From b80f06d5476250abe6d43a71870b3bc3ed00b739 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 22 Jun 2026 06:08:26 +0000 Subject: [PATCH 1/2] [security](deps-dev): Bump @radix-ui/react-focus-guards Bumps [@radix-ui/react-focus-guards](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/focus-guards) from 1.1.3 to 1.1.4. - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/focus-guards/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/focus-guards) --- updated-dependencies: - dependency-name: "@radix-ui/react-focus-guards" dependency-version: 1.1.4 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- platforms/web/apps/storybook/package.json | 2 +- pnpm-lock.yaml | 70 ++++++----------------- 2 files changed, 19 insertions(+), 53 deletions(-) diff --git a/platforms/web/apps/storybook/package.json b/platforms/web/apps/storybook/package.json index 14affcba..e7fd80c5 100644 --- a/platforms/web/apps/storybook/package.json +++ b/platforms/web/apps/storybook/package.json @@ -22,7 +22,7 @@ "@radix-ui/react-dialog": "^1.1.15", "@radix-ui/react-dismissable-layer": "^1.1.11", "@radix-ui/react-dropdown-menu": "^2.1.16", - "@radix-ui/react-focus-guards": "^1.1.3", + "@radix-ui/react-focus-guards": "^1.1.4", "@radix-ui/react-focus-scope": "^1.1.8", "@radix-ui/react-popover": "^1.1.15", "@radix-ui/react-portal": "^1.1.10", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 6f1a15b4..34cf0139 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -780,8 +780,8 @@ importers: specifier: ^2.1.16 version: 2.1.16(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-focus-guards': - specifier: ^1.1.3 - version: 1.1.3(@types/react@19.2.14)(react@19.2.5) + specifier: ^1.1.4 + version: 1.1.4(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': specifier: ^1.1.8 version: 1.1.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) @@ -2380,6 +2380,15 @@ packages: '@types/react': optional: true + '@radix-ui/react-focus-guards@1.1.4': + resolution: {integrity: sha512-cot/aB/mOm0IYVYTTmQcEEK1M48lZWi8FlYe5nDPQQ8NYZUlXEFgncJ9p2Kzer3RKSrY7cTTpEMLZKNo9QoP5Q==} + peerDependencies: + '@types/react': 19.2.14 + react: 19.2.5 + peerDependenciesMeta: + '@types/react': + optional: true + '@radix-ui/react-focus-scope@1.1.7': resolution: {integrity: sha512-t2ODlkXBQyn7jkl6TNaw/MtVEVvIGelJDCG41Okq/KwUsJBwQ4XVZsHAVUkK4mBv3ewiAS3PGuUWuY2BoK4ZUw==} peerDependencies: @@ -3910,29 +3919,6 @@ packages: react-dom: optional: true - agents@0.3.10: - resolution: {integrity: sha512-hKj3nbej14GA2SgE6/stQheJF35LCS7DxMuHG0QDl1/npnnECYyG0Yf5DXl6AvJAZOFNDwT3iEzKi8yLZngPDA==} - hasBin: true - peerDependencies: - '@ai-sdk/openai': ^3.0.0 - '@ai-sdk/react': ^3.0.0 - '@cloudflare/ai-chat': ^0.0.6 - '@cloudflare/codemode': ^0.0.6 - ai: ^6.0.0 - react: 19.2.5 - viem: '>=2.0.0' - x402: ^0.7.1 - zod: ^3.25.0 || ^4.0.0 - peerDependenciesMeta: - '@ai-sdk/openai': - optional: true - '@ai-sdk/react': - optional: true - viem: - optional: true - x402: - optional: true - agents@0.4.0: resolution: {integrity: sha512-YZPNCpO9KxHsyE1HyGFHPKs2MrRiOaQ6GJ9R8uPGqjmsfGZ0WWB7mayiQDgSx7tezwckrX4ShtGGftffDCMx0Q==} hasBin: true @@ -3944,7 +3930,7 @@ packages: '@x402/core': ^2.0.0 '@x402/evm': ^2.0.0 ai: ^6.0.0 - react: ^19.0.0 + react: 19.2.5 viem: '>=2.0.0' zod: ^3.25.0 || ^4.0.0 peerDependenciesMeta: @@ -6176,9 +6162,6 @@ packages: peerDependencies: '@cloudflare/workers-types': ^4.20240729.0 - partysocket@1.1.11: - resolution: {integrity: sha512-P0EtOQiAwvLriqLgdThcSaREfz3bP77LkLSdmXq680BosPKvGSoGTh/d0g3S+UNmaqcw89Ad7JXHHKyRx3xU9Q==} - partysocket@1.1.13: resolution: {integrity: sha512-RNXGzc6j0NISGE84+VTHHtbPwmnzZuOYJm9XZ+en+aZlIA2vC4AfwPlYxAHmGGGko3pQF7xRNhoe7bu1Brej4Q==} @@ -9244,6 +9227,12 @@ snapshots: optionalDependencies: '@types/react': 19.2.14 + '@radix-ui/react-focus-guards@1.1.4(@types/react@19.2.14)(react@19.2.5)': + dependencies: + react: 19.2.5 + optionalDependencies: + '@types/react': 19.2.14 + '@radix-ui/react-focus-scope@1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)': dependencies: '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) @@ -10845,25 +10834,6 @@ snapshots: react: 19.2.5 react-dom: 19.2.5(react@19.2.5) - agents@0.3.10(@cloudflare/workers-types@4.20260423.1)(react@19.2.5)(zod@3.25.76): - dependencies: - '@cfworker/json-schema': 4.1.1 - '@modelcontextprotocol/sdk': 1.26.0(@cfworker/json-schema@4.1.1)(zod@3.25.76) - cron-schedule: 6.0.0 - escape-html: 1.0.3 - json-schema: 0.4.0 - json-schema-to-typescript: 15.0.4 - mimetext: 3.0.28 - nanoid: 5.1.6 - partyserver: 0.1.5(@cloudflare/workers-types@4.20260423.1) - partysocket: 1.1.11 - react: 19.2.5 - yargs: 18.0.0 - zod: 3.25.76 - transitivePeerDependencies: - - '@cloudflare/workers-types' - - supports-color - agents@0.4.0(@cloudflare/workers-types@4.20260423.1)(react@19.2.5)(zod@3.25.76): dependencies: '@cfworker/json-schema': 4.1.1 @@ -13324,10 +13294,6 @@ snapshots: '@cloudflare/workers-types': 4.20260423.1 nanoid: 5.1.6 - partysocket@1.1.11: - dependencies: - event-target-polyfill: 0.0.4 - partysocket@1.1.13: dependencies: event-target-polyfill: 0.0.4 From d6d6b2d10235856050f558d40728eda3c5764b71 Mon Sep 17 00:00:00 2001 From: jscraik <154467285+jscraik@users.noreply.github.com> Date: Sat, 11 Jul 2026 18:42:29 +0100 Subject: [PATCH 2/2] fix(deps): force focus guards security update --- FORJAMIE.md | 1 + package.json | 3 ++- pnpm-lock.yaml | 26 ++++++-------------------- 3 files changed, 9 insertions(+), 21 deletions(-) diff --git a/FORJAMIE.md b/FORJAMIE.md index a356c001..fe16170a 100644 --- a/FORJAMIE.md +++ b/FORJAMIE.md @@ -219,6 +219,7 @@ See also: `~/.codex/instructions/Learnings.md` ### 2026-07-11 +- **Radix focus-guards security bump**: added a root pnpm override so transitive Radix overlay dependencies resolve `@radix-ui/react-focus-guards` at `1.1.4` or newer, matching the Storybook dependency update in PR #184. - **GitHub Actions cache pin refresh**: updated the pinned `actions/cache` v5 commit used by the Ubuntu and macOS CI cache steps. This is a tooling-only Dependabot maintenance change; workflow behavior and cache keys remain unchanged. ### 2026-06-20 diff --git a/package.json b/package.json index 69f45569..278a1ba6 100644 --- a/package.json +++ b/package.json @@ -201,7 +201,8 @@ "picomatch@<2.3.2": ">=2.3.2", "picomatch@>=4.0.0 <4.0.4": ">=4.0.4", "yaml@>=2.0.0 <2.8.3": ">=2.8.3", - "path-to-regexp@>=8.0.0 <8.4.0": ">=8.4.0" + "path-to-regexp@>=8.0.0 <8.4.0": ">=8.4.0", + "@radix-ui/react-focus-guards@<1.1.4": ">=1.1.4" }, "publicHoistPattern": [ "@storybook/*", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index e10616ed..b7e4e6b3 