From 3ad6a4646a0336d4f1f0116d870d11789ae5e388 Mon Sep 17 00:00:00 2001 From: Illia Pashkov Date: Wed, 22 Jul 2026 21:20:10 -0700 Subject: [PATCH] fix(deps): clear production audit advisories --- apps/badge-server/package.json | 4 +- apps/gateway-server/package.json | 6 +- package.json | 11 ++- packages/client/package.json | 2 +- pnpm-lock.yaml | 149 ++++++++++++++++++------------- 5 files changed, 103 insertions(+), 69 deletions(-) diff --git a/apps/badge-server/package.json b/apps/badge-server/package.json index cf01be3f..8efb0b82 100644 --- a/apps/badge-server/package.json +++ b/apps/badge-server/package.json @@ -12,8 +12,8 @@ "clean": "rm -rf dist *.tsbuildinfo" }, "dependencies": { - "@hono/node-server": "^1.14.0", - "hono": "^4.7.0" + "@hono/node-server": "^2.0.5", + "hono": "^4.12.27" }, "devDependencies": { "@types/node": "^22.13.0", diff --git a/apps/gateway-server/package.json b/apps/gateway-server/package.json index a11024be..78806f80 100644 --- a/apps/gateway-server/package.json +++ b/apps/gateway-server/package.json @@ -23,7 +23,7 @@ "test": "vitest run" }, "dependencies": { - "@hono/node-server": "^1.14.0", + "@hono/node-server": "^2.0.5", "@pshkv/core": "workspace:*", "@pshkv/avatar": "workspace:*", "@pshkv/gate-capability-tokens": "workspace:*", @@ -35,9 +35,9 @@ "@pshkv/token-registry": "workspace:*", "@pshkv/interface-bridge": "workspace:*", "@pshkv/persistence": "workspace:*", - "hono": "^4.7.0", + "hono": "^4.12.27", "ioredis": "^5.4.0", - "ws": "^8.18.0", + "ws": "^8.21.0", "zod": "^3.24.0" }, "devDependencies": { diff --git a/package.json b/package.json index 3ce1ed8b..ab1410e1 100644 --- a/package.json +++ b/package.json @@ -60,9 +60,16 @@ }, "pnpm": { "overrides": { - "fast-uri": ">=3.1.2", + "@hono/node-server": ">=2.0.5", + "body-parser": ">=2.3.0", + "express-rate-limit": ">=8.6.0", + "fast-uri": ">=3.1.4", + "hono": ">=4.12.27", + "ip-address": ">=10.2.0", "path-to-regexp": ">=8.4.0", - "picomatch": ">=4.0.4" + "picomatch": ">=4.0.4", + "qs": ">=6.15.3", + "ws": ">=8.21.0" } } } diff --git a/packages/client/package.json b/packages/client/package.json index 10202b52..ec42e386 100644 --- a/packages/client/package.json +++ b/packages/client/package.json @@ -24,7 +24,7 @@ "devDependencies": { "@pshkv/gateway-server": "workspace:*", "@pshkv/gate-capability-tokens": "workspace:*", - "hono": "^4.7.0", + "hono": "^4.12.27", "typescript": "^5.7.0", "vitest": "^3.0.0" }, diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index e43c6332..e7309f3e 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -5,9 +5,16 @@ settings: excludeLinksFromLockfile: false overrides: - fast-uri: '>=3.1.2' + '@hono/node-server': '>=2.0.5' + body-parser: '>=2.3.0' + express-rate-limit: '>=8.6.0' + fast-uri: '>=3.1.4' + hono: '>=4.12.27' + ip-address: '>=10.2.0' path-to-regexp: '>=8.4.0' picomatch: '>=4.0.4' + qs: '>=6.15.3' + ws: '>=8.21.0' importers: @@ -35,11 +42,11 @@ importers: apps/badge-server: dependencies: '@hono/node-server': - specifier: ^1.14.0 - version: 1.19.11(hono@4.12.8) + specifier: '>=2.0.5' + version: 2.0.11(hono@4.12.31) hono: - specifier: ^4.7.0 - version: 4.12.8 + specifier: '>=4.12.27' + version: 4.12.31 devDependencies: '@types/node': specifier: ^22.13.0 @@ -91,8 +98,8 @@ importers: apps/gateway-server: dependencies: '@hono/node-server': - specifier: ^1.14.0 - version: 1.19.11(hono@4.12.8) + specifier: '>=2.0.5' + version: 2.0.11(hono@4.12.31) '@pshkv/avatar': specifier: workspace:* version: link:../../packages/avatar @@ -127,14 +134,14 @@ importers: specifier: workspace:* version: link:../../packages/token-registry hono: - specifier: ^4.7.0 - version: 4.12.8 + specifier: '>=4.12.27' + version: 4.12.31 ioredis: specifier: ^5.4.0 version: 5.10.0 ws: - specifier: ^8.18.0 - version: 8.19.0 + specifier: '>=8.21.0' + version: 8.21.1 zod: specifier: ^3.24.0 version: 3.25.76 @@ -653,8 +660,8 @@ importers: specifier: workspace:* version: link:../../apps/gateway-server hono: - specifier: ^4.7.0 - version: 4.12.8 + specifier: '>=4.12.27' + version: 4.12.31 typescript: specifier: ^5.7.0 version: 5.9.3 @@ -1699,11 +1706,11 @@ packages: cpu: [x64] os: [win32] - '@hono/node-server@1.19.11': - resolution: {integrity: sha512-dr8/3zEaB+p0D2n/IUrlPF1HZm586qgJNXK1a9fhg/PzdtkK7Ksd5l312tJX2yBuALqDYBlG20QEbayqPyxn+g==} - engines: {node: '>=18.14.1'} + '@hono/node-server@2.0.11': + resolution: {integrity: sha512-bjD221KPLoJTWUwso1J6fGKiTXEUFedG/s0visavY4zakFPkeGURMRNly+FhBHs7T8Dz4qHaZIMX9ZoJHSJtKA==} + engines: {node: '>=20'} peerDependencies: - hono: ^4 + hono: '>=4.12.27' '@iconify-json/simple-icons@1.2.76': resolution: {integrity: sha512-lLRlA8yaf+1L5VCPRvR9lynoSklsddKHEylchmZJKdj/q2xVQ1ZAEJ8SCQlv9cbgtMefnlyM98U+8Si2aoFZPA==} @@ -2212,8 +2219,8 @@ packages: bl@6.1.6: resolution: {integrity: sha512-jLsPgN/YSvPUg9UX0Kd73CXpm2Psg9FxMeCSXnk3WBO3CMT10JMwijubhGfHCnFu6TPn1ei3b975dxv7K2pWVg==} - body-parser@2.2.2: - resolution: {integrity: sha512-oP5VkATKlNwcgvxi0vM0p/D3n2C3EReYVX+DNYs5TjZFn/oQt2j+4sVJtSMr18pdRr8wjTcBl6LoV+FUwzPmNA==} + body-parser@2.3.0: + resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==} engines: {node: '>=18'} broker-factory@3.1.14: @@ -2292,6 +2299,10 @@ packages: resolution: {integrity: sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==} engines: {node: '>= 0.6'} + content-type@2.0.0: + resolution: {integrity: sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==} + engines: {node: '>=18'} + convert-source-map@2.0.0: resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==} @@ -2466,8 +2477,8 @@ packages: resolution: {integrity: sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA==} engines: {node: '>=12.0.0'} - express-rate-limit@8.3.1: - resolution: {integrity: sha512-D1dKN+cmyPWuvB+G2SREQDzPY1agpBIcTa9sJxOPMCNeH3gwzhqJRDWCXW3gg0y//+LQ/8j52JbMROWyrKdMdw==} + express-rate-limit@8.6.0: + resolution: {integrity: sha512-XKJXDsASUOo0LLtFwW5hCcQGH0N4WQc/Rn8/Pvoia+TJFOkkFPvrtW9lZOeeNcxQJspvOIERMwiRLsVFlhHEkA==} engines: {node: '>= 16'} peerDependencies: express: '>= 4.11' @@ -2483,8 +2494,8 @@ packages: resolution: {integrity: sha512-nDA9ADeINN8SA2u2wCtU+siWFTTDqQR37XvgPIDDmboWQeExz7X0mImxuaN+kJddliIqy2FpVRmnvRZ+j8i1/A==} engines: {node: '>=18.2.0'} - fast-uri@3.1.2: - resolution: {integrity: sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==} + fast-uri@4.1.1: + resolution: {integrity: sha512-YPOs1zD5TG2+EZt+r88LwF6mclA7TPkpwMP7ZN3TO2HiHS8TXvq7QA/17iJsV9dubcLo/f8eEYqMBruyQV21hQ==} fdir@6.5.0: resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==} @@ -2562,8 +2573,8 @@ packages: help-me@5.0.0: resolution: {integrity: sha512-7xgomUX6ADmcYzFik0HzAxh/73YlKR9bmFzf51CZwR+b6YtzU2m0u49hQCqV6SvlqIqsaxovfwdvbnsw3b/zpg==} - hono@4.12.8: - resolution: {integrity: sha512-VJCEvtrezO1IAR+kqEYnxUOoStaQPGrCmX3j4wDTNOcD1uRPFpGlwQUIW8niPuvHXaTUxeOUl5MMDGrl+tmO9A==} + hono@4.12.31: + resolution: {integrity: sha512-zJIHFrl6bq3RDd2YusFNCDlM8qUprxKswyi/OPzPyzKDdyBXDqWx8bZlZ7R+saTdSTatUmb3O7K4SspGPaEOQg==} engines: {node: '>=16.9.0'} hookable@5.5.3: @@ -2610,8 +2621,8 @@ packages: resolution: {integrity: sha512-HVBe9OFuqs+Z6n64q09PQvP1/R4Bm+30PAyyD4wIEqssh3v9L21QjCVk4kRLucMBcDokJTcLjsGeVRlq/nH6DA==} engines: {node: '>=12.22.0'} - ip-address@10.1.0: - resolution: {integrity: sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==} + ip-address@10.2.0: + resolution: {integrity: sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==} engines: {node: '>= 12'} ipaddr.js@1.9.1: @@ -2916,8 +2927,8 @@ packages: resolution: {integrity: sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==} engines: {node: '>=6'} - qs@6.15.0: - resolution: {integrity: sha512-mAZTtNCeetKMH+pSjrb76NAM8V9a05I9aBZOHztWy/UqcJdQYNsf59vrRKWnojAT9Y+GbIvoTBC++CPHqpDBhQ==} + qs@6.15.3: + resolution: {integrity: sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==} engines: {node: '>=0.6'} range-parser@1.2.1: @@ -3040,8 +3051,8 @@ packages: shiki@2.5.0: resolution: {integrity: sha512-mI//trrsaiCIPsja5CNfsyNOqgAZUb6VpJA+340toL42UpzQlXpwRV9nch69X6gaUxrr9kaOOa6e3y3uAkGFxQ==} - side-channel-list@1.0.0: - resolution: {integrity: sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==} + side-channel-list@1.0.1: + resolution: {integrity: sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==} engines: {node: '>= 0.4'} side-channel-map@1.0.1: @@ -3052,8 +3063,8 @@ packages: resolution: {integrity: sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==} engines: {node: '>= 0.4'} - side-channel@1.1.0: - resolution: {integrity: sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==} + side-channel@1.1.1: + resolution: {integrity: sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==} engines: {node: '>= 0.4'} siginfo@2.0.0: @@ -3216,6 +3227,10 @@ packages: resolution: {integrity: sha512-OZs6gsjF4vMp32qrCbiVSkrFmXtG/AZhY3t0iAMrMBiAZyV9oALtXO8hsrHbMXF9x6L3grlFuwW2oAz7cav+Gw==} engines: {node: '>= 0.6'} + type-is@2.1.0: + resolution: {integrity: sha512-faYHw0anBbc/kWF3zFTEnxSFOAGUX9GFbOBthvDdLsIlEoWOFOtS0zgCiQYwIskL9iGXZL3kAXD8OoZ4GmMATA==} + engines: {node: '>= 18'} + typedarray@0.0.6: resolution: {integrity: sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA==} @@ -3465,8 +3480,8 @@ packages: wrappy@1.0.2: resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==} - ws@8.19.0: - resolution: {integrity: sha512-blAT2mjOEIi0ZzruJfIhb3nps74PRWTCz1IjglWEEpQl5XS/UNama6u2/rjFkDDouqr4L67ry+1aGIALViWjDg==} + ws@8.21.1: + resolution: {integrity: sha512-+0NTnW77fFN/DjQi6k/Sq/Yvk4Sgajw7urW8V+asjXnRgDs9gyGkdb7EzgfhA4goXsRIZKE28fzIXBHEzhuiWw==} engines: {node: '>=10.0.0'} peerDependencies: bufferutil: ^4.0.1 @@ -4009,9 +4024,9 @@ snapshots: '@esbuild/win32-x64@0.27.4': optional: true - '@hono/node-server@1.19.11(hono@4.12.8)': + '@hono/node-server@2.0.11(hono@4.12.31)': dependencies: - hono: 4.12.8 + hono: 4.12.31 '@iconify-json/simple-icons@1.2.76': dependencies: @@ -4042,7 +4057,7 @@ snapshots: '@modelcontextprotocol/sdk@1.29.0(zod@3.25.76)': dependencies: - '@hono/node-server': 1.19.11(hono@4.12.8) + '@hono/node-server': 2.0.11(hono@4.12.31) ajv: 8.18.0 ajv-formats: 3.0.1(ajv@8.18.0) content-type: 1.0.5 @@ -4051,8 +4066,8 @@ snapshots: eventsource: 3.0.7 eventsource-parser: 3.0.6 express: 5.2.1 - express-rate-limit: 8.3.1(express@5.2.1) - hono: 4.12.8 + express-rate-limit: 8.6.0(express@5.2.1) + hono: 4.12.31 jose: 6.2.1 json-schema-typed: 8.0.2 pkce-challenge: 5.0.1 @@ -4510,7 +4525,7 @@ snapshots: ajv@8.18.