From 3a69eeef4fe688416659eaddddd9fcee7f694649 Mon Sep 17 00:00:00 2001 From: Ray Walker Date: Sun, 17 May 2026 09:40:50 +1000 Subject: [PATCH] =?UTF-8?q?chore:=20harden=20supply=20chain=20=E2=80=94=20?= =?UTF-8?q?patch=20transitive=20CVEs,=20enforce=20frozen=20lockfile?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Adds pnpm.overrides to force patched versions of vulnerable transitive devDependencies (protobufjs, vite, lodash, flatted, picomatch, yaml, postcss — all reachable only via testcontainers/vitest/eslint chains, no production exposure). Adds onlyBuiltDependencies allowlist so only cpu-features, ssh2, and protobufjs may run install scripts — every other transitive postinstall hook is inert by default. Equivalent to the npm ignore-scripts=true pattern but compatible with pnpm's native build flow. CI: pnpm install --frozen-lockfile everywhere (was silent on drift) and a second audit step covering all deps (not just --prod) so future dev CVEs don't sit unsurfaced. Verified: pnpm audit clean (0/0/0/0/0), build/lint/type-check/test green, cpu-features and ssh2 native binaries still produced. --- .github/workflows/ci.yml | 17 +- package.json | 15 +- pnpm-lock.yaml | 400 ++++++++++++++------------------------- 3 files changed, 169 insertions(+), 263 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 358b744..4561585 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -24,7 +24,7 @@ jobs: uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v2 - name: Install dependencies - run: pnpm install + run: pnpm install --frozen-lockfile - name: Lint run: pnpm lint @@ -51,7 +51,7 @@ jobs: uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v2 - name: Install dependencies - run: pnpm install + run: pnpm install --frozen-lockfile - name: Build run: pnpm build @@ -84,7 +84,7 @@ jobs: uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v2 - name: Install dependencies - run: pnpm install + run: pnpm install --frozen-lockfile - name: Build run: pnpm build @@ -109,7 +109,7 @@ jobs: uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v2 - name: Install dependencies - run: pnpm install + run: pnpm install --frozen-lockfile - name: Build run: pnpm build @@ -137,11 +137,14 @@ jobs: node-version: '22' - name: Install dependencies - run: pnpm install + run: pnpm install --frozen-lockfile - - name: Audit npm production dependencies + - name: Audit production dependencies (blocking) run: pnpm audit --prod --audit-level=high + - name: Audit all dependencies (blocking) + run: pnpm audit --audit-level=high + - name: Install cargo-audit run: cargo install cargo-audit --locked env: @@ -169,7 +172,7 @@ jobs: uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v2 - name: Install dependencies - run: pnpm install + run: pnpm install --frozen-lockfile - name: Build run: pnpm build diff --git a/package.json b/package.json index eb3a42f..70b7d8d 100644 --- a/package.json +++ b/package.json @@ -32,6 +32,19 @@ "typescript-eslint": "^8.58.0" }, "pnpm": { - "overrides": {} + "onlyBuiltDependencies": [ + "cpu-features", + "protobufjs", + "ssh2" + ], + "overrides": { + "protobufjs": ">=7.5.8", + "vite": ">=8.0.5", + "lodash": ">=4.18.0", + "flatted": ">=3.4.2", + "picomatch": ">=4.0.4", + "yaml": ">=2.8.3", + "postcss": ">=8.5.14" + } } } diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index a25db2f..691db1b 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -4,6 +4,20 @@ settings: autoInstallPeers: true excludeLinksFromLockfile: false +onlyBuiltDependencies: + - cpu-features + - protobufjs + - ssh2 + +overrides: + protobufjs: '>=7.5.8' + vite: '>=8.0.5' + lodash: '>=4.18.0' + flatted: '>=3.4.2' + picomatch: '>=4.0.4' + yaml: '>=2.8.3' + postcss: '>=8.5.14' + importers: .: @@ -71,7 +85,7 @@ importers: version: 6.0.2 vitest: specifier: ^4.1.2 - version: 4.1.2(@types/node@25.5.0)(vite@8.0.3) + version: 4.1.2(@types/node@25.5.0)(vite@8.0.13) packages/cachekit-core-ts: devDependencies: @@ -119,6 +133,14 @@ packages: