diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 6e5bd160e..21a1029f7 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -594,7 +594,7 @@ overrides: '@hono/node-server@<2.0.5': '>=2.1.1' hono@<4.12.27: '>=4.13.2' ip-address@<=10.1.0: '>=10.5.0' - js-yaml@>=3.0.0 <3.15.1: ^5.3.0 + js-yaml@>=3.0.0 <3.15.1: ^3.15.1 lodash-es@<=4.17.23: '>=4.18.0' lodash-es@>=4.0.0 <=4.17.23: '>=4.18.0' lodash@<=4.17.23: '>=4.18.0' @@ -617,7 +617,7 @@ overrides: yaml@>=2.0.0 <2.8.3: '>=2.9.0' esbuild@>=0.27.3 <0.28.1: '>=0.28.2' form-data@>=4.0.0 <4.0.6: '>=4.0.6' - js-yaml@>=4.0.0 <4.3.0: ^5.3.0 + js-yaml@>=4.0.0 <4.3.0: ^4.3.1 packageExtensionsChecksum: sha256-Ohls6Z6vcdyi3RZbeQP4q6j0GZbWIp1q8TsKkyYnjVw= @@ -6137,6 +6137,9 @@ packages: resolution: {integrity: sha512-ixiS0nLNNG5jNQzgZJNoUpBKdo9yTYZMGJ+QgT2jmjR7G7+QHRCc4v6LQ3NgE7EBJq+o0ams3waJwkrlBom8Ig==} engines: {node: '>=14'} + argparse@1.0.10: + resolution: {integrity: sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==} + argparse@2.0.1: resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==} @@ -9186,12 +9189,12 @@ packages: js-tokens@4.0.0: resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==} - js-yaml@4.3.1: - resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==} + js-yaml@3.15.1: + resolution: {integrity: sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==} hasBin: true - js-yaml@5.3.0: - resolution: {integrity: sha512-muutsYr+e2+d3rTgUGslq5rxbBlUy3cJ61IsHag2QNDQV+7zXWjkUpmALIajhrlLlrgRUiymj6U3zUr/TMK84Q==} + js-yaml@4.3.1: + resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==} hasBin: true jsdoc-type-pratt-parser@7.2.0: @@ -11479,6 +11482,9 @@ packages: split@0.2.10: resolution: {integrity: sha512-e0pKq+UUH2Xq/sXbYpZBZc3BawsfDZ7dgv+JtRTUPNcvF5CMR4Y9cvJqkMY0MoxWzTHvZuz1beg6pNEKlszPiQ==} + sprintf-js@1.0.3: + resolution: {integrity: sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==} + srvx@0.12.5: resolution: {integrity: sha512-IuvtDNQg5EIwv3c6dleyau7u8hCyGQ7D6+V/QM799Aud07z0wCUcurKLTRfyG33C8oUY+UWcVBFkfHMcbtmRLA==} engines: {node: '>=20.16.0'} @@ -12435,7 +12441,7 @@ packages: '@vitest/ui': 4.1.10 happy-dom: '*' jsdom: '*' - vite: '>=8.2.0' + vite: '>=7.3.2' peerDependenciesMeta: '@edge-runtime/vm': optional: true @@ -13225,7 +13231,7 @@ snapshots: '@apidevtools/json-schema-ref-parser@14.2.1(@types/json-schema@7.0.15)': dependencies: '@types/json-schema': 7.0.15 - js-yaml: 5.3.0 + js-yaml: 4.3.1 '@arethetypeswrong/cli@0.18.5': dependencies: @@ -14487,7 +14493,7 @@ snapshots: globals: 14.0.0 ignore: 5.3.2 import-fresh: 3.3.1 - js-yaml: 5.3.0 + js-yaml: 4.3.1 minimatch: 3.1.5 strip-json-comments: 3.1.1 