mirror of
https://github.com/RayLabsHQ/gitea-mirror.git
synced 2026-10-15 11:51:52 +02:00
Dependabot alert 70 (GHSA-9rgm-9g3h-6x36): devalue below 5.9.1 can be made to hang on malformed input. Astro and @astrojs/react pull it in, and both lockfiles resolved 5.8.1. The override floors in package.json and www/package.json now ask for 5.9.2 or later; both lockfiles resolve 5.9.4 and bun.nix is regenerated.
47 lines
1.1 KiB
JSON
47 lines
1.1 KiB
JSON
{
|
|
"name": "www",
|
|
"type": "module",
|
|
"version": "1.2.0",
|
|
"scripts": {
|
|
"dev": "astro dev",
|
|
"build": "astro build",
|
|
"preview": "astro preview",
|
|
"astro": "astro"
|
|
},
|
|
"dependencies": {
|
|
"@astrojs/mdx": "^7.0.3",
|
|
"@astrojs/react": "^6.0.1",
|
|
"@astrojs/sitemap": "^3.7.3",
|
|
"@radix-ui/react-slot": "^1.3.0",
|
|
"@splinetool/react-spline": "^4.1.0",
|
|
"@splinetool/runtime": "^1.12.98",
|
|
"@tailwindcss/vite": "^4.3.3",
|
|
"@types/canvas-confetti": "^1.9.0",
|
|
"@types/react": "^19.2.17",
|
|
"@types/react-dom": "^19.2.3",
|
|
"astro": "^7.2.8",
|
|
"canvas-confetti": "^1.9.4",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"lucide-react": "^1.24.0",
|
|
"react": "^19.2.7",
|
|
"react-dom": "^19.2.7",
|
|
"tailwind-merge": "^3.6.0",
|
|
"tailwindcss": "^4.3.3"
|
|
},
|
|
"devDependencies": {
|
|
"tw-animate-css": "^1.4.0"
|
|
},
|
|
"packageManager": "pnpm@10.32.1",
|
|
"pnpm": {
|
|
"overrides": {
|
|
"esbuild@>=0.27.3 <0.28.1": ">=0.28.1",
|
|
"sharp": "^0.35.4",
|
|
"svgo": "^4.1.0",
|
|
"js-yaml": "^4.3.2",
|
|
"smol-toml": "^1.7.1",
|
|
"devalue": "^5.9.2"
|
|
}
|
|
}
|
|
}
|