mirror of
https://github.com/garrytan/gbrain.git
synced 2026-07-28 14:59:47 +00:00
3253fb824c
* fix(deps): resolve all 34 OSV-flagged vulnerabilities with same-major patch bumps Direct deps: js-yaml ^3.15.0, marked ^18.0.2 (resolves 18.0.6), admin vite ^6.4.3. Transitive deps pinned via overrides at their minimum fixed versions (same major, no promotion to direct): @hono/node-server, fast-uri, fast-xml-builder, fast-xml-parser, form-data, hono, ip-address, qs; admin: @babel/core, postcss. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(deps): force js-yaml >=3.15.0 for all resolutions via override A transitive consumer held a second js-yaml@3.14.2 resolution the direct-dep range bump did not move. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Sinabina <sinabina@Sinabinas-MacBook-Pro-4.local> Co-authored-by: Claude Fable 5 <noreply@anthropic.com>