Skip to content

Commit 023e3b1

Browse files
SamuelHanonosamuelhanono-Nvidia
SamuelHanono
and
samuelhanono-Nvidia
authored
fix: update vulnerable dependencies (#1262)
* fix: update vulnerable dependencies Signed-off-by: samuelhanono-Nvidia <shanononahmad@nvidia.com> * fix: keep pnpm overrides available in container builds Signed-off-by: samuelhanono-Nvidia <shanononahmad@nvidia.com> --------- Signed-off-by: samuelhanono-Nvidia <shanononahmad@nvidia.com> Co-authored-by: samuelhanono-Nvidia <shanononahmad@nvidia.com>
1 parent ad89291 commit 023e3b1

11 files changed

Lines changed: 1024 additions & 999 deletions

‎docs/docs_requirements.txt‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,7 @@ sphinx-markdown-builder==0.6.8
3232
sphinx-new-tab-link==0.8.0
3333
sphinx-simplepdf==1.6.0
3434
Pillow>=11.0.0
35+
idna==3.16 # Security floor for CVE-2026-45409
3536
sphinx-substitution-extensions==2024.2.25
3637
sphinxcontrib-mermaid==1.0.0
3738
sphinxcontrib-spelling==8.0.2

‎docs/locked_requirements.txt‎

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -395,10 +395,12 @@ fonttools[woff]==4.56.0 \
395395
--hash=sha256:fa760e5fe8b50cbc2d71884a1eff2ed2b95a005f02dda2fa431560db0ddd927f \
396396
--hash=sha256:ffda9b8cd9cb8b301cae2602ec62375b59e2e2108a117746f12215145e3f786c
397397
# via weasyprint
398-
idna==3.10 \
399-
--hash=sha256:12f65c9b470abda6dc35cf8e63cc574b1c52b11df2c86030af0ac09b01b13ea9 \
400-
--hash=sha256:946d195a0d259cbba61165e88e65941f16e9b36ea6ddb97f00452bae8b1287d3
401-
# via requests
398+
idna==3.16 \
399+
--hash=sha256:cc246e3a3f89580c3a951b5ad298ca4638078b2cdd4f115654332b5c26daded5 \
400+
--hash=sha256:d7a6da03db833450fca25d2358ac9ff06cd624577a4aea3a596d5c0f77b8e03d
401+
# via
402+
# -r docs_requirements.txt
403+
# requests
402404
imagesize==1.4.1 \
403405
--hash=sha256:0d8d18d08f840c19d0ee7ca1fd82490fdc3729b7ac93f49870406ddde8ef8d8b \
404406
--hash=sha256:69150444affb9cb0d5cc5a92b3676f0b2fb7cd9ae39e947a5e11a36b4497cd4a
@@ -876,8 +878,8 @@ sphinx-markdown-builder==0.6.8 \
876878
# via
877879
# -r docs_requirements.txt
878880
# sphinx-multiversion
879-
sphinx-multiversion @ https://github.com/RyaliNvidia/sphinx-multiversion/archive/refs/tags/v0.2.7.zip \
880-
--hash=sha256:f8d597ad5e2cd012f08808fe58d712701eacc2eae96e233b73d52956edf48c38
881+
sphinx-multiversion @ https://github.com/RyaliNvidia/sphinx-multiversion/archive/refs/tags/v0.2.5.zip \
882+
--hash=sha256:2616bde204930ed6995d9acd86f35770c1d8b02b37383e0653a706b1306f2406
881883
# via -r docs_requirements.txt
882884
sphinx-new-tab-link==0.8.0 \
883885
--hash=sha256:6c757d99f559224a04142c3971c8baa6ac90aca905f15b129d57eeca0ece9582 \

‎src/go.mod‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -17,8 +17,8 @@ require (
1717
// Test dependencies
1818
github.com/testcontainers/testcontainers-go v0.43.0
1919
github.com/testcontainers/testcontainers-go/modules/postgres v0.43.0
20-
google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171
21-
google.golang.org/grpc v1.81.1
20+
google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478
21+
google.golang.org/grpc v1.82.1
2222
gopkg.in/yaml.v3 v3.0.1
2323
)
2424

