mirror of
https://github.com/vercel/flags.git
synced 2026-09-19 03:49:23 +08:00
Dominik Ferber
2532e99ea8
Bumps the vulnerable transitive dependencies flagged by Dependabot via pnpm overrides, and the direct nanoid dependency in the examples. - nanoid >= 4 -> ^5.1.16 (GHSA infinite loop on negative/zero size) - brace-expansion >= 4 -> ^5.0.9 (DoS via unbounded intermediate arrays) - dompurify -> ^3.4.13 (XSS via detached subtree after IN_PLACE hook removal) - fast-uri -> ^3.1.5 (host confusion via backslash authority introducer) - js-yaml 3 -> ^3.15.1, js-yaml 4 -> ^4.3.1 (quadratic CPU in !!omap) - mermaid -> ^11.16.1 (DoS, prototype pollution, CSS injection) - postcss -> ^8.5.23 (arbitrary .map file read via sourceMappingURL) - @sveltejs/kit -> ^2.70.2 (ReDoS in Accept header content negotiation) image-size (alerts #979, #980) has no patched release yet, so it is left as-is. It is only used at build time by the docs site. Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
42 lines
1.0 KiB
JSON
42 lines
1.0 KiB
JSON
{
|
|
"name": "shirt-shop",
|
|
"version": "0.0.0",
|
|
"private": true,
|
|
"scripts": {
|
|
"build": "next build",
|
|
"dev": "next dev",
|
|
"install:compat": "node scripts/install.mjs",
|
|
"check": "biome check",
|
|
"start": "next start"
|
|
},
|
|
"dependencies": {
|
|
"@headlessui/react": "^2.2.0",
|
|
"@heroicons/react": "2.2.0",
|
|
"@tailwindcss/aspect-ratio": "0.4.2",
|
|
"@tailwindcss/forms": "0.5.10",
|
|
"@tailwindcss/postcss": "^4.0.9",
|
|
"@tailwindcss/typography": "0.5.16",
|
|
"@vercel/analytics": "1.5.0",
|
|
"@vercel/edge": "1.2.1",
|
|
"@vercel/global-config": "^1.5.1",
|
|
"@vercel/toolbar": "0.2.7",
|
|
"clsx": "2.1.1",
|
|
"flags": "workspace:*",
|
|
"js-xxhash": "4.0.0",
|
|
"motion": "12.12.1",
|
|
"nanoid": "5.1.16",
|
|
"next": "16.2.12",
|
|
"react": "^19.0.0",
|
|
"react-dom": "^19.0.0",
|
|
"sonner": "2.0.1"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^22.13.5",
|
|
"@types/react": "catalog:",
|
|
"@types/react-dom": "catalog:",
|
|
"postcss": "^8.5.12",
|
|
"tailwindcss": "^4.0.9",
|
|
"typescript": "^5.7.3"
|
|
}
|
|
}
|