chore: patch vulnerable dependencies

Browse Source

Upgrade next to 15.5.28 (clears 2 critical RCE advisories plus the SSRF,
middleware-bypass and cache-poisoning set), sharp to 0.35.5, sass,
@typescript-eslint/*, eslint-config-next and react-icons within their
current majors. Add pnpm overrides to force patched transitives
(js-yaml, flatted, brace-expansion, minimatch, postcss).

Audit goes from 63 advisories (2 critical, 38 high) to 1 high with no
upstream fix available.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>

...

This commit is contained in:

Patryk-KuchtaandClaude Opus 5 committed 2026-10-19 19:24:08 +01:00

1 parent 1446679f4a

commit 8c3e97ab73

2 files changed

+973 -632

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

pnpm-lock.yaml

Generated

+959 -622

File diff suppressed because it is too large. Load diff