fix: audit error

This commit is contained in:
Zoltan Kochan
2025-12-02 13:02:24 +01:00
parent 4362c06005
commit 57291bcdd8
3 changed files with 22 additions and 29 deletions

46
pnpm-lock.yaml generated
View File

@@ -785,7 +785,7 @@ overrides:
cookie@<0.7.0: '>=0.7.0'
cross-spawn@<7.0.5: '>=7.0.5'
debug@<3.1.0: '>=3.1.0'
express@<4.20.0: ^4.20.0
express@<4.22.1: ^4.22.1
follow-redirects@<=1.15.5: '>=1.15.6'
glob-parent@<5.1.2: '>=5.1.2'
glob@>=10.3.7 <=11.0.3: ^11.1.0
@@ -11312,7 +11312,7 @@ packages:
resolution: {integrity: sha512-VEWhj9Zs6qY2vzVpwY0uViPGxCPhiVo+g2WTLPNGa8avYz6sC8eiHZOJv3E22TKm/PaeSzclvSbMXiXP1bYuMA==}
engines: {node: '>=18'}
peerDependencies:
express: ^4.20.0
express: ^4.22.1
'@verdaccio/commons-api@10.2.0':
resolution: {integrity: sha512-F/YZANu4DmpcEV0jronzI7v2fGVWkQ5Mwi+bVmV+ACJ+EzR0c9Jbhtbe5QyLUuzR97t8R5E/Xe53O0cc2LukdQ==}
@@ -12855,8 +12855,8 @@ packages:
express-rate-limit@5.5.1:
resolution: {integrity: sha512-MTjE2eIbHv5DyfuFz4zLYWxpqVhEhkTiwFGuB74Q9CSou2WHO52nlE5y3Zlg6SIsiYUIPj6ifFxnkPz6O3sIUg==}
express@4.21.2:
resolution: {integrity: sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==}
express@4.22.1:
resolution: {integrity: sha512-F2X8g9P1X7uCPZMA3MVf9wcTqlyNp7IhH5qPCI0izhaOIYXaW9L535tGA3qmjRzpH+bZczqq7hVKxTR4NWnu+g==}
engines: {node: '>= 0.10.0'}
extend@3.0.2:
@@ -15242,10 +15242,6 @@ packages:
pure-rand@7.0.1:
resolution: {integrity: sha512-oTUZM/NAZS8p7ANR3SHh30kXB+zK2r2BPcEn/awJIbOvq82WoMN4p62AWWp3Hhw50G0xMsw1mhIBLqHw64EcNQ==}
qs@6.13.0:
resolution: {integrity: sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==}
engines: {node: '>=0.6'}
qs@6.14.0:
resolution: {integrity: sha512-YWWTjgABSKcvs/nWBi9PycY/JiPJqOD4JA6o9Sej2AtvSGarXxKC3OQSk4pAarbdQlKAh5D4FCQkJNkW+GAn3w==}
engines: {node: '>=0.6'}
@@ -19638,14 +19634,14 @@ snapshots:
'@unrs/resolver-binding-win32-x64-msvc@1.11.1':
optional: true
'@verdaccio/auth@8.0.0-next-8.19(express@4.21.2)':
'@verdaccio/auth@8.0.0-next-8.19(express@4.22.1)':
dependencies:
'@verdaccio/config': 8.0.0-next-8.19
'@verdaccio/core': 8.0.0-next-8.19
'@verdaccio/loaders': 8.0.0-next-8.9
'@verdaccio/signature': 8.0.0-next-8.11
debug: 4.4.1
express: 4.21.2
express: 4.22.1
lodash: 4.17.21
verdaccio-htpasswd: 13.0.0-next-8.19
transitivePeerDependencies:
@@ -19735,7 +19731,7 @@ snapshots:
'@verdaccio/core': 8.0.0-next-8.19
'@verdaccio/url': 13.0.0-next-8.19
debug: 4.4.1
express: 4.21.2
express: 4.22.1
express-rate-limit: 5.5.1
lodash: 4.17.21
lru-cache: 7.18.3
@@ -20341,7 +20337,7 @@ snapshots:
bytes: 3.1.2
content-type: 1.0.5
debug: 4.4.3
http-errors: 2.0.0
http-errors: 2.0.1
iconv-lite: 0.7.0
on-finished: 2.4.1
qs: 6.14.0
@@ -21547,7 +21543,7 @@ snapshots:
express-rate-limit@5.5.1: {}
express@4.21.2:
