João Salavisa
a0ee801b82
* fix(deps): resolve low and medium Dependabot alerts Bump vulnerable transitive and direct dependencies across npm, Go, and Rust to clear all fixable low/medium severity Dependabot advisories. npm (pnpm.overrides, scoped by major; hono pinned in @kandev/theme to force the shadcn dev-CLI peer): - ajv@6 6.15.0, @babel/core 7.29.x, body-parser 2.3.0, brace-expansion 1.1.16/2.1.2, dompurify 3.4.12, hono 4.12.x, @hono/node-server 2.0.x, js-yaml 4.3.0, lodash(-es) 4.18.x, markdown-it 14.3.x, mermaid 11.16.x, path-to-regexp@8 8.4.x, picomatch@2 2.3.2, postcss 8.5.x, protobufjs 7.6.5, qs 6.15.x, uuid@11 11.1.1, ws 8.21.x Go: golang.org/x/net 0.55.0, github.com/jackc/pgx/v5 5.9.2 Rust (apps/desktop): serde_with 3.21.0, tauri family 2.11.x (rand 0.7.3 dropped by the tauri cascade) Highs are handled by a separate effort; docker/grpc left untouched. Remaining unresolved mediums: glib (blocked by tauri's gtk ^0.18 constraint) and docker cp advisories (fix requires the docker major bump owned by the highs effort / no patched version yet). * fix(desktop): align @tauri-apps/cli with the 2.11 Rust crate bump The Rust `tauri` crate moved to 2.11.5, but `@tauri-apps/cli` (which runs `tauri build` for desktop packaging) was still pinned to 2.8.4. Tauri expects the CLI and crate on the same minor line, so bump the CLI to 2.11.4 to keep packaging tooling in sync with the Cargo crates. --------- Co-authored-by: Kandev Agent <agent@kandev.dev>
69 lines
1.8 KiB
JSON
69 lines
1.8 KiB
JSON
{
|
|
"name": "kandev-monorepo",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"packageManager": "pnpm@9.15.9",
|
|
"engines": {
|
|
"node": "^24"
|
|
},
|
|
"scripts": {
|
|
"dev": "pnpm -r run dev",
|
|
"dev:web": "pnpm --filter @kandev/web dev",
|
|
"build": "pnpm -r run build",
|
|
"build:web": "pnpm --filter @kandev/web build",
|
|
"lint": "pnpm -r run lint",
|
|
"format": "prettier --write web cli packages --ignore-unknown",
|
|
"format:check": "prettier --check web cli packages --ignore-unknown",
|
|
"clean": "pnpm -r run clean && rm -rf node_modules"
|
|
},
|
|
"devDependencies": {
|
|
"@commitlint/cli": "^20.4.2",
|
|
"@commitlint/config-conventional": "^20.4.2",
|
|
"@types/node": "^20",
|
|
"prettier": "^3.6.2",
|
|
"typescript": "^5"
|
|
},
|
|
"pnpm": {
|
|
"overrides": {
|
|
"@codemirror/state": "6.5.3",
|
|
"@codemirror/view": "6.39.10",
|
|
"@babel/core": "^7.29.6",
|
|
"@hono/node-server": "^2.0.5",
|
|
"@isaacs/brace-expansion": "^5.0.1",
|
|
"@modelcontextprotocol/sdk": "^1.26.0",
|
|
"adm-zip": "^0.6.0",
|
|
"ajv@6": "6.15.0",
|
|
"body-parser": "^2.3.0",
|
|
"brace-expansion@1": "^1.1.16",
|
|
"brace-expansion@2": "^2.1.2",
|
|
"dompurify": "^3.4.12",
|
|
"fast-uri": "^3.1.4",
|
|
"flatted": "^3.4.2",
|
|
"hono": "^4.12.27",
|
|
"js-yaml@4": "^4.3.0",
|
|
"linkify-it": "^5.0.2",
|
|
"lodash": "^4.18.0",
|
|
"lodash-es": "^4.18.0",
|
|
"markdown-it": "^14.2.0",
|
|
"mermaid": "^11.15.0",
|
|
"minimatch@3": "^3.1.4",
|
|
"minimatch@9": "^9.0.7",
|
|
"minimatch@10": "^10.2.3",
|
|
"path-to-regexp@8": "^8.4.0",
|
|
"picomatch@2": "^2.3.2",
|
|
"postcss": "^8.5.12",
|
|
"protobufjs": "^7.6.5",
|
|
"qs": "^6.15.2",
|
|
"sharp": "^0.35.0",
|
|
"uuid@11": "^11.1.1",
|
|
"ws": "^8.21.0"
|
|
},
|
|
"onlyBuiltDependencies": [
|
|
"esbuild",
|
|
"msw",
|
|
"sharp",
|
|
"unrs-resolver"
|
|
]
|
|
}
|
|
}
|