@@ -77,14 +77,14 @@ require (
7777
github.com/yusufpapurcu/wmi v1.2.4 // indirect
7878
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
7979
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 // indirect
80-
go.opentelemetry.io/otel v1.43.0 // indirect
81-
go.opentelemetry.io/otel/metric v1.43.0 // indirect
82-
go.opentelemetry.io/otel/trace v1.43.0 // indirect
80+
go.opentelemetry.io/otel v1.44.0 // indirect
81+
go.opentelemetry.io/otel/metric v1.44.0 // indirect
82+
go.opentelemetry.io/otel/trace v1.44.0 // indirect
8383
golang.org/x/crypto v0.53.0 // indirect
84-
golang.org/x/net v0.55.0 // indirect
84+
golang.org/x/net v0.56.0 // indirect
8585
golang.org/x/sync v0.21.0 // indirect
8686
golang.org/x/sys v0.46.0 // indirect
87-
golang.org/x/text v0.38.0 // indirect
87+
golang.org/x/text v0.39.0 // indirect
8888
golang.org/x/time v0.11.0 // indirect
8989
google.golang.org/protobuf v1.36.11 // indirect
9090
kernel.org/pub/linux/libs/security/libcap/psx v1.2.70 // indirect

‎src/go.sum‎

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -156,20 +156,20 @@ go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ
156156
go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
157157
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 h1:sbiXRNDSWJOTobXh5HyQKjq6wUC5tNybqjIqDpAY4CU=
158158
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0/go.mod h1:69uWxva0WgAA/4bu2Yy70SLDBwZXuQ6PbBpbsa5iZrQ=
159-
go.opentelemetry.io/otel v1.43.0 h1:mYIM03dnh5zfN7HautFE4ieIig9amkNANT+xcVxAj9I=
160-
go.opentelemetry.io/otel v1.43.0/go.mod h1:JuG+u74mvjvcm8vj8pI5XiHy1zDeoCS2LB1spIq7Ay0=
161-
go.opentelemetry.io/otel/metric v1.43.0 h1:d7638QeInOnuwOONPp4JAOGfbCEpYb+K6DVWvdxGzgM=
162-
go.opentelemetry.io/otel/metric v1.43.0/go.mod h1:RDnPtIxvqlgO8GRW18W6Z/4P462ldprJtfxHxyKd2PY=
159+
go.opentelemetry.io/otel v1.44.0 h1:JjwHmHpA4iZ3wBxluu2fbbE7j4kqlE8jXyAyPXH7HqU=
160+
go.opentelemetry.io/otel v1.44.0/go.mod h1:BMgjTHL9WPRlRjL2oZCBTL4whCGtXch2H4BhOPIAyYc=
161+
go.opentelemetry.io/otel/metric v1.44.0 h1:1w0gILTcHdr3YI+ixLyjemwrVnsMURbTZFrSYCdDdmc=
162+
go.opentelemetry.io/otel/metric v1.44.0/go.mod h1:8O7hanEPBNgEMmybD3s2VBKcgWOCsA6tzHBPODAiquo=
163163
go.opentelemetry.io/otel/sdk v1.43.0 h1:pi5mE86i5rTeLXqoF/hhiBtUNcrAGHLKQdhg4h4V9Dg=
164164
go.opentelemetry.io/otel/sdk v1.43.0/go.mod h1:P+IkVU3iWukmiit/Yf9AWvpyRDlUeBaRg6Y+C58QHzg=
165165
go.opentelemetry.io/otel/sdk/metric v1.43.0 h1:S88dyqXjJkuBNLeMcVPRFXpRw2fuwdvfCGLEo89fDkw=
166166
go.opentelemetry.io/otel/sdk/metric v1.43.0/go.mod h1:C/RJtwSEJ5hzTiUz5pXF1kILHStzb9zFlIEe85bhj6A=
167-
go.opentelemetry.io/otel/trace v1.43.0 h1:BkNrHpup+4k4w+ZZ86CZoHHEkohws8AY+WTX09nk+3A=
168-
go.opentelemetry.io/otel/trace v1.43.0/go.mod h1:/QJhyVBUUswCphDVxq+8mld+AvhXZLhe+8WVFxiFff0=
167+
