From 67ee6a904d47dd1de45ac0a40b7e714b16901311 Mon Sep 17 00:00:00 2001 From: Luke Manning Date: Wed, 14 Oct 2026 12:37:22 +0100 Subject: [PATCH] chore(deps): bump source-map-js, toml, uuid to clear 4 dependabot alerts source-map-js 1.2.1 -> 1.2.2 via root pnpm override (GHSA-68fv-2mgg-jv7q), toml 4.1.1 -> 4.3.0 and uuid 13.0.0 -> 13.0.2 in .opencode lockfile (GHSA-82x6-q7mm-w9cf, GHSA-v5mp-jgw5-2x6j, GHSA-w5hq-g745-h8pq). All bumps stay within the existing parent ranges; no direct dependency or version change. --- .opencode/package-lock.json | 12 ++++++------ package.json | 3 ++- pnpm-lock.yaml | 15 ++++++++------- 3 files changed, 16 insertions(+), 14 deletions(-) diff --git a/.opencode/package-lock.json b/.opencode/package-lock.json index e306054..950f4b7 100644 --- a/.opencode/package-lock.json +++ b/.opencode/package-lock.json @@ -314,18 +314,18 @@ } }, "node_modules/toml": { - "version": "4.1.1", - "resolved": "https://registry.npmjs.org/toml/-/toml-4.1.1.tgz", - "integrity": "sha512-EBJnVBr3dTXdA89WVFoAIPUqkBjxPMwRqsfuo1r240tKFHXv3zgca4+NJib/h6TyvGF7vOawz0jGuryJCdNHrw==", + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/toml/-/toml-4.3.0.tgz", + "integrity": "sha512-lVb8X9BsPVuH0M4BKeS91tXAmJvCjQ5UIyAbQFaxkKGyUFK2RPkhwaFSQH8vbpl1d23eu/IBH+dwVMHWaq9A5A==", "license": "MIT", "engines": { "node": ">=20" } }, "node_modules/uuid": { - "version": "13.0.0", - "resolved": "https://registry.npmjs.org/uuid/-/uuid-13.0.0.tgz", - "integrity": "sha512-XQegIaBTVUjSHliKqcnFqYypAd4S+WCYt5NIeRs6w/UAry7z8Y9j5ZwRRL4kzq9U3sD6v+85er9FvkEaBpji2w==", + "version": "13.0.2", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-13.0.2.tgz", + "integrity": "sha512-vzi9uRZ926x4XV73S/4qQaTwPXM2JBj6/6lI/byHH1jOpCzb0zDbfytgA9LcN/hzb2l7WQSQnxITOVx5un/wGw==", "funding": [ "https://github.com/sponsors/broofa", "https://github.com/sponsors/ctavan" diff --git a/package.json b/package.json index 7c5dfa2..53e3881 100644 --- a/package.json +++ b/package.json @@ -25,7 +25,8 @@ ], "pnpm": { "overrides": { - "vite": "^7.3.6" + "vite": "^7.3.6", + "source-map-js": "^1.2.2" } } } diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 9f6351b..55c0c42 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -6,6 +6,7 @@ settings: overrides: vite: ^7.3.6 + source-map-js: ^1.2.2 importers: @@ -1809,8 +1810,8 @@ packages: resolution: {integrity: sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==} engines: {node: '>=14'} - source-map-js@1.2.1: - resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==} + source-map-js@1.2.2: + resolution: {integrity: sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==} engines: {node: '>=0.10.0'} space-separated-tokens@2.0.2: @@ -3015,7 +3016,7 @@ snapshots: '@vue/shared': 3.5.43 entities: 7.0.1 estree-walker: 2.0.2 - source-map-js: 1.2.1 + source-map-js: 1.2.2 '@vue/compiler-dom@3.5.43': dependencies: @@ -3032,7 +3033,7 @@ snapshots: estree-walker: 2.0.2 magic-string: 0.30.21 postcss: 8.5.28 - source-map-js: 1.2.1 + source-map-js: 1.2.2 '@vue/compiler-ssr@3.5.43': dependencies: @@ -3599,7 +3600,7 @@ snapshots: dependencies: '@babel/parser': 7.29.9 '@babel/types': 7.29.8 - source-map-js: 1.2.1 + source-map-js: 1.2.2 make-dir@4.0.0: dependencies: @@ -3713,7 +3714,7 @@ snapshots: dependencies: nanoid: 3.3.19 picocolors: 1.1.1 - source-map-js: 1.2.1 + source-map-js: 1.2.2 preact@10.29.8: {} @@ -3828,7 +3829,7 @@ snapshots: signal-exit@4.1.0: {} - source-map-js@1.2.1: {} + source-map-js@1.2.2: {} space-separated-tokens@2.0.2: {}