diff --git a/FORJAMIE.md b/FORJAMIE.md index 5fca39eb..006dee2c 100644 --- a/FORJAMIE.md +++ b/FORJAMIE.md @@ -219,6 +219,7 @@ See also: `~/.codex/instructions/Learnings.md` ### 2026-07-11 +- **Radix focus-guards security bump**: added a root pnpm override so transitive Radix overlay dependencies resolve `@radix-ui/react-focus-guards` at `1.1.4` or newer, matching the Storybook dependency update in PR #184. - **GitHub Actions checkout v7 refresh**: updated the pinned checkout action used by CI to v7. This is a tooling-only Dependabot maintenance change; repository checkout behavior and CI stages remain unchanged. - **GitHub Actions cache pin refresh**: updated the pinned `actions/cache` v5 commit used by the Ubuntu and macOS CI cache steps. This is a tooling-only Dependabot maintenance change; workflow behavior and cache keys remain unchanged. diff --git a/package.json b/package.json index 69f45569..278a1ba6 100644 --- a/package.json +++ b/package.json @@ -201,7 +201,8 @@ "picomatch@<2.3.2": ">=2.3.2", "picomatch@>=4.0.0 <4.0.4": ">=4.0.4", "yaml@>=2.0.0 <2.8.3": ">=2.8.3", - "path-to-regexp@>=8.0.0 <8.4.0": ">=8.4.0" + "path-to-regexp@>=8.0.0 <8.4.0": ">=8.4.0", + "@radix-ui/react-focus-guards@<1.1.4": ">=1.1.4" }, "publicHoistPattern": [ "@storybook/*", diff --git a/platforms/web/apps/storybook/package.json b/platforms/web/apps/storybook/package.json index 14affcba..e7fd80c5 100644 --- a/platforms/web/apps/storybook/package.json +++ b/platforms/web/apps/storybook/package.json @@ -22,7 +22,7 @@ "@radix-ui/react-dialog": "^1.1.15", "@radix-ui/react-dismissable-layer": "^1.1.11", "@radix-ui/react-dropdown-menu": "^2.1.16", - "@radix-ui/react-focus-guards": "^1.1.3", + "@radix-ui/react-focus-guards": "^1.1.4", "@radix-ui/react-focus-scope": "^1.1.8", "@radix-ui/react-popover": "^1.1.15", "@radix-ui/react-portal": "^1.1.10", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index b0b451b4..ba96864a 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -44,6 +44,7 @@ overrides: picomatch@>=4.0.0 <4.0.4: '>=4.0.4' yaml@>=2.0.0 <2.8.3: '>=2.8.3' path-to-regexp@>=8.0.0 <8.4.0: '>=8.4.0' + '@radix-ui/react-focus-guards@<1.1.4': '>=1.1.4' importers: @@ -780,8 +781,8 @@ importers: specifier: ^2.1.16 version: 2.1.16(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-focus-guards': - specifier: ^1.1.3 - version: 1.1.3(@types/react@19.2.14)(react@19.2.5) + specifier: ^1.1.4 + version: 1.1.4(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': specifier: ^1.1.8 version: 1.1.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) @@ -2371,8 +2372,8 @@ packages: '@types/react-dom': optional: true - '@radix-ui/react-focus-guards@1.1.3': - resolution: {integrity: sha512-0rFg/Rj2Q62NCm62jZw0QX7a3sz6QCQU0LpZdNrJX8byRGaGVTqbrW9jAoIAHyMQqsNpeZ81YgSizOt5WXq0Pw==} + '@radix-ui/react-focus-guards@1.1.4': + resolution: {integrity: sha512-cot/aB/mOm0IYVYTTmQcEEK1M48lZWi8FlYe5nDPQQ8NYZUlXEFgncJ9p2Kzer3RKSrY7cTTpEMLZKNo9QoP5Q==} peerDependencies: '@types/react': 19.2.14 react: 19.2.5 @@ -9162,7 +9163,7 @@ snapshots: '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) - '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.2.14)(react@19.2.5) + '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-portal': 1.1.9(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) @@ -9212,7 +9213,7 @@ snapshots: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) - '@radix-ui/react-focus-guards@1.1.3(@types/react@19.2.14)(react@19.2.5)': + '@radix-ui/react-focus-guards@1.1.4(@types/react@19.2.14)(react@19.2.5)': dependencies: react: 19.2.5 optionalDependencies: @@ -9308,7 +9309,7 @@ snapshots: '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-direction': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) - '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.2.14)(react@19.2.5) + '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-popper': 1.2.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) @@ -9408,7 +9409,7 @@ snapshots: '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) - '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.2.14)(react@19.2.5) + '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-popper': 1.2.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) @@ -9572,7 +9573,7 @@ snapshots: '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-direction': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) - '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.2.14)(react@19.2.5) + '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-popper': 1.2.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) @@ -13460,7 +13461,7 @@ snapshots: '@radix-ui/react-direction': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-dropdown-menu': 2.1.16(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) - '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.2.14)(react@19.2.5) + '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-form': 0.1.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-hover-card': 1.1.15(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)