references/plane
1
0
Fork 0
mirror of https://github.com/makeplane/plane.git synced 2026-06-14 03:30:00 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
canary
plane/pnpm-workspace.yaml
T
sriram veeraghanta 0bbfe95cc7 fix: bump react-router and vitest to resolve Dependabot advisories (#9215) 
* fix: bump react-router and vitest to resolve Dependabot advisories

Resolves 6 open Dependabot alerts (all npm, manifest pnpm-lock.yaml):

- react-router 7.12.0 -> 7.15.0 (fixes GHSA-8x6r-g9mw-2r78 [high],
  GHSA-49rj-9fvp-4h2h [high], GHSA-8646-j5j9-6r62 [high],
  GHSA-2j2x-hqr9-3h42 [medium], GHSA-f22v-gfqf-p8f3 [medium])
- vitest 4.0.x -> 4.1.x (fixes GHSA-5xrq-8626-4rwp [critical])

Aligned lockstep siblings to avoid peer-dependency mismatches:
@react-router/dev|node|serve -> 7.15.0, @vitest/coverage-v8 -> ^4.1.0.

Edited catalog entries in pnpm-workspace.yaml and regenerated
pnpm-lock.yaml; verified with pnpm install --frozen-lockfile.

* fix: raise vitest catalog floor to ^4.1.8 to match security advisory

The critical advisory GHSA-5xrq-8626-4rwp is patched in vitest 4.1.8, but
the catalog specifiers were ^4.1.0, which permits resolving to vulnerable
4.1.0-4.1.7. Align the floor with the documented patched version for vitest
and @vitest/coverage-v8 so a future lockfile refresh cannot reintroduce a
vulnerable Vitest stack. Resolved version is unchanged (4.1.8).
2026-06-05 00:51:33 +05:30

