fix(deps): patch vulnerable transitive dependencies

This commit is contained in:
mihir 2026-09-10 11:23:22 +05:30
parent 4fbe1391b8
commit a27a9d87a7
2 changed files with 35 additions and 28 deletions

View File

@ -4,6 +4,11 @@ settings:
autoInstallPeers: true
excludeLinksFromLockfile: false
overrides:
'@prisma/config>deepmerge-ts': 8.0.0
prisma>mysql2: 3.23.1
'@nestjs/platform-express>multer': 2.3.0
importers:
.:
@ -22,7 +27,7 @@ importers:
version: 7.10.0
'@prisma/client':
specifier: ^7.0.0
version: 7.10.0(prisma@7.10.0(@types/react@19.2.18)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(typescript@5.9.3))(typescript@5.9.3)
version: 7.10.0(prisma@7.10.0(@types/node@24.13.3)(@types/react@19.2.18)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(typescript@5.9.3))(typescript@5.9.3)
dotenv:
specifier: ^17.0.0
version: 17.4.2
@ -80,7 +85,7 @@ importers:
version: 3.9.6
prisma:
specifier: ^7.0.0
version: 7.10.0(@types/react@19.2.18)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(typescript@5.9.3)
version: 7.10.0(@types/node@24.13.3)(@types/react@19.2.18)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(typescript@5.9.3)
supertest:
specifier: ^7.0.0
version: 7.2.2(supports-color@8.1.1)
@ -1514,8 +1519,8 @@ packages:
babel-plugin-macros:
optional: true
deepmerge-ts@7.1.5:
resolution: {integrity: sha512-HOJkrhaYsweh+W+e74Yn7YStZOilkoPb6fycpwNLKzSPtruFs48nYis0zy5yJz1+ktUhHxoRDJ27RQAWLIJVJw==}
deepmerge-ts@8.0.0:
resolution: {integrity: sha512-ICNjaP0ML+eSdEpJYQC46XiAn/UjAdwbEl0dE8p85ZTeNDinN4Kd4+9jS4OSAuH7st6eC7rQhsqTF5zIDaUm2g==}
engines: {node: '>=16.0.0'}
deepmerge@4.3.1:
@ -2173,13 +2178,15 @@ packages:
ms@2.1.3:
resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
multer@2.2.0:
resolution: {integrity: sha512-6rdyFg2kLrMh9Jee7/BMPuV9lEAd7lLW2YUpF9/YxR7njyoUwwQ0ZPh3TaIY50Sw6vlyD2HW3wGOkTS4P79xrQ==}
multer@2.3.0:
resolution: {integrity: sha512-cjNbm3sttszgZeGfJR124D+jFEfkXCVAsoPBmFn9X7UxmDSFHWqE2CoEj0vrmSpuAFnqWR1Szcm9QTsiHr60Xw==}
engines: {node: '>= 10.16.0'}
mysql2@3.15.3:
resolution: {integrity: sha512-FBrGau0IXmuqg4haEZRBfHNWB5mUARw6hNwPDXXGg0XzVJ50mr/9hb267lvpVMnhZ1FON3qNd4Xfcez1rbFwSg==}
mysql2@3.23.1:
resolution: {integrity: sha512-tTuRnC7qCet2IOfSNMYZ5SwXuBnfvBPAcIA28P0gtruXyZlU1LMxA6uha32kYypoFgyYklMqhLWwt4laYwXR/Q==}
engines: {node: '>= 8.0'}
peerDependencies:
'@types/node': '>= 8'
named-placeholders@1.1.6:
resolution: {integrity: sha512-Tz09sEL2EEuv5fFowm419c1+a/jSMiBjI9gHxVLrVdbUkkNUUfjsVYs9pVZu5oCon/kmRh9TfLEObFtkVxmY0w==}
@ -2515,9 +2522,6 @@ packages:
resolution: {integrity: sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==}
engines: {node: '>= 18'}
seq-queue@0.0.5:
resolution: {integrity: sha512-hr3Wtp/GZIc/6DAGPDcV4/9WoZhjrkXsi5B/07QgX8tsdc6ilr7BFM6PM6rbdAX1kFSDYeZGLipIZZKyQP0O5Q==}
serve-static@2.2.1:
resolution: {integrity: sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw==}
engines: {node: '>= 18'}
@ -2571,9 +2575,9 @@ packages:
sprintf-js@1.0.3:
resolution: {integrity: sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==}
sqlstring@2.3.3:
resolution: {integrity: sha512-qC9iz2FlN7DQl3+wjwn3802RTyjCx7sDvfQEXchwa6CWOx07/WVfh91gBmQ9fahw8snwGEWU3xGzOt4tFyHLxg==}
engines: {node: '>= 0.6'}
sql-escaper@1.5.1:
resolution: {integrity: sha512-4toX5E1fQbBrpfXidaHnF0669nkAdETeIPTs2SUjxxD7RRIs9ICG4gtpmfc68JCEKehsdwLFqBu9VlQqZ1P1gg==}