transitivePeerDependencies: @@ -14605,7 +14611,7 @@ snapshots: camelcase: 5.3.1 find-up: 4.1.0 get-package-type: 0.1.0 - js-yaml: 5.3.0 + js-yaml: 3.15.1 resolve-from: 5.0.0 '@istanbuljs/schema@0.1.6': {} @@ -15929,7 +15935,7 @@ snapshots: '@semrel-extra/topo@1.14.1': dependencies: fast-glob: 3.3.3 - js-yaml: 5.3.0 + js-yaml: 4.3.1 toposource: 1.2.0 '@simple-libs/child-process-utils@2.0.0': @@ -17894,6 +17900,10 @@ snapshots: are-docs-informative@0.0.2: {} + argparse@1.0.10: + dependencies: + sprintf-js: 1.0.3 + argparse@2.0.1: {} argue-cli@3.1.0: {} @@ -18593,13 +18603,13 @@ snapshots: cosmiconfig@10.0.0: dependencies: env-paths: 2.2.1 - js-yaml: 5.3.0 + js-yaml: 4.3.1 cosmiconfig@9.0.2(typescript@6.0.3): dependencies: env-paths: 2.2.1 import-fresh: 3.3.1 - js-yaml: 5.3.0 + js-yaml: 4.3.1 parse-json: 5.2.0 optionalDependencies: typescript: 6.0.3 @@ -21868,11 +21878,12 @@ snapshots: js-tokens@4.0.0: {} - js-yaml@4.3.1: + js-yaml@3.15.1: dependencies: - argparse: 2.0.1 + argparse: 1.0.10 + esprima: 4.0.1 - js-yaml@5.3.0: + js-yaml@4.3.1: dependencies: argparse: 2.0.1 @@ -24307,7 +24318,7 @@ snapshots: rc-config-loader@4.1.4(supports-color@10.2.2): dependencies: debug: 4.4.3(supports-color@10.2.2) - js-yaml: 5.3.0 + js-yaml: 4.3.1 json5: 2.2.3 require-from-string: 2.0.2 transitivePeerDependencies: @@ -24316,7 +24327,7 @@ snapshots: rc-config-loader@4.1.4(supports-color@7.2.0): dependencies: debug: 4.4.3(supports-color@7.2.0) - js-yaml: 5.3.0 + js-yaml: 4.3.1 json5: 2.2.3 require-from-string: 2.0.2 transitivePeerDependencies: @@ -25226,6 +25237,8 @@ snapshots: dependencies: through: 2.3.8 + sprintf-js@1.0.3: {} + srvx@0.12.5: {} stable-hash-x@0.2.0: {} diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index f48de4898..b9537b3e2 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -272,8 +272,9 @@ overrides: # GHSA-xgm2-5f3f-mvvc hono@<4.12.27: ">=4.13.2" ip-address@<=10.1.0: ">=10.5.0" - # GHSA-5p4m-2wfm-xmqj (Quadratuc CPU in !!omap) — jest's load-nyc-config pulls 3.x - js-yaml@>=3.0.0 <3.15.1: "^5.3.0" + # GHSA-5p4m-2wfm-xmqj (Quadratuc CPU in !!omap) — jest's load-nyc-config pulls 3.x. + # Do not raise to v5; see the js-yaml@>=4.0.0 note below. + js-yaml@>=3.0.0 <3.15.1: "^3.15.1" lodash-es@<=4.17.23: ">=4.18.0" lodash-es@>=4.0.0 <=4.17.23: ">=4.18.0" lodash@<=4.17.23: ">=4.18.0" @@ -300,7 +301,7 @@ overrides: form-data@>=4.0.0 <4.0.6: ">=4.0.6" # Stay on 4.x: js-yaml 5.x is ESM-only with no default export and breaks # multi-semantic-release's `import ... from "js-yaml"`. ^4.3.0 still patches GHSA-52cp-r559-cp3m. - js-yaml@>=4.0.0 <4.3.0: "^5.3.0" + js-yaml@>=4.0.0 <4.3.0: "^4.3.1" shellEmulator: true