QT/InvoiceShelf
1
0
Fork 0
mirror of https://github.com/InvoiceShelf/InvoiceShelf.git synced 2026-07-20 15:55:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(deps): bump vulnerable dependencies to patched versions (#674)

Browse Source 
Resolves the open Dependabot alerts on 2.x plus a laravel/framework
advisory surfaced by composer audit:

- vite 8.0.3 -> 8.0.5 (npm) — keeps rolldown 1.0.0-rc.12 so the build
  stays correct; vite 8.0.15+ pulls the broken rolldown 1.0.3
- laravel/framework -> 13.15.0 (CVE-2026-48019, CRLF injection in the
  default email validation rule)
- symfony/{mime,http-kernel,mailer,routing,yaml,polyfill-intl-idn} and
  guzzlehttp/psr7 -> patched releases

composer audit clean; frontend build verified (no dangling chunk refs).
This commit is contained in:
Darko Gjorgjijoski
2026-06-12 09:47:43 +02:00
committed by GitHub
parent 2f641ace0e
commit 9c5b8776c6
3 changed files with 427 additions and 309 deletions
Download Patch File Download Diff File Expand all files Collapse all files

704
composer.lock generated
View File

File diff suppressed because it is too large Load Diff

2
package.json
View File

@@ -52,7 +52,7 @@
"pinia": "^3.0.0",
"v-money3": "^3.24.1",
"v-tooltip": "^4.0.0-beta.17",
"vite": "8.0.3",
"vite": "8.0.5",
"vue": "^3.5",
"vue-flatpickr-component": "^12.0.0",
"vue-i18n": "^11.0.1",

30
pnpm-lock.yaml generated
View File

@@ -61,7 +61,7 @@ importers:
version: 0.0.12
laravel-vite-plugin:
specifier: ^3.0.0
version: 3.0.1(vite@8.0.3(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3))
version: 3.0.1(vite@8.0.5(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3))
lodash:
specifier: ^4.17.21
version: 4.18.1
@@ -87,8 +87,8 @@ importers:
specifier: ^4.0.0-beta.17
version: 4.0.0-beta.17(vue@3.5.31)
vite:
specifier: 8.0.3
version: 8.0.3(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3)
specifier: 8.0.5
version: 8.0.5(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3)
vue:
specifier: ^3.5
version: 3.5.31
@@ -113,10 +113,10 @@ importers:
version: 0.5.19(tailwindcss@4.2.2)
'@tailwindcss/vite':
specifier: ^4.0.0
version: 4.2.2(vite@8.0.3(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3))
version: 4.2.2(vite@8.0.5(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3))
'@vitejs/plugin-vue':
specifier: ^6.0.0
version: 6.0.5(vite@8.0.3(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3))(vue@3.5.31)
version: 6.0.5(vite@8.0.5(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3))(vue@3.5.31)
'@vue/compiler-sfc':
specifier: ^3.5.13
version: 3.5.31
@@ -1593,14 +1593,14 @@ packages:
vite-plugin-full-reload@1.2.0:
resolution: {integrity: sha512-kz18NW79x0IHbxRSHm0jttP4zoO9P9gXh+n6UTwlNKnviTTEpOlum6oS9SmecrTtSr+muHEn5TUuC75UovQzcA==}
vite@8.0.3:
resolution: {integrity: sha512-B9ifbFudT1TFhfltfaIPgjo9Z3mDynBTJSUYxTjOQruf/zHH+ezCQKcoqO+h7a9Pw9Nm/OtlXAiGT1axBgwqrQ==}
vite@8.0.5:
resolution: {integrity: sha512-nmu43Qvq9UopTRfMx2jOYW5l16pb3iDC1JH6yMuPkpVbzK0k+L7dfsEDH4jRgYFmsg0sTAqkojoZgzLMlwHsCQ==}
engines: {node: ^20.19.0 || >=22.12.0}
hasBin: true
peerDependencies:
'@types/node': ^20.19.0 || >=22.12.0
'@vitejs/devtools': ^0.1.0
esbuild: ^0.27.0
esbuild: ^0.27.0 || ^0.28.0
jiti: '>=1.21.0'
less: ^4.0.0
sass: ^1.70.0
@@ -2005,12 +2005,12 @@ snapshots:
postcss-selector-parser: 6.0.10
tailwindcss: 4.2.2
'@tailwindcss/vite@4.2.2(vite@8.0.3(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3))':
'@tailwindcss/vite@4.2.2(vite@8.0.5(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3))':
dependencies:
'@tailwindcss/node': 4.2.2
'@tailwindcss/oxide': 4.2.2
tailwindcss: 4.2.2
vite: 8.0.3(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3)
vite: 8.0.5(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3)
'@tanstack/virtual-core@3.13.23': {}
@@ -2221,10 +2221,10 @@ snapshots:
'@types/web-bluetooth@0.0.21': {}
'@vitejs/plugin-vue@6.0.5(vite@8.0.3(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3))(vue@3.5.31)':
'@vitejs/plugin-vue@6.0.5(vite@8.0.5(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3))(vue@3.5.31)':
dependencies:
'@rolldown/pluginutils': 1.0.0-rc.2
vite: 8.0.3(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3)
vite: 8.0.5(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3)
vue: 3.5.31
'@vue-macros/common@3.1.2(vue@3.5.31)':
@@ -2679,11 +2679,11 @@ snapshots:
dependencies:
json-buffer: 3.0.1
laravel-vite-plugin@3.0.1(vite@8.0.3(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3)):
laravel-vite-plugin@3.0.1(vite@8.0.5(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3)):
dependencies:
picocolors: 1.1.1
tinyglobby: 0.2.17
vite: 8.0.3(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3)
vite: 8.0.5(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3)
vite-plugin-full-reload: 1.2.0
levn@0.4.1:
@@ -3129,7 +3129,7 @@ snapshots:
picocolors: 1.1.1
picomatch: 2.3.2
vite@8.0.3(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3):
vite@8.0.5(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(@types/node@24.12.0)(jiti@2.6.1)(yaml@2.8.3):
dependencies:
lightningcss: 1.32.0
picomatch: 4.0.4