mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-18 21:52:54 +00:00
Max PeintnerandGitHub
b27fdfc28c
# Which Problems Are Solved Fixes multiple high-severity Dependabot alerts for transitive dependencies (axios, protobufjs, systeminformation, tmp, fast-uri, @babel/plugin-transform-modules-systemjs). # How the Problems Are Solved **Direct dependency updates:** - `@opentelemetry/*` 0.217 → 0.218 in login (new otlp-transformer dropped protobufjs as direct dep) - `posthog-js` 1.374 → 1.380 in console (dropped the OpenTelemetry/protobufjs chain entirely) **pnpm overrides** for remaining transitive deps that can't be updated via their parents (all pulled by the gRPC stack, Cypress, karma, nx, or ajv): - `axios` → ≥1.17.0 (prototype pollution, proxy bypass) - `protobufjs` → ≥7.5.7 / ≥8.0.2 (code injection, prototype pollution, DoS) - `systeminformation` → ≥5.31.6 (command injection) - `tmp` → ≥0.2.6 (path traversal) - `fast-uri` → ≥3.1.2 (path traversal, host confusion) **Benchmark:** refreshed `package-lock.json` to resolve @babel and fast-uri alerts.
117 lines
4.2 KiB
JSON
117 lines
4.2 KiB
JSON
{
|
|
"packageManager": "[email protected]+sha512.41872f037ad22f7348e3b1debbaf7e867cfd448f2726d9cf74c08f19507c31d2c8e7a11525b983febc2df640b5438dee6023ebb1f84ed43cc2d654d2bc326264",
|
|
"name": "@zitadel/login",
|
|
"private": true,
|
|
"type": "module",
|
|
"scripts": {
|
|
"build": "NEXT_OUTPUT_MODE=standalone next build && cp -r public scripts/* .next/standalone/ && mv .next/standalone/apps/login/server.js .next/standalone/apps/login/next-server.js && cp .next/standalone/server.mjs .next/standalone/apps/login/server.js && cp -r .next/static .next/standalone/apps/login/.next/ && rm .next/standalone/apps/login/.env",
|
|
"build-vercel": "next build",
|
|
"dev": "HOSTNAME=127.0.0.1 ./scripts/entrypoint.sh next dev",
|
|
"prod": "cd ./.next/standalone && HOSTNAME=127.0.0.1 ./entrypoint.sh node apps/login/server.js",
|
|
"lint-check-next": "eslint .",
|
|
"lint-check-prettier": "prettier --check .",
|
|
"lint-fix": "prettier --write .",
|
|
"test-unit": "vitest --run",
|
|
"test-dockerized": "vitest --run --config vitest.config.dockerized.ts",
|
|
"lint-staged": "lint-staged",
|
|
"clean": "rm -rf node_modules .next"
|
|
},
|
|
"git": {
|
|
"pre-commit": "lint-staged"
|
|
},
|
|
"lint-staged": {
|
|
"*": "prettier --write --ignore-unknown"
|
|
},
|
|
"dependencies": {
|
|
"@connectrpc/connect": "^2.1.1",
|
|
"@connectrpc/connect-node": "^2.1.1",
|
|
"@headlessui/react": "^2.2.10",
|
|
"@heroicons/react": "^2.2.0",
|
|
"@opentelemetry/api": "^1.9.1",
|
|
"@opentelemetry/api-logs": "^0.218.0",
|
|
"@opentelemetry/auto-instrumentations-node": "^0.76.0",
|
|
"@opentelemetry/resource-detector-container": "^0.8.8",
