diff --git a/package.json b/package.json index 044c44930c..049c33451f 100644 --- a/package.json +++ b/package.json @@ -49,7 +49,7 @@ "husky": "^8.0.0", "is-ci": "^3.0.1", "jiti": "^2.4.2", - "js-yaml": "^4.2.0", + "js-yaml": "^4.3.0", "jsdom": "^25.0.1", "lerna": "^8.0.2", "lint-staged": "^13.2.2", @@ -99,7 +99,9 @@ "@noble/hashes": "^1.4.0", "@noble/curves": "^1.4.0", "eslint-plugin-react-hooks": "4.6.0", - "js-yaml@4.1.0": "^4.2.0" + "js-yaml@<3.15.0": "3.15.0", + "js-yaml@>=4 <4.3.0": "4.3.0", + "tar@<7.5.18": "7.5.21" } }, "workspaces": [ diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index f406d1cbee..b6feeb3de4 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -10,7 +10,9 @@ overrides: '@noble/hashes': ^1.4.0 '@noble/curves': ^1.4.0 eslint-plugin-react-hooks: 4.6.0 - js-yaml@4.1.0: ^4.2.0 + js-yaml@<3.15.0: 3.15.0 + js-yaml@>=4 <4.3.0: 4.3.0 + tar@<7.5.18: 7.5.21 importers: @@ -80,8 +82,8 @@ importers: specifier: ^2.4.2 version: 2.6.1 js-yaml: - specifier: ^4.2.0 - version: 4.2.0 + specifier: ^4.3.0 + version: 4.3.0 jsdom: specifier: ^25.0.1 version: 25.0.1(bufferutil@4.1.0)(utf-8-validate@5.0.10) @@ -3382,10 +3384,6 @@ packages: resolution: {integrity: sha512-TQMmc3w+5AxjpL8iIiwebF73dRDF4fBIieAqGn9RGCWaEVwQ6Fb2cGe31Yns0RRIzii5goJ1Y7xbMwo1TxMplw==} engines: {node: '>= 20.19.0'} - chownr@2.0.0: - resolution: {integrity: sha512-bIomtDF5KGpdogkLd9VspvFzk9KfpyyGlS8YFVZl7TGPBHL5snIOnxeshwVgPteQ9b4Eydl+pVbIyE1DcvCWgQ==} - engines: {node: '>=10'} - chownr@3.0.0: resolution: {integrity: sha512-+IxzY9BZOQd/XuYPRmrvEVjF/nqj5kgT4kEq7VofrDoM1MxoRjEWkrCC3EtLi59TVawxTAn+orJwFQcrqEN1+g==} engines: {node: '>=18'} @@ -4446,10 +4444,6 @@ packages: resolution: {integrity: sha512-CTXd6rk/M3/ULNQj8FBqBWHYBVYybQ3VPBw0xGKFe3tuH7ytT6ACnvzpIQ3UZtB8yvUKC2cXn1a+x+5EVQLovA==} engines: {node: '>=14.14'} - fs-minipass@2.1.0: - resolution: {integrity: sha512-V/JgOLFCS+R6Vcq0slCuaeWEdNC3ouDlJMNIsacH2VtALiu9mV4LPrHc5cDl8k5aw6J8jwgWWpiTo5RYhmIzvg==} - engines: {node: '>= 8'} - fs-minipass@3.0.3: resolution: {integrity: sha512-XUBA9XClHbnJWSfBzjkm6RvPsyg3sryZt06BEQoXcF7EK/xpGaQYJgQKDJSUH5SGZ76Y7pFx1QBnXz09rU5Fbw==} engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0} @@ -5118,12 +5112,12 @@ packages: js-tokens@4.0.0: resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==} - js-yaml@3.14.2: - resolution: {integrity: sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==} + js-yaml@3.15.0: + resolution: {integrity: sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==} hasBin: true - js-yaml@4.2.0: - resolution: {integrity: sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==} + js-yaml@4.3.0: + resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==} hasBin: true jsdoc-type-pratt-parser@4.0.0: @@ -5838,10 +5832,6 @@ packages: resolution: {integrity: sha512-fNzuVyifolSLFL4NzpF+wEF4qrgqaaKX0haXPQEdQ7NKAN+WecoKMHV09YcuL/DHxrUsYQOK3MiuDf7Ip2OXfQ==} engines: {node: '>=8'} - minipass@5.0.0: - resolution: {integrity: