mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-09-06 07:29:09 +00:00
f8cfcb547a
The backend audit gate started failing on newly published advisories against three transitive dependencies, none of which are direct dependencies: - fast-uri 3.1.5 to 3.1.7 (high): four host-confusion and SSRF advisories, reached via composerize, composeverter, and ajv. - qs 6.15.2 to 6.16.0 (moderate): array-limit bypass and a denial of service via attacker-controlled isBuffer. - @humanfs/node 0.16.7 to 0.16.8 (moderate): recursive copy follows symlinked files outside the source tree. All three resolve with semver-compatible bumps, so only the lockfile changes. Backend typecheck, lint, and the test suite are unaffected.