express@4.22.1:
dependencies:
accepts: 1.3.8
array-flatten: 1.1.1
@@ -21556,27 +21552,27 @@ snapshots:
content-type: 1.0.5
cookie: 0.7.1
cookie-signature: 1.0.6
debug: 4.4.1
debug: 4.4.3
depd: 2.0.0
encodeurl: 2.0.0
escape-html: 1.0.3
etag: 1.8.1
finalhandler: 1.3.1
fresh: 0.5.2
http-errors: 2.0.0
http-errors: 2.0.1
merge-descriptors: 1.0.3
methods: 1.1.2
on-finished: 2.4.1
parseurl: 1.3.3
path-to-regexp: 0.1.12
proxy-addr: 2.0.7
qs: 6.13.0
qs: 6.14.0
range-parser: 1.2.1
safe-buffer: 5.2.1
send: 0.19.0
serve-static: 1.16.2
setprototypeof: 1.2.0
statuses: 2.0.1
statuses: 2.0.2
type-is: 1.6.18
utils-merge: 1.0.1
vary: 1.1.2
@@ -21663,7 +21659,7 @@ snapshots:
finalhandler@1.3.1:
dependencies:
debug: 4.4.1
debug: 4.4.3
encodeurl: 2.0.0
escape-html: 1.0.3
on-finished: 2.4.1
@@ -22213,7 +22209,7 @@ snapshots:
https-proxy-server-express@0.1.2:
dependencies:
express: 4.21.2
express: 4.22.1
http-proxy-middleware: 2.0.9
transitivePeerDependencies:
- '@types/express'
@@ -24233,10 +24229,6 @@ snapshots:
pure-rand@7.0.1: {}
qs@6.13.0:
dependencies:
side-channel: 1.1.0
qs@6.14.0:
dependencies:
side-channel: 1.1.0
@@ -24606,7 +24598,7 @@ snapshots:
send@0.19.0:
dependencies:
debug: 4.4.1
debug: 4.4.3
depd: 2.0.0
destroy: 1.2.0
encodeurl: 1.0.2
@@ -25545,7 +25537,7 @@ snapshots:
dependencies:
'@verdaccio/config': 8.0.0-next-8.19
'@verdaccio/core': 8.0.0-next-8.19
express: 4.21.2
express: 4.22.1
https-proxy-agent: 5.0.1
node-fetch: 2.6.7(encoding@0.1.13)
transitivePeerDependencies:
@@ -25567,7 +25559,7 @@ snapshots:
verdaccio@6.1.6(encoding@0.1.13)(typanion@3.14.0):
dependencies:
'@cypress/request': 3.0.9
'@verdaccio/auth': 8.0.0-next-8.19(express@4.21.2)
'@verdaccio/auth': 8.0.0-next-8.19(express@4.22.1)
'@verdaccio/config': 8.0.0-next-8.19
'@verdaccio/core': 8.0.0-next-8.19
'@verdaccio/loaders': 8.0.0-next-8.9
@@ -25588,7 +25580,7 @@ snapshots:
cors: 2.8.5
debug: 4.4.1
envinfo: 7.14.0
express: 4.21.2
express: 4.22.1
handlebars: 4.7.8
lodash: 4.17.21
lru-cache: 7.18.3

View File

@@ -335,6 +335,7 @@ minimumReleaseAge: 1440 # At least a day
minimumReleaseAgeExclude:
- body-parser@2.2.1
- express@4.22.1
- pnpm
- '@pnpm/*'
- parse-npm-tarball-url@4.0.0
@@ -358,7 +359,7 @@ overrides:
cookie@<0.7.0: '>=0.7.0'
cross-spawn@<7.0.5: '>=7.0.5'
debug@<3.1.0: '>=3.1.0'
express@<4.20.0: ^4.20.0
express@<4.22.1: ^4.22.1
follow-redirects@<=1.15.5: '>=1.15.6'
glob-parent@<5.1.2: '>=5.1.2'
glob@>=10.3.7 <=11.0.3: '^11.1.0'

View File

@@ -189,7 +189,7 @@
"cookie@<0.7.0": ">=0.7.0",
"cross-spawn@<7.0.5": ">=7.0.5",
"debug@<3.1.0": ">=3.1.0",
"express@<4.20.0": "^4.20.0",
"express@<4.22.1": "^4.22.1",
"follow-redirects@<=1.15.5": ">=1.15.6",
"glob-parent@<5.1.2": ">=5.1.2",
"glob@>=10.3.7 <=11.0.3": "^11.1.0",