From 7ca02ae24139808427cd889ee7a6f12bbbc76f26 Mon Sep 17 00:00:00 2001 From: lornakelly Date: Fri, 9 Oct 2026 11:00:42 +0100 Subject: [PATCH] Fix vulns Signed-off-by: lornakelly --- .changeset/fix-vulnerabilties.md | 5 +++ pnpm-lock.yaml | 58 +++++++++++++++----------------- pnpm-workspace.yaml | 12 +++---- 3 files changed, 38 insertions(+), 37 deletions(-) create mode 100644 .changeset/fix-vulnerabilties.md diff --git a/.changeset/fix-vulnerabilties.md b/.changeset/fix-vulnerabilties.md new file mode 100644 index 00000000..d114c501 --- /dev/null +++ b/.changeset/fix-vulnerabilties.md @@ -0,0 +1,5 @@ +--- +"@openworkflowspec/diagram-editor": patch +--- + +Fix vulnerabilities diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 885e8b5c..cda1ca8d 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -168,15 +168,13 @@ catalogs: overrides: baseline-browser-mapping@>=2.0.0 <2.11.0: '>=2.11.0' - brace-expansion@>=4.0.0 <5.0.8: '>=5.0.8' - brace-expansion@>=4.0.0 <5.0.9: '>=5.0.9' + brace-expansion@>=4.0.0 <5.0.12: '>=5.0.12' browserslist@<=4.28.6: '>=4.28.7' - dompurify@<3.4.9: '>=3.4.9' - dompurify@<=3.4.10: '>=3.4.11' - dompurify@<=3.4.11: '>=3.4.12' - dompurify@<=3.4.12: '>=3.4.13' - fast-uri@>=3.0.0 <3.1.6: '>=3.1.6 <4.0.0' + dompurify@<=3.4.15: '>=3.4.16' + fast-uri@>=3.0.0 <3.1.8: '>=3.1.8 <4.0.0' nanoid@>=3.0.0 <3.3.18: 3.3.18 + shell-quote@>=1.8.4 <1.11.0: '>=1.11.0' + source-map-js@>=1.0.0 <1.2.2: '>=1.2.2' importers: @@ -2934,8 +2932,8 @@ packages: bidi-js@1.1.0: resolution: {integrity: sha512-fX1Onk0tdVPC7obPWB5EbJ1z7NVhLq4m2xZLq2YXBkxzMXIGRpNMU88n0EPgWseKl12J7zXs7qrDxPK4sRs2fg==} - brace-expansion@5.0.9: - resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==} + brace-expansion@5.0.12: + resolution: {integrity: sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==} engines: {node: 20 || >=22} browserslist@4.28.9: @@ -3099,8 +3097,8 @@ packages: dom-accessibility-api@0.6.3: resolution: {integrity: sha512-7ZgogeTnjuHbo+ct10G9Ffp0mif17idi0IyWNVA/wcwcm7NPOD/WEHVP3n7n3MhXqxoIYm8d6MuZohYWIZ4T3w==} - dompurify@3.4.15: - resolution: {integrity: sha512-EUBjM+B+lkDE41iE82DDSCfkoPGfXx8IxFxPMjNzm/Uk4xDet77rTN9wqlxlVg71kK7XGuUMv6wUxJUwwv+Xyw==} + dompurify@3.4.16: + resolution: {integrity: sha512-sqo+pNp3qRhCIpbgRi1y8Tgk27Bo2Ry7w0dC1NBeNTdZChWjz9Xb/KOoZbRP/R6pQZ80Qw8YhXw13hWWBbMRnQ==} electron-to-chromium@1.5.427: resolution: {integrity: sha512-n14zb3FdsChZ2BNobqNHAJMcP3ifFv4paox2LvCrfVAQcqGiSURgbJl+PfMpHVCNFkStnNc+RRVtPBTVW5PDgw==} @@ -3168,8 +3166,8 @@ packages: fast-string-width@3.0.2: resolution: {integrity: sha512-gX8LrtNEI5hq8DVUfRQMbr5lpaS4nMIWV+7XEbXk2b8kiQIizgnlr12B4dA3ZEx3308ze0O4Q1R+cHts8kyUJg==} - fast-uri@3.1.7: - resolution: {integrity: sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==} + fast-uri@3.1.8: + resolution: {integrity: sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==} fast-wrap-ansi@0.2.2: resolution: {integrity: sha512-7F2Fl+TjRSenLqlU3UjSH0iyqopqoZIu7eZVpEirP2g1GtWa2G/ecEmBdgz31+Mxr+ELclgg6sokpSFIQiZ02Q==} @@ -3760,8 +3758,8 @@ packages: engines: {node: '>=10'} hasBin: true - shell-quote@1.10.0: - resolution: {integrity: sha512-w1aiOKwKuRgtwAReIIj89puqg+I7GvX4IbLrvmhXbzQsj1+Zwi4VO3+fa6ZF91TWSjIxoEkKnMeHcLEODK5ZXA==} + shell-quote@1.12.0: + resolution: {integrity: sha512-PcByqNyT/38F2kDNi006HAMRJaULuBzq/FOsw3qdZvX/GA9W/jamDaRskgHjubHiftXK5sIFxLNkvrXUwcof6Q==} engines: {node: '>= 0.4'} sirv@3.0.2: @@ -3771,8 +3769,8 @@ packages: sisteransi@1.0.5: resolution: {integrity: sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg==} - source-map-js@1.2.1: - resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==} + source-map-js@1.2.2: + resolution: {integrity: sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==} engines: {node: '>=0.10.0'} source-map@0.6.1: @@ -5836,7 +5834,7 @@ snapshots: jiti: 2.7.0 lightningcss: 1.32.0 magic-string: 0.30.21 - source-map-js: 1.2.1 + source-map-js: 1.2.2 tailwindcss: 4.3.3 '@tailwindcss/oxide-android-arm64@4.3.3': @@ -6271,7 +6269,7 @@ snapshots: ajv@8.20.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.7 + fast-uri: 3.1.8 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -6315,7 +6313,7 @@ snapshots: dependencies: require-from-string: 2.0.2 - brace-expansion@5.0.9: + brace-expansion@5.0.12: dependencies: balanced-match: 4.0.4 @@ -6364,7 +6362,7 @@ snapshots: css-tree@3.2.1: dependencies: mdn-data: 2.27.1 - source-map-js: 1.2.1 + source-map-js: 1.2.2 css.escape@1.5.1: {} @@ -6446,7 +6444,7 @@ snapshots: dom-accessibility-api@0.6.3: {} - dompurify@3.4.15: + dompurify@3.4.16: optionalDependencies: '@types/trusted-types': 2.0.7 @@ -6520,7 +6518,7 @@ snapshots: dependencies: fast-string-truncated-width: 3.0.3 - fast-uri@3.1.7: {} + fast-uri@3.1.8: {} fast-wrap-ansi@0.2.2: dependencies: @@ -6641,7 +6639,7 @@ snapshots: launch-editor@2.14.1: dependencies: picocolors: 1.1.1 - shell-quote: 1.10.0 + shell-quote: 1.12.0 lightningcss-android-arm64@1.32.0: optional: true @@ -6777,7 +6775,7 @@ snapshots: dependencies: '@babel/parser': 7.29.7 '@babel/types': 7.29.7 - source-map-js: 1.2.1 + source-map-js: 1.2.2 marked@14.0.0: {} @@ -6787,7 +6785,7 @@ snapshots: minimatch@10.2.5: dependencies: - brace-expansion: 5.0.9 + brace-expansion: 5.0.12 minimist@1.2.8: {} @@ -6795,7 +6793,7 @@ snapshots: monaco-editor@0.57.0: dependencies: - dompurify: 3.4.15 + dompurify: 3.4.16 marked: 14.0.0 monaco-languageserver-types@0.4.1: @@ -6953,7 +6951,7 @@ snapshots: dependencies: nanoid: 3.3.18 picocolors: 1.1.1 - source-map-js: 1.2.1 + source-map-js: 1.2.2 prettier@2.8.8: optional: true @@ -7146,7 +7144,7 @@ snapshots: semver@7.8.5: {} - shell-quote@1.10.0: {} + shell-quote@1.12.0: {} sirv@3.0.2: dependencies: @@ -7156,7 +7154,7 @@ snapshots: sisteransi@1.0.5: {} - source-map-js@1.2.1: {} + source-map-js@1.2.2: {} source-map@0.6.1: {} diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 84443732..c8fc2795 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -65,12 +65,10 @@ onlyBuiltDependencies: - unrs-resolver overrides: baseline-browser-mapping@>=2.0.0 <2.11.0: ">=2.11.0" - brace-expansion@>=4.0.0 <5.0.8: ">=5.0.8" - brace-expansion@>=4.0.0 <5.0.9: ">=5.0.9" + brace-expansion@>=4.0.0 <5.0.12: ">=5.0.12" browserslist@<=4.28.6: ">=4.28.7" - dompurify@<3.4.9: ">=3.4.9" - dompurify@<=3.4.10: ">=3.4.11" - dompurify@<=3.4.11: ">=3.4.12" - dompurify@<=3.4.12: ">=3.4.13" - fast-uri@>=3.0.0 <3.1.6: ">=3.1.6 <4.0.0" + dompurify@<=3.4.15: ">=3.4.16" + fast-uri@>=3.0.0 <3.1.8: ">=3.1.8 <4.0.0" nanoid@>=3.0.0 <3.3.18: "3.3.18" + shell-quote@>=1.8.4 <1.11.0: ">=1.11.0" + source-map-js@>=1.0.0 <1.2.2: ">=1.2.2"