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -44,6 +44,7 @@ overrides: picomatch@>=4.0.0 <4.0.4: '>=4.0.4' yaml@>=2.0.0 <2.8.3: '>=2.8.3' path-to-regexp@>=8.0.0 <8.4.0: '>=8.4.0' + '@radix-ui/react-focus-guards@<1.1.4': '>=1.1.4' importers: @@ -2371,15 +2372,6 @@ packages: '@types/react-dom': optional: true - '@radix-ui/react-focus-guards@1.1.3': - resolution: {integrity: sha512-0rFg/Rj2Q62NCm62jZw0QX7a3sz6QCQU0LpZdNrJX8byRGaGVTqbrW9jAoIAHyMQqsNpeZ81YgSizOt5WXq0Pw==} - peerDependencies: - '@types/react': 19.2.14 - react: 19.2.5 - peerDependenciesMeta: - '@types/react': - optional: true - '@radix-ui/react-focus-guards@1.1.4': resolution: {integrity: sha512-cot/aB/mOm0IYVYTTmQcEEK1M48lZWi8FlYe5nDPQQ8NYZUlXEFgncJ9p2Kzer3RKSrY7cTTpEMLZKNo9QoP5Q==} peerDependencies: @@ -9171,7 +9163,7 @@ snapshots: '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) - '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.2.14)(react@19.2.5) + '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-portal': 1.1.9(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) @@ -9221,12 +9213,6 @@ snapshots: '@types/react': 19.2.14 '@types/react-dom': 19.2.3(@types/react@19.2.14) - '@radix-ui/react-focus-guards@1.1.3(@types/react@19.2.14)(react@19.2.5)': - dependencies: - react: 19.2.5 - optionalDependencies: - '@types/react': 19.2.14 - '@radix-ui/react-focus-guards@1.1.4(@types/react@19.2.14)(react@19.2.5)': dependencies: react: 19.2.5 @@ -9323,7 +9309,7 @@ snapshots: '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-direction': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) - '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.2.14)(react@19.2.5) + '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-popper': 1.2.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) @@ -9423,7 +9409,7 @@ snapshots: '@radix-ui/react-compose-refs': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) - '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.2.14)(react@19.2.5) + '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-popper': 1.2.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) @@ -9587,7 +9573,7 @@ snapshots: '@radix-ui/react-context': 1.1.2(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-direction': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) - '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.2.14)(react@19.2.5) + '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-id': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-popper': 1.2.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) @@ -13475,7 +13461,7 @@ snapshots: '@radix-ui/react-direction': 1.1.1(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-dismissable-layer': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-dropdown-menu': 2.1.16(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) - '@radix-ui/react-focus-guards': 1.1.3(@types/react@19.2.14)(react@19.2.5) + '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.2.14)(react@19.2.5) '@radix-ui/react-focus-scope': 1.1.7(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-form': 0.1.8(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5) '@radix-ui/react-hover-card': 1.1.15(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(react-dom@19.2.5(react@19.2.5))(react@19.2.5)