Files
supabase/pnpm-workspace.yaml
T
Ivan Vasilov 631209f7ce chore: Bump vulnerable dependencies (#47269)
Bump several packages:
- Bump all instances of dompurify (patch version bump)
- Bump `posthog-js` to get a newer version of `@opentelemetry/core`
- Bump `@sentry/nextjs` to get a newer version of `@opentelemetry/core`
- Bump `redocly-cli` to get a newer version of `@opentelemetry/core`
- Bump `undici`

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
* Updated several project dependencies to newer versions, including
documentation tooling, analytics, and error-tracking packages.
* These updates may improve stability, compatibility, and access to the
latest fixes.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-06-25 08:50:27 +02:00

97 lines
2.1 KiB
YAML

packages:
- apps/*
- packages/*
- blocks/*
- e2e/*
blockExoticSubdeps: true
catalog:
'@sentry/nextjs': ^10.59.0
'@supabase/auth-js': 2.108.2
'@supabase/postgrest-js': 2.108.2
'@supabase/realtime-js': 2.108.2
'@supabase/ssr': 0.10.2
'@supabase/supabase-js': 2.108.2
'@tanstack/react-router': ^1.169.2
'@tanstack/react-start': ^1.167.65
'@tanstack/react-table': ^8.21.3
'@types/node': ^22.0.0
'@types/react': ^19.2.14
'@types/react-dom': ^19.2.3
'@vitejs/plugin-react': ^6.0.1
'@vitest/coverage-v8': ^4.1.4
'@vitest/ui': ^4.1.4
lodash: ^4.18.1
lodash-es: ^4.18.1
next: 16.2.6
next-themes: ^0.4.6
postcss: ^8.5.10
radix-ui: ^1.4.3
react: ^19.2.6
react-dom: ^19.2.6
recharts: ^2.15.4
tailwindcss: ^4.2.4
tsx: ^4.22.0
typescript: ~6.0.0
valtio: ^1.12.0
vite: ^8.0.16
vite-tsconfig-paths: ^6.1.1
vitest: ^4.1.4
zod: 3.25.76
ignoredBuiltDependencies:
- '@parcel/watcher'
- '@sentry/cli'
- contentlayer2
- core-js
- es5-ext
- esbuild
- libpg-query
- msw
- protobufjs
- sharp
minimumReleaseAge: 4320
minimumReleaseAgeExclude:
- '@ai-sdk/*'
- '@supabase/*'
- '@supabase-labs/*'
# The following are excluded to fix vulnerablities.
- react-use
onlyBuiltDependencies:
- node-pty
- supabase
overrides:
'@ardatan/relay-compiler>immutable': ^3.8.3
'@mapbox/node-pre-gyp>tar': ^7.5.11
'@sentry/webpack-plugin>uuid': ^11.1.1
'@usercentrics/cmp-browser-sdk>uuid': ^11.1.1
'braintrust>uuid': ^11.1.1
'mdx-bundler>uuid': ^11.1.1
braintrust>esbuild: ^0.28.1
cacache>tar: ^7.5.11
dompurify: ^3.3.2
express-rate-limit>ip-address: ^10.1.1
# Pin h3 v1 to a single version so the Nuxt registry example (vue-blocks)
# doesn't end up with two copies (1.15.10 + 1.15.11) and hit nominal
# H3Event type mismatches. v2 (h3@2) is intentionally left untouched.
'h3@1': 1.15.11
lodash: 'catalog:'
lodash-es: 'catalog:'
node-gyp>tar: ^7.5.11
nodemailer: ^7.0.11
postcss: 'catalog:'
qs: ^6.15.2
refractor>prismjs: ^1.30.0
supabase>tar: ^7.5.11
tmp: ^0.2.7
vite>esbuild: ^0.28.1
webpack: ^5.104.1
patchedDependencies:
react-data-grid: patches/react-data-grid.patch