go.opentelemetry.io/otel/trace v1.44.0 h1:jxF5CsGYCe74MCRx2X4g7WsY/VBKRqqpNvXlX/6gtIk=
168+
go.opentelemetry.io/otel/trace v1.44.0/go.mod h1:oLl1jrMQAVo6v3GAggN+1VH9VIz9iUSvW53sW1Q8PIE=
169169
golang.org/x/crypto v0.53.0 h1:QZ4Muo8THX6CizN2vPPd5fBGHyogrdK9fG4wLPFUsto=
170170
golang.org/x/crypto v0.53.0/go.mod h1:DNLU434OwVakk9PzuwV8w62mAJpRJL3vsgcfp4Qnsio=
171-
golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8=
172-
golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww=
171+
golang.org/x/net v0.56.0 h1:Rw8j/hFzGvJUZwNBXnAtf5sVDVt+65SK2C7IxCxZt5o=
172+
golang.org/x/net v0.56.0/go.mod h1:D3Ku6r+V6JROoZK144D2XfMHFcMq/0zSfLelVTCFKec=
173173
golang.org/x/sync v0.21.0 h1:HLII4xRRTtCRkxYp4HNFF0Js/Og6q2i++KXbg0gHCwM=
174174
golang.org/x/sync v0.21.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
175175
golang.org/x/sys v0.0.0-20190916202348-b4ddaad3f8a3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -179,17 +179,17 @@ golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw=
179179
golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
180180
golang.org/x/term v0.44.0 h1:0rLvDRCtNj0gZkyIXhCyOb2OAzEhLVqc4B+hrsBhrmc=
181181
golang.org/x/term v0.44.0/go.mod h1:7ze4MdzUzLXpSAoFP1H0bOI9aXDqveSvatT5vKcFh2Y=
182-
golang.org/x/text v0.38.0 h1:sXmwo9DwP3OK9EZ7PqAdaooSGozfl/3a6/xJcbzPRhE=
183-
golang.org/x/text v0.38.0/go.mod h1:YXZt3QhHUKYT53r2lLKFIVi6Ao1jdzrTR/KQ09qyxF4=
182+
golang.org/x/text v0.39.0 h1:UbZz4pLOvn600D6Oh6GGEI6VAmndrEBLv8/6BEXzyus=
183+
golang.org/x/text v0.39.0/go.mod h1:3UwRclnC2g0TU9x8PZiyfOajCd1zaUNHF9cvqcQZ+ZM=
184184
golang.org/x/time v0.11.0 h1:/bpjEDfN9tkoN/ryeYHnv5hcMlc8ncjMcM4XBk5NWV0=
185185
golang.org/x/time v0.11.0/go.mod h1:CDIdPxbZBQxdj6cxyCIdrNogrJKMJ7pr37NYpMcMDSg=
186186
golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
187187
gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
188188
gonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E=
189-
google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171 h1:ggcbiqK8WWh6l1dnltU4BgWGIGo+EVYxCaAPih/zQXQ=
190-
google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
191-
google.golang.org/grpc v1.81.1 h1:VnnIIZ88UzOOKLukQi+ImGz8O1Wdp8nAGGnvOfEIWQQ=
192-
google.golang.org/grpc v1.81.1/go.mod h1:xGH9GfzOyMTGIOXBJmXt+BX/V0kcdQbdcuwQ/zNw42I=
189+
google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478 h1:RmoJA1ujG+/lRGNfUnOMfhCy5EipVMyvUE+KNbPbTlw=
190+
google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
191+
google.golang.org/grpc v1.82.1 h1:NnAxzGRA0677vCa4BUkOAnO5+FfQqVl9iUXeD0IqcGE=
192+
google.golang.org/grpc v1.82.1/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA=
193193
google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
194194
google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
195195
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=

