mirror of
https://github.com/supabase/supabase.git
synced 2026-10-10 03:45:06 +03:00
Ivan Vasilov
380c917b94
- Bump various vulnerable dependencies, `nitropack`, `mermaid`, `hono`, `protobufjs`, `fast-xml-builder` and `fast-uri`. - Add `babel/core` to `studio` to stabilize the dependency resolving for `studio`. - Also deduped `cheerio`, `c12`, `browserslist`, `unstorage` and `@mdx-js/mdx` since they were present as multiple similar versions. <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Added development dependency for the studio application build tooling * Updated workspace configuration to refine dependency exclusion settings <!-- review_stack_entry_start --> [](https://app.coderabbit.ai/change-stack/supabase/supabase/pull/45876) <!-- review_stack_entry_end --> <!-- end of auto-generated comment: release notes by coderabbit.ai -->
92 lines
1.9 KiB
YAML
92 lines
1.9 KiB
YAML
packages:
|
|
- apps/*
|
|
- packages/*
|
|
- blocks/*
|
|
- e2e/*
|
|
|
|
blockExoticSubdeps: true
|
|
|
|
catalog:
|
|
'@sentry/nextjs': ^10.26.0
|
|
'@supabase/auth-js': 2.105.4
|
|
'@supabase/postgrest-js': 2.105.4
|
|
'@supabase/realtime-js': 2.105.4
|
|
'@supabase/ssr': 0.10.2
|
|
'@supabase/supabase-js': 2.105.4
|
|
'@types/node': ^22.0.0
|
|
'@types/react': ^18.3.0
|
|
'@types/react-dom': ^18.3.0
|
|
'@vitejs/plugin-react': ^6.0.1
|
|
'@vitest/coverage-v8': ^4.1.4
|
|
'@vitest/ui': ^4.1.4
|
|
lodash: ^4.18.1
|
|
lodash-es: ^4.18.1
|
|
next: 16.2.6
|
|
next-themes: ^0.4.6
|
|
postcss: ^8.5.10
|
|
radix-ui: ^1.4.3
|
|
react: ^18.3.0
|
|
react-dom: ^18.3.0
|
|
recharts: ^2.15.4
|
|
tailwindcss: ^4.2.4
|
|
tsx: 4.20.3
|
|
typescript: ~6.0.0
|
|
valtio: ^1.12.0
|
|
vite: ^8.0.8
|
|
vite-tsconfig-paths: ^6.1.1
|
|
vitest: ^4.1.4
|
|
zod: 3.25.76
|
|
|
|
ignoredBuiltDependencies:
|
|
- '@parcel/watcher'
|
|
- '@sentry/cli'
|
|
- contentlayer2
|
|
- core-js
|
|
- es5-ext
|
|
- esbuild
|
|
- libpg-query
|
|
- msw
|
|
- protobufjs
|
|
- sharp
|
|
|
|
minimumReleaseAge: 4320
|
|
|
|
minimumReleaseAgeExclude:
|
|
- '@ai-sdk/*'
|
|
- '@supabase/*'
|
|
- '@supabase-labs/*'
|
|
# The following are excluded to fix vulnerablities.
|
|
- mermaid
|
|
- '@mermaid-js/parser'
|
|
|
|
onlyBuiltDependencies:
|
|
- node-pty
|
|
- supabase
|
|
|
|
overrides:
|
|
'@ardatan/relay-compiler>immutable': ^3.8.3
|
|
'@mapbox/node-pre-gyp>tar': ^7.5.11
|
|
'@redocly/respect-core>form-data': ^4.0.4
|
|
'@redocly/respect-core>js-yaml': ^4.1.1
|
|
'@rollup/plugin-terser>serialize-javascript': ^7.0.5
|
|
cacache>tar: ^7.5.11
|
|
dompurify: ^3.3.2
|
|
esbuild: ^0.25.2
|
|
express-rate-limit>ip-address: ^10.1.1
|
|
lodash: 'catalog:'
|
|
lodash-es: 'catalog:'
|
|
node-gyp>tar: ^7.5.11
|
|
nodemailer: ^7.0.11
|
|
payload>undici: ^7.18.2
|
|
pgsql-parser>libpg-query: ^15.2.0
|
|
postcss: 'catalog:'
|
|
refractor>prismjs: ^1.30.0
|
|
supabase>tar: ^7.5.11
|
|
terser-webpack-plugin>serialize-javascript: ^7.0.5
|
|
tmp: ^0.2.4
|
|
unhead: ^2.1.13
|
|
webpack: ^5.104.1
|
|
|
|
patchedDependencies:
|
|
react-data-grid: patches/react-data-grid.patch
|