mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-08-05 16:37:46 +00:00
Anso
d80538f254
Bump the frontend dependency overrides to force patched versions of two packages flagged by security advisories: - dompurify: monaco-editor pins 3.2.7, which the existing override raised only to 3.4.1. Raise the override to ^3.4.11 so the resolved version is 3.4.11, clearing eight dompurify advisories (IN_PLACE and template sanitization bypasses, hook/config pollution, Trusted Types poisoning). - @babel/core: force the transitive build-time dependency from 7.29.0 to ^7.29.6 (resolves to 7.29.7), clearing the sourceMappingURL arbitrary file read advisory. Its consumers accept ^7.0.0 / ^7.24.4. dompurify is not imported in application code; it reaches the bundle only through monaco-editor, so the override is the correct control point. Lock churn is limited to the @babel/* subtree, the browserslist toolchain data packages, and dompurify. Typecheck, production build, and the full frontend test suite (1613 tests) pass.
93 lines
2.7 KiB
JSON
93 lines
2.7 KiB
JSON
{
|
|
"name": "frontend",
|
|
"private": true,
|
|
"license": "SEE LICENSE IN LICENSE",
|
|
"version": "0.0.0",
|
|
"type": "module",
|
|
"engines": {
|
|
"node": ">=26.0.0"
|
|
},
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "tsc -b && vite build",
|
|
"lint": "eslint .",
|
|
"preview": "vite preview",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest"
|
|
},
|
|
"dependencies": {
|
|
"@dagrejs/dagre": "^3.0.0",
|
|
"@monaco-editor/react": "^4.7.0",
|
|
"@radix-ui/react-alert-dialog": "^1.1.17",
|
|
"@radix-ui/react-checkbox": "^1.3.5",
|
|
"@radix-ui/react-context-menu": "^2.3.1",
|
|
"@radix-ui/react-dialog": "^1.1.17",
|
|
"@radix-ui/react-dropdown-menu": "^2.1.18",
|
|
"@radix-ui/react-hover-card": "^1.1.17",
|
|
"@radix-ui/react-label": "^2.1.10",
|
|
"@radix-ui/react-popover": "^1.1.17",
|
|
"@radix-ui/react-scroll-area": "^1.2.12",
|
|
"@radix-ui/react-select": "^2.3.1",
|
|
"@radix-ui/react-separator": "^1.1.10",
|
|
"@radix-ui/react-slider": "^1.4.1",
|
|
"@radix-ui/react-slot": "^1.3.0",
|
|
"@radix-ui/react-tabs": "^1.1.15",
|
|
"@radix-ui/react-tooltip": "^1.2.10",
|
|
"@xterm/addon-fit": "^0.11.0",
|
|
"@xterm/addon-search": "^0.16.0",
|
|
"@xterm/addon-serialize": "^0.14.0",
|
|
"@xterm/xterm": "^6.0.0",
|
|
"@xyflow/react": "^12.11.1",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"cmdk": "^1.1.1",
|
|
"cronstrue": "^3.21.0",
|
|
"date-fns": "^4.4.0",
|
|
"fflate": "^0.8.2",
|
|
"geist": "^1.7.2",
|
|
"lucide-react": "^1.21.0",
|
|
"monaco-editor": "^0.55.1",
|
|
"motion": "^12.41.0",
|
|
"qrcode.react": "^4.2.0",
|
|
"radix-ui": "^1.6.0",
|
|
"react": "^19.2.7",
|
|
"react-day-picker": "^10.0.1",
|
|
"react-dom": "^19.2.7",
|
|
"react-is": "^19.2.7",
|
|
"react-markdown": "^10.1.0",
|
|
"react-use-measure": "^2.1.7",
|
|
"recharts": "^3.9.0",
|
|
"remark-gfm": "^4.0.1",
|
|
"tailwind-merge": "^3.6.0",
|
|
"tailwindcss-animate": "^1.0.7",
|
|
"yaml": "^2.9.0"
|
|
},
|
|
"overrides": {
|
|
"dompurify": "^3.4.11",
|
|
"@babel/core": "^7.29.6"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "^10.0.1",
|
|
"@tailwindcss/vite": "^4.3.1",
|
|
"@testing-library/dom": "^10.4.1",
|
|
"@testing-library/jest-dom": "^6.9.1",
|
|
"@testing-library/react": "^16.3.2",
|
|
"@testing-library/user-event": "^14.6.1",
|
|
"@types/node": "^26.0.0",
|
|
"@types/react": "^19.2.17",
|
|
"@types/react-dom": "^19.2.3",
|
|
"@vitejs/plugin-react": "^6.0.3",
|
|
"eslint": "^10.5.0",
|
|
"eslint-plugin-react-hooks": "^7.1.1",
|
|
"eslint-plugin-react-refresh": "^0.5.3",
|
|
"globals": "^17.7.0",
|
|
"jsdom": "^29.1.1",
|
|
"rollup-plugin-visualizer": "^7.0.1",
|
|
"tailwindcss": "^4.2.2",
|
|
"typescript": "^6.0.3",
|
|
"typescript-eslint": "^8.62.0",
|
|
"vite": "^8.1.0",
|
|
"vitest": "^4.1.9"
|
|
}
|
|
}
|