‎src/locked_requirements.txt‎

Lines changed: 18 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -390,10 +390,11 @@ httptools==0.7.1 \
390390
--hash=sha256:f65744d7a8bdb4bda5e1fa23e4ba16832860606fcc09d674d56e425e991539ec \
391391
--hash=sha256:f72fdbae2dbc6e68b8239defb48e6a5937b12218e6ffc2c7846cc37befa84362
392392
# via uvicorn
393-
idna==3.11 \
394-
--hash=sha256:771a87f49d9defaf64091e6e6fe9c18d4833f140bd19464795bc32d966ca37ea \
395-
--hash=sha256:795dafcc9c04ed0c1fb032c2aa73654d8e8c5023a7df64a53f39190ada629902
393+
idna==3.16 \
394+
--hash=sha256:cc246e3a3f89580c3a951b5ad298ca4638078b2cdd4f115654332b5c26daded5 \
395+
--hash=sha256:d7a6da03db833450fca25d2358ac9ff06cd624577a4aea3a596d5c0f77b8e03d
396396
# via
397+
# -r requirements.txt
397398
# anyio
398399
# requests
399400
ijson==3.4.0 \
@@ -501,9 +502,9 @@ jmespath==1.1.0 \
501502
# via
502503
# boto3
503504
# botocore
504-
jwcrypto==1.5.6 \
505-
--hash=sha256:150d2b0ebbdb8f40b77f543fb44ffd2baeff48788be71f67f03566692fd55789 \
506-
--hash=sha256:771a87762a0c081ae6166958a954f80848820b2ab066937dc8b8379d65b1b039
505+
jwcrypto==1.5.7 \
506+
--hash=sha256:70204d7cca406eda8c82352e3c41ba2d946610dafd19e54403f0a1f4f18633c6 \
507+
--hash=sha256:729463fefe28b6de5cf1ebfda3e94f1a1b41d2799148ef98a01cb9678ebe2bb0
507508
# via -r requirements.txt
508509
kombu==5.6.2 \
509510
--hash=sha256:8060497058066c6f5aed7c26d7cd0d3b574990b09de842a8c5aaed0b92cc5a55 \
@@ -520,7 +521,9 @@ lark==1.1.5 \
520521
macholib==1.16.3 \
521522
--hash=sha256:07ae9e15e8e4cd9a788013d81f5908b3609aa76f9b1421bae9c4d7606ec86a30 \
522523
--hash=sha256:0e315d7583d38b8c77e815b1ecbdbf504a8258d8b3e17b61165c6feb60d18f2c
523-
# via -r requirements.txt
524+
# via
525+
# -r requirements.txt
526+
# pyinstaller
524527
markupsafe==3.0.3 \
525528
--hash=sha256:0303439a41979d9e74d18ff5e2dd8c43ed6c6001fd40e5bf2e43f7bd9bbc523f \
526529
--hash=sha256:068f375c472b3e7acbe2d5318dea141359e6900156b5b2ba06a30b169086b91a \
@@ -1027,9 +1030,9 @@ redis==7.4.0 \
10271030
--hash=sha256:64a6ea7bf567ad43c964d2c30d82853f8df927c5c9017766c55a1d1ed95d18ad \
10281031
--hash=sha256:a9c74a5c893a5ef8455a5adb793a31bb70feb821c86eccb62eebef5a19c429ec
10291032
# via -r requirements.txt
1030-
requests==2.32.4 \
1031-
--hash=sha256:27babd3cda2a6d50b30443204ee89830707d396671944c998b5975b031ac2b2c \
1032-
--hash=sha256:27d0316682c8a29834d3264820024b62a36942083d52caf2f14c0591336d3422
1033+
requests==2.33.1 \
1034+
--hash=sha256:18817f8c57c6263968bc123d237e3b8b08ac046f5456bd1e307ee8f4250d3517 \
1035+
--hash=sha256:4e6d1ef462f3626a1f0a0a9c42dd93c63bad33f9f1c1937509b8c5c8718ab56a
10331036
# via
10341037
# -r requirements.txt
10351038
# azure-core
@@ -1061,8 +1064,7 @@ slack-sdk==3.20.2 \
10611064
starlette==1.3.1 \
10621065
--hash=sha256:05d0213193f2fbaae60e2ecb593b4add4262ad4e46536b54abe36f11a71724e0 \
10631066
--hash=sha256:c7372aae11c3c3f26a42df7bd626cec2f47d03483d261d369516a615a53714c6
1064-
# via
1065-
# fastapi
1067+
# via fastapi
10661068
texttable==1.6.4 \
10671069
--hash=sha256:42ee7b9e15f7b225747c3fa08f43c5d6c83bc899f80ff9bae9319334824076e9 \
10681070
--hash=sha256:dd2b0eaebb2a9e167d1cefedab4700e5dcbdb076114eed30b58b97ed6b37d6f2
@@ -1482,9 +1484,10 @@ zipp==3.23.0 \
14821484
# via importlib-metadata
14831485