|
|
"@opentelemetry/resource-detector-gcp": "^0.53.0",
|
|
"@opentelemetry/resources": "^2.7.1",
|
|
"@opentelemetry/sdk-node": "^0.218.0",
|
|
"@opentelemetry/winston-transport": "^0.28.0",
|
|
"@radix-ui/react-tooltip": "^1.2.8",
|
|
"@tailwindcss/forms": "^0.5.11",
|
|
"clsx": "^2.1.1",
|
|
"copy-to-clipboard": "^3.3.3",
|
|
"deepmerge": "^4.3.1",
|
|
"escape-html": "^1.0.3",
|
|
"lru-cache": "^11.3.6",
|
|
"lucide-react": "^0.577.0",
|
|
"moment": "^2.30.1",
|
|
"next": "16.2.6",
|
|
"next-intl": "^4.11.2",
|
|
"next-themes": "^0.4.6",
|
|
"nice-grpc": "^2.1.16",
|
|
"qrcode.react": "^4.2.0",
|
|
"react": "19.2.6",
|
|
"react-dom": "19.2.6",
|
|
"react-hook-form": "^7.75.0",
|
|
"server-only": "^0.0.1",
|
|
"tinycolor2": "^1.6.0",
|
|
"uuid": "^14.0.0",
|
|
"winston": "^3.19.0"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "^10.0.1",
|
|
"@faker-js/faker": "^9.9.0",
|
|
"@next/eslint-plugin-next": "16.2.6",
|
|
"@opentelemetry/sdk-trace-base": "^2.7.1",
|
|
"@opentelemetry/sdk-trace-node": "^2.7.1",
|
|
"@otplib/core": "^12.0.1",
|
|
"@otplib/plugin-crypto": "^12.0.1",
|
|
"@otplib/plugin-thirty-two": "^12.0.1",
|
|
"@playwright/test": "^1.60.0",
|
|
"@tailwindcss/postcss": "^4.3.0",
|
|
"@testing-library/jest-dom": "^6.9.1",
|
|
"@testing-library/react": "^16.3.2",
|
|
"@types/escape-html": "^1.0.4",
|
|
"@types/node": "^25.7.0",
|
|
"@types/node-forge": "^1.3.14",
|
|
"@types/react": "19.2.14",
|
|
"@types/react-dom": "19.2.3",
|
|
"@types/tinycolor2": "^1.4.6",
|
|
"@types/uuid": "^11.0.0",
|
|
"@typescript-eslint/eslint-plugin": "^8.59.3",
|
|
"@typescript-eslint/parser": "^8.59.3",
|
|
"@vercel/git-hooks": "^1.0.0",
|
|
"@vitejs/plugin-react": "^4.7.0",
|
|
"@zitadel/client": "workspace:*",
|
|
"@zitadel/proto": "workspace:*",
|
|
"concurrently": "^9.2.1",
|
|
"dotenv-cli": "^11.0.0",
|
|
"env-cmd": "^11.0.0",
|
|
"esbuild": "^0.28.0",
|
|
"eslint": "^10.3.0",
|
|
"eslint-config-prettier": "^10.1.8",
|
|
"eslint-import-resolver-typescript": "^4.4.4",
|
|
"eslint-plugin-cypress": "^4.3.0",
|
|
"eslint-plugin-import": "^2.32.0",
|
|
"eslint-plugin-react-hooks": "^7.1.1",
|
|
"gaxios": "^7.1.4",
|
|
"globals": "^17.6.0",
|
|
"grpc-tools": "^1.13.1",
|
|
"jsdom": "^26.1.0",
|
|
"lint-staged": "^16.4.0",
|
|
"node-forge": "^1.4.0",
|
|
"nodemon": "^3.1.14",
|
|
"postcss": "^8.5.14",
|
|
"prettier": "^3.8.3",
|
|
"prettier-plugin-organize-imports": "^4.3.0",
|
|
"prettier-plugin-tailwindcss": "^0.8.0",
|
|
"sass": "^1.99.0",
|
|
"start-server-and-test": "^3.0.4",
|
|
"tailwindcss": "^4.3.0",
|
|
"testcontainers": "^11.14.0",
|
|
"ts-proto": "^2.11.8",
|
|
"typescript": "^5.9.3",
|
|
"vite-tsconfig-paths": "^5.1.4",
|
|
"vitest": "^4.1.6"
|
|
}
|
|
}
|