From 95e6ec17b16f170177eda9abc063f6707e88115a Mon Sep 17 00:00:00 2001
From: Lana Begunova <70295997+lana-20@users.noreply.github.com>
Date: Tue, 3 Nov 2026 07:58:29 -0800
Subject: [PATCH] Overrides: tinypool, serialize-javascript and uuid past their
 advisories

Dependabot could not update these three: each is a transitive dependency
whose fix is a new major its parent's range does not allow. Forced with
npm overrides:

- tinypool ^2.1.2 (critical, two advisories; @docusaurus/core asks ^1)
- serialize-javascript ^7.1.3 (high, medium, low; copy-webpack-plugin
  and css-minimizer-webpack-plugin ask ^6)
- uuid ^11.1.1 (medium; sockjs asks ^8). Kept to 11, the last major
  with a CommonJS build, since sockjs requires it

Checked: a plain build; a build with DOCUSAURUS_SSG_WORKER_THREADS=4,
which renders through tinypool's pool (one thread, the default for a
site this size, never loads it); sockjs and serialize-javascript loaded
through require; docusaurus serve answering 200.

Left open: minimatch (serve-handler calls require('minimatch') as a
function, which v9 and later do not export) and deepmerge (no fixed
release).
---
 package-lock.json | 40 +++++++++++++++++-----------------------
 package.json      |  5 +++++
 2 files changed, 22 insertions(+), 23 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 4cf8b44..2855046 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16411,15 +16411,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/randombytes": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz",
-      "integrity": "sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==",
-      "license": "MIT",
-      "dependencies": {
-        "safe-buffer": "^5.1.0"
-      }
-    },
     "node_modules/range-parser": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.0.tgz",
@@ -17405,12 +17396,12 @@
       }
     },
     "node_modules/serialize-javascript": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.2.tgz",
-      "integrity": "sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g==",
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.1.4.tgz",
+      "integrity": "sha512-FqlEuoTq/zRmA4Lg6aOqyH3lCHbUtCB0bmHCeFniX2GBdDqMJM3FwdvEhlE5Pim1dlt2FfBdVPmUNNiGhhKqpw==",
       "license": "BSD-3-Clause",
-      "dependencies": {
-        "randombytes": "^2.1.0"
+      "engines": {
+        "node": ">=20.0.0"
       }
     },
     "node_modules/serve-handler": {
@@ -18291,12 +18282,12 @@
       "license": "MIT"
     },
     "node_modules/tinypool": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/tinypool/-/tinypool-1.1.1.tgz",
-      "integrity": "sha512-Zba82s87IFq9A9XmjiX5uZA/ARWDrB03OHlq+Vw1fSdt0I+4/Kutwy8BP4Y/y/aORMo61FQ0vIb5j44vSo5Pkg==",
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/tinypool/-/tinypool-2.2.0.tgz",
+      "integrity": "sha512-jBrmx4lYmaC9k/mgPbylxs7kBUxHtD8256up+HjLaDFfXScKJQyil+SWXSvhAtT7XHo+yTVlpB81PGmHP8oLSQ==",
       "license": "MIT",
       "engines": {
-        "node": "^18.0.0 || >=20.0.0"
+        "node": "^20.0.0 || >=22.0.0"
       }
     },
     "node_modules/to-regex-range": {
@@ -18873,13 +18864,16 @@
       }
     },
     "node_modules/uuid": {
-      "version": "8.3.2",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
-      "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==",
-      "deprecated": "uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).",
+      "version": "11.1.1",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz",
+      "integrity": "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==",
+      "funding": [
+        "https://github.com/sponsors/broofa",
+        "https://github.com/sponsors/ctavan"
+      ],
       "license": "MIT",
       "bin": {
-        "uuid": "dist/bin/uuid"
+        "uuid": "dist/esm/bin/uuid"
       }
     },
     "node_modules/value-equal": {
diff --git a/package.json b/package.json
index 1536137..4ad2299 100644
--- a/package.json
+++ b/package.json
@@ -44,5 +44,10 @@
   },
   "engines": {
     "node": ">=20.0"
+  },
+  "overrides": {
+    "serialize-javascript": "^7.1.3",
+    "tinypool": "^2.1.2",
+    "uuid": "^11.1.1"
   }
 }