14841486
# The following packages are considered to be unsafe in a requirements file:
1485-
setuptools==82.0.0 \
1486-
--hash=sha256:22e0a2d69474c6ae4feb01951cb69d515ed23728cf96d05513d36e42b62b37cb \
1487-
--hash=sha256:70b18734b607bd1da571d097d236cfcfacaf01de45717d59e6e04b96877532e0
1487+
setuptools==83.0.0 \
1488+
--hash=sha256:025bccbbf0fa05b6192bc64ae1e7b16e001fd6d6d4d5de03c97b1c1ade523bef \
1489+
--hash=sha256:29b23c360f22f414dc7336bb39178cc7bcbf6021ed2733cde173f09dba19abb3
14881490
# via
1491+
# -r requirements.txt
14891492
# pyinstaller
14901493
# pyinstaller-hooks-contrib

‎src/requirements.txt‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,8 +46,9 @@ h11==0.16.0
4646
pyjwt==2.13.0
4747

4848
# Requests
49-
requests==2.32.4
49+
requests==2.33.1
5050
urllib3==2.7.0
51+
idna==3.16
5152

5253
# Jinja
5354
jinja2==3.1.6
@@ -62,7 +63,10 @@ mypy-boto3-sts==1.38.*
6263
cryptography==48.0.1
6364

6465
# JWE, JWK
65-
jwcrypto==1.5.6
66+
jwcrypto==1.5.7
67+
68+
# Build dependency security floor (CVE-2026-59890).
69+
setuptools==83.0.0
6670

6771
# Pyinstaller
6872
pyinstaller==6.19.0

‎src/tests/locked_requirements.txt‎

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -173,10 +173,11 @@ httpx==0.28.1 \
173173
--hash=sha256:75e98c5f16b0f35b567856f597f06ff2270a374470a5c2392242528e3e3e42fc \
174174
--hash=sha256:d909fcccc110f8c7faf814ca82a9a4d816bc5a6dbfea25d6591d6985b8ba59ad
175175
# via -r requirements.txt
176-
idna==3.11 \
177-
--hash=sha256:771a87f49d9defaf64091e6e6fe9c18d4833f140bd19464795bc32d966ca37ea \
178-
--hash=sha256:795dafcc9c04ed0c1fb032c2aa73654d8e8c5023a7df64a53f39190ada629902
176+
idna==3.16 \
177+
--hash=sha256:cc246e3a3f89580c3a951b5ad298ca4638078b2cdd4f115654332b5c26daded5 \
178+
--hash=sha256:d7a6da03db833450fca25d2358ac9ff06cd624577a4aea3a596d5c0f77b8e03d
179179
# via
180+
# -r requirements.txt
180181
# anyio
181182
# httpx
182183
# requests

‎src/tests/requirements.txt‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,3 +23,4 @@ bcrypt==4.2.1
2323
httpx==0.28.1
2424
testcontainers==4.13.2
2525
urllib3==2.7.0
26+
idna==3.16 # Security floor for CVE-2026-45409

‎src/ui/THIRD_PARTY_LICENSES.md‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# Third-Party License Inventory
22

3-
Generated: 2026-05-29 · Packages audited: **226** · Scope: production (server image)
3+
Generated: 2026-08-05 · Packages audited: **226** · Scope: production (server image)
44

