mirror of
https://github.com/vercel/flags.git
synced 2026-09-19 03:49:23 +08:00
Dominik Ferber
2532e99ea8
Bumps the vulnerable transitive dependencies flagged by Dependabot via pnpm overrides, and the direct nanoid dependency in the examples. - nanoid >= 4 -> ^5.1.16 (GHSA infinite loop on negative/zero size) - brace-expansion >= 4 -> ^5.0.9 (DoS via unbounded intermediate arrays) - dompurify -> ^3.4.13 (XSS via detached subtree after IN_PLACE hook removal) - fast-uri -> ^3.1.5 (host confusion via backslash authority introducer) - js-yaml 3 -> ^3.15.1, js-yaml 4 -> ^4.3.1 (quadratic CPU in !!omap) - mermaid -> ^11.16.1 (DoS, prototype pollution, CSS injection) - postcss -> ^8.5.23 (arbitrary .map file read via sourceMappingURL) - @sveltejs/kit -> ^2.70.2 (ReDoS in Accept header content negotiation) image-size (alerts #979, #980) has no patched release yet, so it is left as-is. It is only used at build time by the docs site. Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
40 lines
1016 B
JSON
40 lines
1016 B
JSON
{
|
|
"name": "snippets",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"scripts": {
|
|
"build": "next build",
|
|
"dev": "next dev --turbopack",
|
|
"check": "biome check",
|
|
"start": "next start"
|
|
},
|
|
"dependencies": {
|
|
"@radix-ui/react-dialog": "1.1.2",
|
|
"@radix-ui/react-separator": "1.1.0",
|
|
"@radix-ui/react-slot": "1.1.0",
|
|
"@radix-ui/react-tooltip": "1.1.4",
|
|
"@vercel/global-config": "^1.5.1",
|
|
"@vercel/toolbar": "0.2.7",
|
|
"class-variance-authority": "0.7.1",
|
|
"clsx": "2.0.0",
|
|
"flags": "workspace:*",
|
|
"nanoid": "5.1.16",
|
|
"next": "16.2.12",
|
|
"next-themes": "0.4.4",
|
|
"react": "19.0.0-rc.1",
|
|
"react-dom": "19.0.0-rc.1",
|
|
"tailwind-merge": "2.5.5",
|
|
"tailwindcss-animate": "1.0.7"
|
|
},
|
|
"devDependencies": {
|
|
"@tailwindcss/typography": "0.5.10",
|
|
"@types/node": "^22.14.0",
|
|
"@types/react": "catalog:",
|
|
"@types/react-dom": "catalog:",
|
|
"postcss": "^8.5.12",
|
|
"shiki": "1.24.0",
|
|
"tailwindcss": "^3.4.1",
|
|
"typescript": "^5"
|
|
}
|
|
}
|