246 lines
6.7 KiB
YAML
Raw Permalink Blame History

packages:
- apps/*
- packages/*
- "!apps/api"
- "!apps/proxy"
catalog:
"@atlaskit/pragmatic-drag-and-drop": "1.7.4"
"@atlaskit/pragmatic-drag-and-drop-auto-scroll": "1.4.0"
"@atlaskit/pragmatic-drag-and-drop-hitbox": "1.1.0"
"@base-ui-components/react": "1.0.0-beta.3"
"@blueprintjs/core": "^4.16.3"
"@blueprintjs/popover2": "^1.13.3"
"@bprogress/core": "^1.3.4"
"@chromatic-com/storybook": "^1.4.0"
"@effect/platform": "^0.94.0"
"@effect/platform-node": "^0.104.0"
"@floating-ui/dom": "^1.7.1"
"@floating-ui/react": "^0.26.4"
"@fontsource-variable/inter": "5.2.8"
"@fontsource/ibm-plex-mono": "5.2.7"
"@fontsource/inter": "5.2.8"
"@fontsource/material-symbols-rounded": "5.2.30"
"@headlessui/react": "^1.7.19"
"@hocuspocus/extension-database": "2.15.2"
"@hocuspocus/extension-logger": "2.15.2"
"@hocuspocus/extension-redis": "2.15.2"
"@hocuspocus/provider": "2.15.2"
"@hocuspocus/server": "2.15.2"
"@hocuspocus/transformer": "2.15.2"
"@hypermod/utils": "^0.7.1"
"@popperjs/core": "^2.11.8"
"@radix-ui/react-scroll-area": "^1.2.3"
"@react-pdf/renderer": "^4.3.0"
"@react-pdf/types": "^2.9.2"
"@react-router/dev": "7.15.0"
"@react-router/node": "7.15.0"
"@react-router/serve": "7.15.0"
"@storybook/addon-designs": "10.0.2"
"@storybook/addon-docs": "9.1.10"
"@storybook/addon-essentials": "^8.1.1"
"@storybook/addon-interactions": "^8.1.1"
"@storybook/addon-links": "^8.1.1"
"@storybook/addon-onboarding": "^8.1.1"
"@storybook/addon-styling-webpack": "^1.0.0"
"@storybook/addon-webpack5-compiler-swc": "^1.0.2"
"@storybook/blocks": "^8.1.1"
"@storybook/react": "^8.1.1"
"@storybook/react-vite": "9.1.10"
"@storybook/react-webpack5": "^8.1.1"
"@storybook/test": "^8.1.1"
"@tailwindcss/postcss": "4.1.17"
"@tailwindcss/typography": "0.5.19"
"@tanstack/react-table": "^8.21.3"
"@tanstack/react-virtual": "^3.13.12"
"@tanstack/virtual-core": "^3.13.12"
"@tiptap/core": "^2.22.3"
"@tiptap/extension-blockquote": "^2.22.3"
"@tiptap/extension-character-count": "^2.22.3"
"@tiptap/extension-collaboration": "^2.22.3"
"@tiptap/extension-document": "^2.22.3"
"@tiptap/extension-emoji": "^2.22.3"
"@tiptap/extension-heading": "^2.22.3"
"@tiptap/extension-image": "^2.22.3"
"@tiptap/extension-list-item": "^2.22.3"
"@tiptap/extension-mention": "^2.22.3"
"@tiptap/extension-placeholder": "^2.22.3"
"@tiptap/extension-task-item": "^2.22.3"
"@tiptap/extension-task-list": "^2.22.3"
"@tiptap/extension-text": "^2.22.3"
"@tiptap/extension-text-align": "^2.22.3"
"@tiptap/extension-text-style": "^2.22.3"
"@tiptap/extension-underline": "^2.22.3"
"@tiptap/html": "^2.22.3"
"@tiptap/pm": "^2.22.3"
"@tiptap/react": "^2.22.3"
"@tiptap/starter-kit": "^2.22.3"
"@tiptap/suggestion": "^2.22.3"
"@types/chroma-js": "^3.1.2"
"@types/compression": "1.8.1"
"@types/cors": "^2.8.17"
"@types/express": "4.17.23"
"@types/express-ws": "^3.0.5"
"@types/hast": "^3.0.4"
"@types/jscodeshift": "^17.3.0"
"@types/lodash-es": "4.17.12"
"@types/mdast": "^4.0.4"
"@types/node": "22.12.0"
"@types/pdf-parse": "^1.1.5"
"@types/react": "18.3.11"
"@types/react-color": "^3.0.9"
"@types/react-dom": "18.3.1"
"@types/sanitize-html": "2.16.0"
"@types/ws": "^8.18.1"
"@vitest/coverage-v8": "^4.1.8"
"ast-types": "0.14.2"
"autoprefixer": "^10.4.19"
