chore(deps): fix nanoid vulnerability and update dependencies within semver range

Browse Source

- Add a scoped pnpm override forcing postcss's transitive nanoid to
  >=3.3.18 <4, patching GHSA-2v37-7h3g-55p8 (indefinite loop in custom
  generators with size=0). Scoped to postcss's own dependency rather
  than the top-level nanoid so the app's own nanoid@5 usage is
  untouched.
- Update all other dependencies within their existing package.json
  semver ranges (tiptap, markdown-it, nodemailer, svelte-dnd-action,
  zod, sveltejs/kit, svelte, svelte-check, tsx and their @types).

pnpm audit: 1 high -> 0 vulnerabilities.

...

This commit is contained in:

Frederic Cabassut

2026-09-02 09:34:03 +02:00

committed by Fred Cabassut

parent dfaf1c474d

commit 44963bf684

2 changed files with 805 additions and 801 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

pnpm-lock.yaml

Generated

+781 -778

File diff suppressed because it is too large Load Diff