engines: {bun: '>=1.0.0', deno: '>=2.0.0', node: '>=12.0.0'}
stack-utils@2.0.6:
resolution: {integrity: sha512-XlkWvfIm6RmsWtNJx+uqtKLS8eqFbxUg0ZzLXqY0caEy9l7hruX8IpiDnjsLavoBgqCCR71TqWO8MaXYheJ3RQ==}
@ -3414,7 +3418,7 @@ snapshots:
'@nestjs/core': 11.2.3(@nestjs/common@11.2.3(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@8.1.1))(@nestjs/platform-express@11.2.3)(reflect-metadata@0.2.2)(rxjs@7.8.2)
cors: 2.8.6
express: 5.2.1(supports-color@8.1.1)
multer: 2.2.0
multer: 2.3.0
path-to-regexp: 8.4.2
tslib: 2.8.1
transitivePeerDependencies:
@ -3506,17 +3510,17 @@ snapshots:
'@prisma/client-runtime-utils@7.10.0': {}
'@prisma/client@7.10.0(prisma@7.10.0(@types/react@19.2.18)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(typescript@5.9.3))(typescript@5.9.3)':
'@prisma/client@7.10.0(prisma@7.10.0(@types/node@24.13.3)(@types/react@19.2.18)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(typescript@5.9.3))(typescript@5.9.3)':
dependencies:
'@prisma/client-runtime-utils': 7.10.0
optionalDependencies:
prisma: 7.10.0(@types/react@19.2.18)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(typescript@5.9.3)
prisma: 7.10.0(@types/node@24.13.3)(@types/react@19.2.18)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(typescript@5.9.3)
typescript: 5.9.3
'@prisma/config@7.10.0':
dependencies:
c12: 3.3.4
deepmerge-ts: 7.1.5
deepmerge-ts: 8.0.0
effect: 3.20.0
empathic: 2.0.0
transitivePeerDependencies:
@ -4294,7 +4298,7 @@ snapshots:
dedent@1.7.2: {}
deepmerge-ts@7.1.5: {}
deepmerge-ts@8.0.0: {}
deepmerge@4.3.1: {}
@ -5123,15 +5127,16 @@ snapshots:
ms@2.1.3: {}
multer@2.2.0:
multer@2.3.0:
dependencies:
append-field: 1.0.0
busboy: 1.6.0
concat-stream: 2.0.0
type-is: 1.6.18
mysql2@3.15.3:
mysql2@3.23.1(@types/node@24.13.3):
dependencies:
'@types/node': 24.13.3
aws-ssl-profiles: 1.1.2
denque: 2.1.0
generate-function: 2.3.1
@ -5139,8 +5144,7 @@ snapshots:
long: 5.3.2
lru.min: 1.1.5
named-placeholders: 1.1.6
seq-queue: 0.0.5
sqlstring: 2.3.3
sql-escaper: 1.5.1
named-placeholders@1.1.6:
dependencies:
@ -5309,17 +5313,18 @@ snapshots:
'@jest/schemas': 30.5.0
ansi-styles: 5.2.0
prisma@7.10.0(@types/react@19.2.18)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(typescript@5.9.3):
prisma@7.10.0(@types/node@24.13.3)(@types/react@19.2.18)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)(typescript@5.9.3):
dependencies:
'@prisma/config': 7.10.0
'@prisma/dev': 0.24.17(typescript@5.9.3)
'@prisma/engines': 7.10.0
'@prisma/studio-core': 0.33.0(@types/react@19.2.18)(react-dom@19.2.8(react@19.2.8))(react@19.2.8)
mysql2: 3.15.3
mysql2: 3.23.1(@types/node@24.13.3)
postgres: 3.4.7
optionalDependencies:
typescript: 5.9.3
transitivePeerDependencies:
- '@types/node'
- '@types/react'
- '@types/react-dom'
- magicast
@ -5443,8 +5448,6 @@ snapshots:
transitivePeerDependencies:
- supports-color
seq-queue@0.0.5: {}
serve-static@2.2.1(supports-color@8.1.1):
dependencies:
encodeurl: 2.0.0
@ -5502,7 +5505,7 @@ snapshots:
sprintf-js@1.0.3: {}
sqlstring@2.3.3: {}
sql-escaper@1.5.1: {}
stack-utils@2.0.6:
dependencies:

View File

@ -4,3 +4,7 @@ allowBuilds:
esbuild: true
prisma: true
unrs-resolver: true
overrides:
'@prisma/config>deepmerge-ts': 8.0.0
'prisma>mysql2': 3.23.1
'@nestjs/platform-express>multer': 2.3.0