55
> Auto-generated by `pnpm licenses:generate`. Do not edit manually.
66
@@ -77,8 +77,8 @@ Generated: 2026-05-29 · Packages audited: **226** · Scope: production (server
7777
| `@lezer/xml` | 1.0.6 | [link](https://github.com/lezer-parser/xml#readme) |
7878
| `@lezer/yaml` | 1.0.4 | [link](https://github.com/lezer-parser/yaml#readme) |
7979
| `@marijn/find-cluster-break` | 1.0.2 | [link](https://github.com/marijnh/find-cluster-break#readme) |
80-
| `@next/env` | 16.2.4 | [link](https://github.com/vercel/next.js#readme) |
81-
| `@next/swc-darwin-arm64` | 16.2.4 | [link](https://github.com/vercel/next.js#readme) |
80+
| `@next/env` | 16.2.11 | [link](https://github.com/vercel/next.js#readme) |
81+
| `@next/swc-darwin-arm64` | 16.2.11 | [link](https://github.com/vercel/next.js#readme) |
8282
| `@radix-ui/number` | 1.1.1 | [link](https://radix-ui.com/primitives) |
8383
| `@radix-ui/primitive` | 1.1.3 | [link](https://radix-ui.com/primitives) |
8484
| `@radix-ui/react-accessible-icon` | 1.1.7 | [link](https://radix-ui.com/primitives) |
@@ -192,15 +192,15 @@ Generated: 2026-05-29 · Packages audited: **226** · Scope: production (server
192192
| `jwt-decode` | 4.0.0 | [link](https://github.com/auth0/jwt-decode#readme) |
193193
| `lodash.debounce` | 4.0.8 | [link](https://lodash.com/) |
194194
| `ms` | 2.1.3 | [link](https://github.com/vercel/ms#readme) |
195-
| `nanoid` | 3.3.11 | [link](https://github.com/ai/nanoid#readme) |
196-
| `next` | 16.2.4 | [link](https://nextjs.org) |
195+
| `nanoid` | 3.3.16 | [link](https://github.com/ai/nanoid#readme) |
196+
| `next` | 16.2.11 | [link](https://nextjs.org) |
197197
| `next-themes` | 0.4.6 | [link](https://github.com/pacocoursey/next-themes#readme) |
198198
| `node-releases` | 2.0.27 | [link](https://github.com/chicoxyzzy/node-releases#readme) |
199199
| `nuqs` | 2.8.8 | [link](https://nuqs.dev) |
200-
| `postcss` | 8.4.31 | [link](https://postcss.org/) |
200+
| `postcss` | 8.5.23 | [link](https://postcss.org/) |
201201
| `radix-ui` | 1.4.3 | [link](https://radix-ui.com/primitives) |
202-
| `react` | 19.2.3 | [link](https://react.dev/) |
203-
| `react-dom` | 19.2.3 | [link](https://react.dev/) |
202+
| `react` | 19.2.8 | [link](https://react.dev/) |
203+
| `react-dom` | 19.2.8 | [link](https://react.dev/) |
204204
| `react-error-boundary` | 6.1.1 | [link](https://react-error-boundary-lib.vercel.app/) |
205205
| `react-hotkeys-hook` | 5.2.4 | [link](https://react-hotkeys-hook.vercel.app/) |
206206
| `react-remove-scroll` | 2.7.2 | [link](https://github.com/theKashey/react-remove-scroll#readme) |

‎src/ui/package.json‎

Lines changed: 17 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -86,8 +86,8 @@
8686
"next-themes": "^0.4.6",
8787
"nuqs": "^2.8.6",
8888
"radix-ui": "^1.4.3",
89-
"react": "19.2.3",
90-
"react-dom": "19.2.3",
89+
"react": "19.2.8",
90+
"react-dom": "19.2.8",
9191
"react-error-boundary": "^6.0.1",
9292
"react-hotkeys-hook": "^5.2.3",
9393
"sonner": "^2.0.7",
@@ -106,7 +106,7 @@
106106
"@types/react": "^19",
107107
"@types/react-dom": "^19",
108108
"@vitejs/plugin-react": "^6.0.2",
109-
"@vitest/coverage-v8": "4.1.9",
109+
"@vitest/coverage-v8": "4.1.10",
110110
"critters": "^0.0.25",
111111
"cssnano": "^7.0.6",
112112
"esbuild": "^0.28.1",
@@ -123,8 +123,8 @@
123123
"tw-animate-css": "^1.4.0",
124124
"typescript": "^5",
125125
"vite": "^8.0.16",
126-
"vitest": "^4.1.9",
127-
"ws": "^8.19.0"
126+
"vitest": "^4.1.10",
127+
"ws": "^8.21.0"
128128
},
129129
"msw": {
130130
"workerDirectory": [
@@ -133,7 +133,18 @@
133133
},
134134
"pnpm": {
135135
"overrides": {
136-
"postcss": "8.5.18"
136+
"brace-expansion@1": "1.1.18",
137+
"brace-expansion@5": "5.0.9",
138+
"fast-uri": "3.1.5",
139+
"js-yaml": "4.3.0",
140+
"linkify-it": "5.0.1",
141+
"markdown-it": "14.3.0",
142+
"nanoid@3": "3.3.16",
143+
"postcss": "8.5.23",
144+
"postcss-selector-parser": "7.1.3",
145+
"svgo": "4.0.1",
146+
"ws@7": "7.5.11",
147+
"ws@8": "8.21.0"
137148
},
138149
"ignoredOptionalDependencies": [
139150
"@img/sharp-darwin-arm64",

0 commit comments

Comments
 (0)