mirror of
https://github.com/mudler/LocalAI.git
synced 2026-07-30 18:09:05 -04:00
3698361510
* fix: CVE-2026-54290 security vulnerability Automated dependency upgrade by OrbisAI Security Signed-off-by: orbisai0security <mediratta@gmail.com> Signed-off-by: Anupam Mediratta <mediratta@gmail.com> * fix(deps): override hono transitive dep to eliminate CVE-2026-54290 Add package.json `overrides` field to force hono@4.12.25 across the entire dependency graph, including the transitive copy pulled in by @modelcontextprotocol/sdk. Previously bun.lock retained a scoped `@modelcontextprotocol/sdk/hono` entry resolved to the vulnerable hono@4.12.8; the override removes that entry so only the patched version ships. Assisted-by: Claude Code:claude-sonnet-4-6 Signed-off-by: Anupam Mediratta <mediratta@gmail.com> --------- Signed-off-by: orbisai0security <mediratta@gmail.com> Signed-off-by: Anupam Mediratta <mediratta@gmail.com>
65 lines
1.9 KiB
JSON
65 lines
1.9 KiB
JSON
{
|
|
"name": "localai-react-ui",
|
|
"private": true,
|
|
"version": "0.0.1",
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "vite build",
|
|
"preview": "vite preview",
|
|
"lint": "eslint .",
|
|
"i18n:extract": "i18next-parser",
|
|
"test:e2e": "playwright test",
|
|
"test:e2e:ui": "playwright test --ui",
|
|
"build:coverage": "COVERAGE=true vite build",
|
|
"build:coverage-v8": "COVERAGE_V8=true vite build",
|
|
"coverage:report": "nyc report"
|
|
},
|
|
"overrides": {
|
|
"hono": "4.12.25"
|
|
},
|
|
"dependencies": {
|
|
"@codemirror/autocomplete": "^6.18.6",
|
|
"@codemirror/commands": "^6.8.1",
|
|
"@codemirror/lang-yaml": "^6.1.2",
|
|
"@codemirror/language": "^6.11.0",
|
|
"@codemirror/lint": "^6.8.5",
|
|
"@codemirror/search": "^6.5.10",
|
|
"@codemirror/state": "^6.5.2",
|
|
"@codemirror/view": "^6.36.8",
|
|
"@fontsource-variable/geist": "^5.2.8",
|
|
"@fontsource-variable/geist-mono": "^5.2.7",
|
|
"@fortawesome/fontawesome-free": "^6.7.2",
|
|
"@lezer/highlight": "^1.2.1",
|
|
"@modelcontextprotocol/ext-apps": "^1.2.2",
|
|
"@modelcontextprotocol/sdk": "^1.25.1",
|
|
"dompurify": "^3.4.12",
|
|
"highlight.js": "^11.11.1",
|
|
"hono": "4.12.25",
|
|
"i18next": "^26.0.8",
|
|
"i18next-browser-languagedetector": "^8.2.1",
|
|
"i18next-http-backend": "^3.0.6",
|
|
"marked": "^15.0.7",
|
|
"react": "^19.1.0",
|
|
"react-dom": "^19.1.0",
|
|
"react-i18next": "^17.0.6",
|
|
"react-router-dom": "^7.18.1",
|
|
"yaml": "^2.8.3"
|
|
},
|
|
"devDependencies": {
|
|
"@bcoe/v8-coverage": "^1.0.2",
|
|
"@eslint/js": "^9.27.0",
|
|
"@playwright/test": "1.58.2",
|
|
"@vitejs/plugin-react": "^6.0.2",
|
|
"eslint": "^9.27.0",
|
|
"eslint-plugin-react-hooks": "^5.2.0",
|
|
"eslint-plugin-react-refresh": "^0.4.20",
|
|
"globals": "^16.1.0",
|
|
"i18next-parser": "^9.4.0",
|
|
"nyc": "^18.0.0",
|
|
"v8-to-istanbul": "^9.3.0",
|
|
"vite": "^8.0.14",
|
|
"vite-plugin-istanbul": "^9.0.0"
|
|
}
|
|
}
|