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.2 + fast-uri: 4.1.1 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -4558,17 +4573,17 @@ snapshots: inherits: 2.0.4 readable-stream: 4.7.0 - body-parser@2.2.2: + body-parser@2.3.0: dependencies: bytes: 3.1.2 - content-type: 1.0.5 + content-type: 2.0.0 debug: 4.4.3 http-errors: 2.0.1 iconv-lite: 0.7.2 on-finished: 2.4.1 - qs: 6.15.0 + qs: 6.15.3 raw-body: 3.0.2 - type-is: 2.0.1 + type-is: 2.1.0 transitivePeerDependencies: - supports-color @@ -4647,6 +4662,8 @@ snapshots: content-type@1.0.5: {} + content-type@2.0.0: {} + convert-source-map@2.0.0: {} cookie-signature@1.2.2: {} @@ -4849,15 +4866,18 @@ snapshots: expect-type@1.3.0: {} - express-rate-limit@8.3.1(express@5.2.1): + express-rate-limit@8.6.0(express@5.2.1): dependencies: + debug: 4.4.3 express: 5.2.1 - ip-address: 10.1.0 + ip-address: 10.2.0 + transitivePeerDependencies: + - supports-color express@5.2.1: dependencies: accepts: 2.0.0 - body-parser: 2.2.2 + body-parser: 2.3.0 content-disposition: 1.0.1 content-type: 1.0.5 cookie: 0.7.2 @@ -4876,7 +4896,7 @@ snapshots: once: 1.4.0 parseurl: 1.3.3 proxy-addr: 2.0.7 - qs: 6.15.0 + qs: 6.15.3 range-parser: 1.2.1 router: 2.2.0 send: 1.2.1 @@ -4894,7 +4914,7 @@ snapshots: '@babel/runtime': 7.29.2 tslib: 2.8.1 - fast-uri@3.1.2: {} + fast-uri@4.1.1: {} fdir@6.5.0(picomatch@4.0.4): optionalDependencies: @@ -4988,7 +5008,7 @@ snapshots: help-me@5.0.0: {} - hono@4.12.8: {} + hono@4.12.31: {} hookable@5.5.3: {} @@ -5048,7 +5068,7 @@ snapshots: transitivePeerDependencies: - supports-color - ip-address@10.1.0: {} + ip-address@10.2.0: {} ipaddr.js@1.9.1: {} @@ -5089,7 +5109,7 @@ snapshots: whatwg-encoding: 3.1.1 whatwg-mimetype: 4.0.0 whatwg-url: 14.2.0 - ws: 8.19.0 + ws: 8.21.1 xml-name-validator: 5.0.0 transitivePeerDependencies: - bufferutil @@ -5204,7 +5224,7 @@ snapshots: socks: 2.8.7 split2: 4.2.0 worker-timers: 8.0.31 - ws: 8.19.0 + ws: 8.21.1 transitivePeerDependencies: - bufferutil - supports-color @@ -5341,9 +5361,10 @@ snapshots: punycode@2.3.1: {} - qs@6.15.0: + qs@6.15.3: dependencies: - side-channel: 1.1.0 + es-define-property: 1.0.1 + side-channel: 1.1.1 range-parser@1.2.1: {} @@ -5509,7 +5530,7 @@ snapshots: '@shikijs/vscode-textmate': 10.0.2 '@types/hast': 3.0.4 - side-channel-list@1.0.0: + side-channel-list@1.0.1: dependencies: es-errors: 1.3.0 object-inspect: 1.13.4 @@ -5529,11 +5550,11 @@ snapshots: object-inspect: 1.13.4 side-channel-map: 1.0.1 - side-channel@1.1.0: + side-channel@1.1.1: dependencies: es-errors: 1.3.0 object-inspect: 1.13.4 - side-channel-list: 1.0.0 + side-channel-list: 1.0.1 side-channel-map: 1.0.1 side-channel-weakmap: 1.0.2 @@ -5543,7 +5564,7 @@ snapshots: socks@2.8.7: dependencies: - ip-address: 10.1.0 + ip-address: 10.2.0 smart-buffer: 4.2.0 source-map-js@1.2.1: {} @@ -5666,6 +5687,12 @@ snapshots: media-typer: 1.1.0 mime-types: 3.0.2 + type-is@2.1.0: + dependencies: + content-type: 2.0.0 + media-typer: 1.1.0 + mime-types: 3.0.2 + typedarray@0.0.6: {} typescript@5.9.3: {} @@ -5970,7 +5997,7 @@ snapshots: wrappy@1.0.2: {} - ws@8.19.0: {} + ws@8.21.1: {} xml-name-validator@5.0.0: {}