++++++++++++++------------- package.json | 11 ++++++----- packages/clawhub-admin/package.json | 2 +- packages/clawhub/package.json | 2 +- 4 files changed, 22 insertions(+), 20 deletions(-) diff --git a/bun.lock b/bun.lock index 72a3d973..35eabc8a 100644 --- a/bun.lock +++ b/bun.lock @@ -94,7 +94,7 @@ "oxlint-tsgolint": "0.25.0", "react-email": "^6.9.0", "typescript": "6.0.3", - "undici": "7.28.0", + "undici": "7.29.0", "vite": "8.1.5", "vitest": "4.1.10", }, @@ -119,7 +119,7 @@ "ora": "9.4.1", "p-retry": "8.0.0", "semver": "7.8.5", - "undici": "7.28.0", + "undici": "7.29.0", "unicode-case-folding": "1.1.1", "yaml": "2.9.0", }, @@ -146,7 +146,7 @@ "ora": "9.4.1", "p-retry": "8.0.0", "semver": "7.8.5", - "undici": "7.28.0", + "undici": "7.29.0", }, "devDependencies": { "@types/node": "26.1.1", @@ -171,16 +171,17 @@ }, "overrides": { "ast-v8-to-istanbul": "1.0.4", - "brace-expansion": "5.0.8", + "brace-expansion": "5.0.9", "dompurify": "3.4.12", "esbuild": "0.28.1", - "fast-uri": "3.1.4", + "fast-uri": "3.1.5", "js-yaml": "4.3.0", "next": "16.2.11", - "postcss": "8.5.18", + "postcss": "8.5.23", "sharp": "0.35.3", "shell-quote": "1.10.0", - "undici": "7.28.0", + "socket.io-parser": "4.2.7", + "undici": "7.29.0", "ws": "8.21.0", }, "packages": { @@ -1076,7 +1077,7 @@ "bidi-js": ["bidi-js@1.0.3", "", { "dependencies": { "require-from-string": "^2.0.2" } }, "sha512-RKshQI1R3YQ+n9YJz2QQ147P66ELpa1FQEg20Dk8oW9t2KgLbpDLLp9aGZ7y8WHSshDknG0bknqGw5/tyCs5tw=="], - "brace-expansion": ["brace-expansion@5.0.8", "", { "dependencies": { "balanced-match": "^4.0.2" } }, "sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg=="], + "brace-expansion": ["brace-expansion@5.0.9", "", { "dependencies": { "balanced-match": "^4.0.2" } }, "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg=="], "browserslist": ["browserslist@4.28.2", "", { "dependencies": { "baseline-browser-mapping": "^2.10.12", "caniuse-lite": "^1.0.30001782", "electron-to-chromium": "^1.5.328", "node-releases": "^2.0.36", "update-browserslist-db": "^1.2.3" }, "bin": { "browserslist": "cli.js" } }, "sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg=="], @@ -1310,7 +1311,7 @@ "fast-string-width": ["fast-string-width@3.0.2", "", { "dependencies": { "fast-string-truncated-width": "^3.0.2" } }, "sha512-gX8LrtNEI5hq8DVUfRQMbr5lpaS4nMIWV+7XEbXk2b8kiQIizgnlr12B4dA3ZEx3308ze0O4Q1R+cHts8kyUJg=="], - "fast-uri": ["fast-uri@3.1.4", "", {}, "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw=="], + "fast-uri": ["fast-uri@3.1.5", "", {}, "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw=="], "fast-wrap-ansi": ["fast-wrap-ansi@0.2.2", "", { "dependencies": { "fast-string-width": "^3.0.2" } }, "sha512-7F2Fl+TjRSenLqlU3UjSH0iyqopqoZIu7eZVpEirP2g1GtWa2G/ecEmBdgz31+Mxr+ELclgg6sokpSFIQiZ02Q=="], @@ -1616,7 +1617,7 @@ "ms": ["ms@2.1.3", "", {}, "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="], - "nanoid": ["nanoid@3.3.12", "", { "bin": { "nanoid": "bin/nanoid.cjs" } }, "sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ=="], + "nanoid": ["nanoid@3.3.16", "", { "bin": { "nanoid": "bin/nanoid.cjs" } }, "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q=="], "negotiator": ["negotiator@0.6.3", "", {}, "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg=="], @@ -1714,7 +1715,7 @@ "postal-mime": ["postal-mime@2.7.4", "", {}, "sha512-0WdnFQYUrPGGTFu1uOqD2s7omwua8xaeYGdO6rb88oD5yJ/4pPHDA4sdWqfD8wQVfCny563n/HQS7zTFft+f/g=="], - "postcss": ["postcss@8.5.18", "", { "dependencies": { "nanoid": "^3.3.12", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" } }, "sha512-xdB1oSLHbz1vRWgCDalrCqEFTWzFlhqFC5tIHLMOSUIjhm3XXQ1qrFy8S/ESr1JYRRXqM3c1QFiMZUJdUTqyMQ=="], + "postcss": ["postcss@8.5.23", "", { "dependencies": { "nanoid": "^3.3.16", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" } }, "sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg=="], "preact": ["preact@10.24.3", "", {}, "sha512-Z2dPnBnMUfyQfSQ+GBdsGa16hz35YmLmtTLhM169uW944hYL6xzTYkJjC07j+Wosz733pMWx0fgON3JNw1jJQA=="], @@ -1828,7 +1829,7 @@ "socket.io-adapter": ["socket.io-adapter@2.5.7", "", { "dependencies": { "debug": "~4.4.1", "ws": "~8.20.1" } }, "sha512-e0LyK91f3cUxTmv95/KzoLg47+zF+s/sbxRGDNsyG4dmIP8ZSX8ax6byOxfJXeNNtS/8AZlfD+uP7gBeR7DLlg=="], - "socket.io-parser": ["socket.io-parser@4.2.6", "", { "dependencies": { "@socket.io/component-emitter": "~3.1.0", "debug": "~4.4.1" } }, "sha512-asJqbVBDsBCJx0pTqw3WfesSY0iRX+2xzWEWzrpcH7L6fLzrhyF8WPI8UaeM4YCuDfpwA/cgsdugMsmtz8EJeg=="], + "socket.io-parser": ["socket.io-parser@4.2.7", "", { "dependencies": { "@socket.io/component-emitter": "~3.1.0", "debug": "~4.4.1" } }, "sha512-IH/iSeO9T6gz1KkFleGDWkG9N3dl4jXVYUtMhIqH10Md0ttMer8nUNWiP1DKuNrybD2xBrixLJdCC9J6ECoYkg=="], "sonic-boom": ["sonic-boom@4.2.1", "", { "dependencies": { "atomic-sleep": "^1.0.0" } }, "sha512-w6AxtubXa2wTXAUsZMMWERrsIRAdrK0Sc+FUytWvYAhBJLyuI4llrMIC1DtlNSdI99EI86KZum2MMq3EAZlF9Q=="], @@ -1930,7 +1931,7 @@ "uint8array-extras": ["uint8array-extras@1.5.0", "", {}, "sha512-rvKSBiC5zqCCiDZ9kAOszZcDvdAHwwIKJG33Ykj43OKcWsnmcBRL09YTU4nOeHZ8Y2a7l1MgTd08SBe9A8Qj6A=="], - "undici": ["undici@7.28.0", "", {}, "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA=="], + "undici": ["undici@7.29.0", "", {}, "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw=="], "undici-types": ["undici-types@8.3.0", "", {}, "sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ=="], diff --git a/package.json b/package.json index f1f067fb..41430073 100644 --- a/package.json +++ b/package.json @@ -182,22 +182,23 @@ "oxlint-tsgolint": "0.25.0", "react-email": "^6.9.0", "typescript": "6.0.3", - "undici": "7.28.0", + "undici": "7.29.0", "vite": "8.1.5", "vitest": "4.1.10" }, "overrides": { "ast-v8-to-istanbul": "1.0.4", - "brace-expansion": "5.0.8", + "brace-expansion": "5.0.9", "dompurify": "3.4.12", "esbuild": "0.28.1", - "fast-uri": "3.1.4", + "fast-uri": "3.1.5", "js-yaml": "4.3.0", "next": "16.2.11", - "postcss": "8.5.18", + "postcss": "8.5.23", "sharp": "0.35.3", "shell-quote": "1.10.0", - "undici": "7.28.0", + "socket.io-parser": "4.2.7", + "undici": "7.29.0", "ws": "8.21.0" } } diff --git a/packages/clawhub-admin/package.json b/packages/clawhub-admin/package.json index 65d488ac..ea03e455 100644 --- a/packages/clawhub-admin/package.json +++ b/packages/clawhub-admin/package.json @@ -39,7 +39,7 @@ "ora": "9.4.1", "p-retry": "8.0.0", "semver": "7.8.5", - "undici": "7.28.0" + "undici": "7.29.0" }, "devDependencies": { "@types/node": "26.1.1", diff --git a/packages/clawhub/package.json b/packages/clawhub/package.json index dce569e3..0920944f 100644 --- a/packages/clawhub/package.json +++ b/packages/clawhub/package.json @@ -49,7 +49,7 @@ "ora": "9.4.1", "p-retry": "8.0.0", "semver": "7.8.5", - "undici": "7.28.0", + "undici": "7.29.0", "unicode-case-folding": "1.1.1", "yaml": "2.9.0" },