"axios": "1.16.0"
"buffer": "^6.0.3"
"chroma-js": "^3.2.0"
"class-variance-authority": "0.7.1"
"clsx": "^2.1.1"
"cmdk": "^1.1.1"
"comlink": "^4.4.1"
"compression": "1.8.1"
"cors": "^2.8.5"
"date-fns": "^4.1.0"
"dotenv": "16.4.7"
"effect": "3.20.0"
"emoji-picker-react": "^4.5.16"
"emoji-regex": "^10.3.0"
"export-to-csv": "^1.4.0"
"express": "4.22.0"
"express-winston": "^4.2.0"
"express-ws": "^5.0.2"
"file-type": "^21.3.1"
"framer-motion": "^12.23.0"
"frimousse": "^0.3.0"
"hast": "^1.0.0"
"hast-util-to-mdast": "^10.1.2"
"helmet": "^7.1.0"
"highlight.js": "^11.8.0"
"husky": "9.1.7"
"i18next": "25.10.9"
"i18next-icu": "2.4.3"
"i18next-resources-to-backend": "1.2.1"
"ioredis": "5.7.0"
"is-emoji-supported": "^0.0.5"
"isbot": "^5.1.31"
"jscodeshift": "^17.3.0"
"jsx-dom-cjs": "^8.0.3"
"linkifyjs": "^4.3.2"
"lint-staged": "16.2.7"
"lodash-es": "4.18.1"
"lowlight": "^3.0.0"
"lucide-react": "0.469.0"
"mdast": "^3.0.0"
"mobx": "6.12.0"
"mobx-react": "9.1.1"
"mobx-utils": "6.0.8"
"next-themes": "0.4.6"
"oxfmt": "0.35.0"
"oxlint": "1.51.0"
"pdf-parse": "^2.4.5"
"postcss": "8.5.10"
"postcss-cli": "^11.0.0"
"postcss-nested": "^6.0.1"
"prosemirror-codemark": "^0.4.2"
"react": "18.3.1"
"react-color": "^2.19.3"
"react-day-picker": "9.5.0"
"react-dom": "18.3.1"
"react-dropzone": "^14.2.3"
"react-fast-compare": "^3.2.2"
"react-hook-form": "7.51.5"
"react-i18next": "16.6.6"
"react-is": "^18.2.0"
"react-markdown": "^8.0.7"
"react-masonry-component": "^6.3.0"
"react-pdf-html": "^2.1.2"
"react-popper": "^2.3.0"
"react-router": "7.15.0"
"recharts": "^2.15.1"
"reflect-metadata": "^0.2.2"
"rehype-parse": "^9.0.1"
"rehype-remark": "^10.0.1"
"remark-gfm": "^4.0.1"
"remark-stringify": "^11.0.0"
"sanitize-html": "2.17.0"
"serve": "14.2.5"
"sharp": "^0.34.3"
"smooth-scroll-into-view-if-needed": "^2.0.2"
"storybook": "9.1.19"
"swr": "2.2.4"
"tailwind-merge": "3.4.0"
"tailwindcss": "4.1.17"
"tippy.js": "^6.3.7"
"tiptap-markdown": "^0.8.10"
"tsdown": "0.16.0"
"tsx": "4.20.6"
"turbo": "2.9.14"
"typescript": "5.8.3"
"unified": "^11.0.5"
"use-font-face-observer": "^1.3.0"
"uuid": "14.0.0"
"vite": "7.3.2"
"vite-tsconfig-paths": "^5.1.4"
"vitest": "^4.1.8"
"winston": "^3.17.0"
"ws": "8.20.1"
"y-indexeddb": "^9.0.12"
"y-prosemirror": "^1.3.7"
"y-protocols": "^1.0.6"
"yjs": "^13.6.20"
"zod": "^3.25.76"
overrides:
express: "catalog:"
mdast-util-to-hast: 13.2.1
valibot: 1.2.0
glob: 11.1.0
brace-expansion: 5.0.6
nanoid: 3.3.8
esbuild: 0.25.0
"@babel/helpers": 7.26.10
"@babel/runtime": 7.26.10
chokidar: 3.6.0
prosemirror-view: 1.40.0
"@types/express": 4.17.23
typescript: "catalog:"
vite: "catalog:"
qs: 6.15.2
diff: 5.2.2
webpack: 5.104.1
lodash-es: "catalog:"
lodash: 4.18.1
markdown-it: 14.1.1
rollup: 4.59.0
"minimatch@3": 3.1.4
"minimatch@10": 10.2.3
serialize-javascript: 7.0.5
"ajv@6": 6.14.0
"ajv@8": 8.18.0
"undici@7": 7.24.0
flatted: 3.4.2
picomatch: 2.3.2
"yaml@1": 1.10.3
"yaml@2": 2.8.3
path-to-regexp: 0.1.13
defu: 6.1.5
postcss: 8.5.10
axios: "catalog:"
follow-redirects: 1.16.0
uuid: "catalog:"
"fast-uri@<3.1.2": ">=3.1.2"
tmp: 0.2.6
"ws@8": 8.20.1
allowBuilds:
"@parcel/watcher": true
"@swc/core": true
esbuild: true
msgpackr-extract: true
turbo: true
sharp: false
Reference in New Issue View Git Blame Copy Permalink