sha512-3FnjYuehv9k6ovOEbyOswadCDPX1piCfhV8ncmYtHOjuPwylVWsghTLo7rabjC3Rx5xD4HDx8Wm1xnMF7S5qFQ==} - engines: {node: '>=8'} - minipass@7.1.3: resolution: {integrity: sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==} engines: {node: '>=16 || 14 >=14.17'} @@ -5862,16 +5852,6 @@ packages: typescript: optional: true - mkdirp@1.0.4: - resolution: {integrity: sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==} - engines: {node: '>=10'} - hasBin: true - - mkdirp@3.0.1: - resolution: {integrity: sha512-+NsyUUAZDmo6YVHzL/stxSu3t9YS1iljliy3BSDrXJ/dkn1KYdmtZODGGjLcc9XLgVVpH4KshHB8XmZgMhaBXg==} - engines: {node: '>=10'} - hasBin: true - modify-values@1.0.1: resolution: {integrity: sha512-xV2bxeN6F7oYjZWTe/YPAy6MN2M+sL4u/Rlm2AHCIVGfo2p1yGmBHQ6vHehl4bRTZBdHu3TSkWdYgkwpYzAGSw==} engines: {node: '>=0.10.0'} @@ -7140,16 +7120,6 @@ packages: resolution: {integrity: sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==} engines: {node: '>=6'} - tar@6.2.1: - resolution: {integrity: sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A==} - engines: {node: '>=10'} - deprecated: Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me - - tar@7.2.0: - resolution: {integrity: sha512-hctwP0Nb4AB60bj8WQgRYaMOuJYRAPMGiQUAotms5igN8ppfQM+IvjQ5HcKu1MaZh2Wy2KWVTe563Yj8dfc14w==} - engines: {node: '>=18'} - deprecated: Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me - tar@7.5.21: resolution: {integrity: sha512-XdhtCvlMywwxpCW8YEq3lOXBJpUPTR2OHHcwLPO3HwsJqOHa2Ok/oJ7ruGzp+JrKoRPVCzJwAdEjqLW/vNRPHA==} engines: {node: '>=18'} @@ -9078,7 +9048,7 @@ snapshots: '@types/node': 20.5.1 chalk: 4.1.2 cosmiconfig: 8.3.6(typescript@5.9.3) - cosmiconfig-typescript-loader: 4.4.0(@types/node@20.5.1)(cosmiconfig@8.3.6(typescript@5.9.3))(ts-node@10.9.2(@types/node@20.5.1)(typescript@5.9.3))(typescript@5.9.3) + cosmiconfig-typescript-loader: 4.4.0(@types/node@20.5.1)(cosmiconfig@8.3.6(typescript@5.9.3))(ts-node@10.9.2(@types/node@22.19.15)(typescript@5.9.3))(typescript@5.9.3) lodash.isplainobject: 4.0.6 lodash.merge: 4.6.2 lodash.uniq: 4.5.0 @@ -9280,7 +9250,7 @@ snapshots: globals: 13.24.0 ignore: 5.3.2 import-fresh: 3.3.1 - js-yaml: 4.2.0 + js-yaml: 4.3.0 minimatch: 3.1.5 strip-json-comments: 3.1.1 transitivePeerDependencies: @@ -9538,7 +9508,7 @@ snapshots: inquirer: 8.2.7(@types/node@22.19.15) is-ci: 3.0.1 is-stream: 2.0.0 - js-yaml: 4.2.0 + js-yaml: 4.3.0 libnpmpublish: 9.0.9 load-json-file: 6.2.0 make-dir: 4.0.0 @@ -9564,7 +9534,7 @@ snapshots: slash: 3.0.0 ssri: 10.0.6 string-width: 4.2.3 - tar: 6.2.1 + tar: 7.5.21 temp-dir: 1.0.0 through: 2.3.8 tinyglobby: 0.2.12 @@ -12066,7 +12036,7 @@ snapshots: '@yarnpkg/parsers@3.0.2': dependencies: - js-yaml: 3.14.2 + js-yaml: 3.15.0 tslib: 2.8.1 '@zkochan/js-yaml@0.0.7': @@ -12468,7 +12438,7 @@ snapshots: minipass-pipeline: 1.2.4 p-map: 4.0.0 ssri: 10.0.6 - tar: 6.2.1 + tar: 7.5.21 unique-filename: 3.0.0 call-bind-apply-helpers@1.0.2: @@ -12549,8 +12519,6 @@ snapshots: dependencies: readdirp: 5.0.0 - chownr@2.0.0: {} - chownr@3.0.0: {} ci-info@3.9.0: {} @@ -12748,7 +12716,7 @@ snapshots: core-util-is@1.0.3: {} - cosmiconfig-typescript-loader@4.4.0(@types/node@20.5.1)(cosmiconfig@8.3.6(typescript@5.9.3))(ts-node@10.9.2(@types/node@20.5.1)(typescript@5.9.3))(typescript@5.9.3): + cosmiconfig-typescript-loader@4.4.0(@types/node@20.5.1)(cosmiconfig@8.3.6(typescript@5.9.3))(ts-node@10.9.2(@types/node@22.19.15)(typescript@5.9.3))(typescript@5.9.3): dependencies: '@types/node': 20.5.1 cosmiconfig: 8.3.6(typescript@5.9.3) @@ -12766,7 +12734,7 @@ snapshots: cosmiconfig@8.3.6(typescript@5.9.3): dependencies: import-fresh: 3.3.1 - js-yaml: 4.2.0 + js-yaml: 4.3.0 parse-json: 5.2.0 path-type: 4.0.0 optionalDependencies: @@ -12776,7 +12744,7 @@ snapshots: dependencies: env-paths: 2.2.1 import-fresh: 3.3.1 - js-yaml: 4.2.0 + js-yaml: 4.3.0 parse-json: 5.2.0 optionalDependencies: typescript: 5.9.3 @@ -13531,7 +13499,7 @@ snapshots: imurmurhash: 0.1.4 is-glob: 4.0.3 is-path-inside: 3.0.3 - js-yaml: 4.2.0 + js-yaml: 4.3.0 json-stable-stringify-without-jsonify: 1.0.1 levn: 0.4.1 lodash.merge: 4.6.2 @@ -13862,7 +13830,7 @@ snapshots: front-matter@4.0.2: dependencies: - js-yaml: 3.14.2 + js-yaml: 3.15.0 fs-constants@1.0.0: {} @@ -13872,10 +13840,6 @@ snapshots: jsonfile: 6.2.0 universalify: 2.0.1 - fs-minipass@2.1.0: - dependencies: - minipass: 3.3.6 - fs-minipass@3.0.3: dependencies: minipass: 7.1.3 @@ -14580,12 +14544,12 @@ snapshots: js-tokens@4.0.0: {} - js-yaml@3.14.2: + js-yaml@3.15.0: dependencies: argparse: 1.0.10 esprima: 4.0.1 - js-yaml@4.2.0: + js-yaml@4.3.0: dependencies: argparse: 2.0.1 @@ -14763,7 +14727,7 @@ snapshots: is-ci: 3.0.1 is-stream: 2.0.0 jest-diff: 29.7.0 - js-yaml: 4.2.0 + js-yaml: 4.3.0 libnpmaccess: 8.0.6 libnpmpublish: 9.0.9 load-json-file: 6.2.0 @@ -14792,7 +14756,7 @@ snapshots: slash: 3.0.0 ssri: 10.0.6 string-width: 4.2.3 - tar: 6.2.1 + tar: 7.5.21 temp-dir: 1.0.0 through: 2.3.8 tinyglobby: 0.2.12 @@ -15899,8 +15863,6 @@ snapshots: minipass@4.2.8: {} - minipass@5.0.0: {} - minipass@7.1.3: {} minizlib@2.1.2: @@ -15916,10 +15878,6 @@ snapshots: optionalDependencies: typescript: 5.9.3 - mkdirp@1.0.4: {} - - mkdirp@3.0.1: {} - modify-values@1.0.1: {} mri@1.2.0: {} @@ -15999,7 +15957,7 @@ snapshots: nopt: 7.2.1 proc-log: 4.2.0 semver: 7.7.4 - tar: 6.2.1 + tar: 7.5.21 which: 4.0.0 transitivePeerDependencies: - supports-color @@ -16447,7 +16405,7 @@ snapshots: promise-retry: 2.0.1 sigstore: 2.3.1 ssri: 10.0.6 - tar: 6.2.1 + tar: 7.5.21 transitivePeerDependencies: - bluebird - supports-color @@ -16663,7 +16621,7 @@ snapshots: execa: 9.6.1 get-port: 7.1.0 http-proxy: 1.18.1 - tar: 7.2.0 + tar: 7.5.21 transitivePeerDependencies: - debug @@ -17435,24 +17393,6 @@ snapshots: inherits: 2.0.4 readable-stream: 3.6.2 - tar@6.2.1: - dependencies: - chownr: 2.0.0 - fs-minipass: 2.1.0 - minipass: 5.0.0 - minizlib: 2.1.2 - mkdirp: 1.0.4 - yallist: 4.0.0 - - tar@7.2.0: - dependencies: - '@isaacs/fs-minipass': 4.0.1 - chownr: 3.0.0 - minipass: 7.1.3 - minizlib: 3.1.0 - mkdirp: 3.0.1 - yallist: 5.0.0 - tar@7.5.21: dependencies: '@isaacs/fs-minipass': 4.0.1