mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-18 05:52:51 +00:00
RamonandGitHub
5abb51c263
# Which Problems Are Solved After merging #11968 and rechecking the dependabot alerts there are still some issues leftover. # How the Problems Are Solved This pr makes overrides for vulnerable transitive depdencies to force update to safe versions. It also upgrades the next.js version in the docs and I also ran `pnpm update` once more. # Additional Changes Removed the mochaawesome dependency is this is not really needed and seems unmaintained. # Additional Context - Precursor: #11968
26 lines
649 B
YAML
26 lines
649 B
YAML
packages:
|
|
- console
|
|
- tests/*
|
|
- packages/*
|
|
- apps/*
|
|
- deploy/compose
|
|
|
|
exclude:
|
|
- benchmark # because of the node 18 or 20 dependency
|
|
|
|
overrides:
|
|
"tar@<7.5.11": "^7.5.11 <8.0.0"
|
|
"flatted@<3.4.2": "^3.4.2"
|
|
"rollup@>=4.0.0 <4.59.0": "^4.59.0"
|
|
"socket.io-parser@>=4.0.0 <4.2.6": "^4.2.6"
|
|
"picomatch@>=4.0.0 <4.0.4": "^4.0.4"
|
|
"lodash@>=4.0.0 <4.18.0": "^4.18.0"
|
|
"js-yaml@<3.14.2": "^3.14.2"
|
|
"qs@<6.14.2": "^6.14.2"
|
|
"ajv@<6.14.0": "^6.14.0"
|
|
"minimatch@<3.1.4": "^3.1.4"
|
|
"dompurify@>=3.1.3 <3.3.2": "^3.3.2"
|
|
"unhead@<2.1.11": "^2.1.11"
|
|
"fast-xml-parser@>=4.0.0 <5.5.7": "^5.5.7"
|
|
"brace-expansion@<1.1.13": "^1.1.13"
|