engines: {node: '>=18'} dev: true + /@emnapi/core@1.10.0: + resolution: {integrity: sha512-yq6OkJ4p82CAfPl0u9mQebQHKPJkY7WrIuk205cTYnYe+k2Z8YBh11FrbRG/H6ihirqcacOgl2BIO8oyMQLeXw==} + dependencies: + '@emnapi/wasi-threads': 1.2.1 + tslib: 2.8.1 + dev: true + optional: true + /@emnapi/core@1.9.2: resolution: {integrity: sha512-UC+ZhH3XtczQYfOlu3lNEkdW/p4dsJ1r/bP7H8+rhao3TTTMO1ATq/4DdIi23XuGoFY+Cz0JmCbdVl0hz9jZcA==} dependencies: @@ -127,6 +149,13 @@ packages: dev: true optional: true + /@emnapi/runtime@1.10.0: + resolution: {integrity: sha512-ewvYlk86xUoGI0zQRNq/mC+16R1QeDlKQy21Ki3oSYXNgLb45GV1P6A0M+/s6nyCuNDqe5VpaY84BzXGwVbwFA==} + dependencies: + tslib: 2.8.1 + dev: true + optional: true + /@emnapi/runtime@1.9.2: resolution: {integrity: sha512-3U4+MIWHImeyu1wnmVygh5WlgfYDtyf0k8AbLhMFxOipihf6nrWC4syIm/SwEeec0mNSafiiNnMJwbza/Is6Lw==} dependencies: @@ -230,7 +259,7 @@ packages: dependencies: lodash.camelcase: 4.3.0 long: 5.3.2 - protobufjs: 7.5.4 + protobufjs: 8.3.0 yargs: 17.7.2 dev: true @@ -241,7 +270,7 @@ packages: dependencies: lodash.camelcase: 4.3.0 long: 5.3.2 - protobufjs: 7.5.4 + protobufjs: 8.3.0 yargs: 17.7.2 dev: true @@ -629,7 +658,6 @@ packages: engines: {node: '>= 10'} cpu: [arm] os: [android] - requiresBuild: true dev: true optional: true @@ -638,7 +666,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [android] - requiresBuild: true dev: true optional: true @@ -647,7 +674,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [darwin] - requiresBuild: true dev: true optional: true @@ -656,7 +682,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [darwin] - requiresBuild: true dev: true optional: true @@ -665,7 +690,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [freebsd] - requiresBuild: true dev: true optional: true @@ -674,7 +698,6 @@ packages: engines: {node: '>= 10'} cpu: [arm] os: [linux] - requiresBuild: true dev: true optional: true @@ -683,7 +706,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [linux] - requiresBuild: true dev: true optional: true @@ -692,7 +714,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [linux] - requiresBuild: true dev: true optional: true @@ -701,7 +722,6 @@ packages: engines: {node: '>= 10'} cpu: [ppc64] os: [linux] - requiresBuild: true dev: true optional: true @@ -710,7 +730,6 @@ packages: engines: {node: '>= 10'} cpu: [riscv64] os: [linux] - requiresBuild: true dev: true optional: true @@ -719,7 +738,6 @@ packages: engines: {node: '>= 10'} cpu: [s390x] os: [linux] - requiresBuild: true dev: true optional: true @@ -728,7 +746,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [linux] - requiresBuild: true dev: true optional: true @@ -737,7 +754,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [linux] - requiresBuild: true dev: true optional: true @@ -745,7 +761,6 @@ packages: resolution: {integrity: sha512-+VyHHlr68dvey6fXc2hehw9gHVFIW3TtGF1XkcbAu65qVXsA9D/T+uuoRVqhE+JCyFHFrO0ixRbZDRK1XJt1sA==} engines: {node: '>=14.0.0'} cpu: [wasm32] - requiresBuild: true dependencies: '@napi-rs/wasm-runtime': 1.1.2(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2) transitivePeerDependencies: @@ -759,7 +774,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [win32] - requiresBuild: true dev: true optional: true @@ -768,7 +782,6 @@ packages: engines: {node: '>= 10'} cpu: [ia32] os: [win32] - requiresBuild: true dev: true optional: true @@ -777,7 +790,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [win32] - requiresBuild: true dev: true optional: true @@ -812,7 +824,6 @@ packages: engines: {node: '>= 10'} cpu: [arm] os: [android] - requiresBuild: true dev: true optional: true @@ -821,7 +832,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [android] - requiresBuild: true dev: true optional: true @@ -830,7 +840,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [darwin] - requiresBuild: true dev: true optional: true @@ -839,7 +848,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [darwin] - requiresBuild: true dev: true optional: true @@ -848,7 +856,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [freebsd] - requiresBuild: true dev: true optional: true @@ -857,7 +864,6 @@ packages: engines: {node: '>= 10'} cpu: [arm] os: [linux] - requiresBuild: true dev: true optional: true @@ -866,7 +872,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [linux] - requiresBuild: true dev: true optional: true @@ -875,7 +880,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [linux] - requiresBuild: true dev: true optional: true @@ -884,7 +888,6 @@ packages: engines: {node: '>= 10'} cpu: [ppc64] os: [linux] - requiresBuild: true dev: true optional: true @@ -893,7 +896,6 @@ packages: engines: {node: '>= 10'} cpu: [s390x] os: [linux] - requiresBuild: true dev: true optional: true @@ -902,7 +904,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [linux] - requiresBuild: true dev: true optional: true @@ -911,7 +912,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [linux] - requiresBuild: true dev: true optional: true @@ -919,7 +919,6 @@ packages: resolution: {integrity: sha512-jIa9nb2HzOrfH0F8QQ9g3WE4aMH5vSI5/1NYVNm9ysCmNjCCtMXCAhlI3WKCdm/DwHf0zLqdrrtDFXODcNaqMw==} engines: {node: '>=14.0.0'} cpu: [wasm32] - requiresBuild: true dependencies: '@napi-rs/wasm-runtime': 1.1.2(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2) transitivePeerDependencies: @@ -933,7 +932,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [win32] - requiresBuild: true dev: true optional: true @@ -942,7 +940,6 @@ packages: engines: {node: '>= 10'} cpu: [ia32] os: [win32] - requiresBuild: true dev: true optional: true @@ -951,7 +948,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [win32] - requiresBuild: true dev: true optional: true @@ -982,7 +978,6 @@ packages: /@napi-rs/wasm-runtime@1.1.2(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2): resolution: {integrity: sha512-sNXv5oLJ7ob93xkZ1XnxisYhGYXfaG9f65/ZgYuAu3qt7b3NadcOEhLvx28hv31PgX8SZJRYrAIPQilQmFpLVw==} - requiresBuild: true peerDependencies: '@emnapi/core': ^1.7.1 '@emnapi/runtime': ^1.7.1 @@ -993,12 +988,23 @@ packages: dev: true optional: true + /@napi-rs/wasm-runtime@1.1.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0): + resolution: {integrity: sha512-3NQNNgA1YSlJb/kMH1ildASP9HW7/7kYnRI2szWJaofaS1hWmbGI4H+d3+22aGzXXN9IJ+n+GiFVcGipJP18ow==} + peerDependencies: + '@emnapi/core': ^1.7.1 + '@emnapi/runtime': ^1.7.1 + dependencies: + '@emnapi/core': 1.10.0 + '@emnapi/runtime': 1.10.0 + '@tybys/wasm-util': 0.10.1 + dev: true + optional: true + /@napi-rs/wasm-tools-android-arm-eabi@1.0.1: resolution: {integrity: sha512-lr07E/l571Gft5v4aA1dI8koJEmF1F0UigBbsqg9OWNzg80H3lDPO+auv85y3T/NHE3GirDk7x/D3sLO57vayw==} engines: {node: '>= 10'} cpu: [arm] os: [android] - requiresBuild: true dev: true optional: true @@ -1007,7 +1013,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [android] - requiresBuild: true dev: true optional: true @@ -1016,7 +1021,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [darwin] - requiresBuild: true dev: true optional: true @@ -1025,7 +1029,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [darwin] - requiresBuild: true dev: true optional: true @@ -1034,7 +1037,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [freebsd] - requiresBuild: true dev: true optional: true @@ -1043,7 +1045,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [linux] - requiresBuild: true dev: true optional: true @@ -1052,7 +1053,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [linux] - requiresBuild: true dev: true optional: true @@ -1061,7 +1061,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [linux] - requiresBuild: true dev: true optional: true @@ -1070,7 +1069,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [linux] - requiresBuild: true dev: true optional: true @@ -1078,7 +1076,6 @@ packages: resolution: {integrity: sha512-/nQVSTrqSsn7YdAc2R7Ips/tnw5SPUcl3D7QrXCNGPqjbatIspnaexvaOYNyKMU6xPu+pc0BTnKVmqhlJJCPLA==} engines: {node: '>=14.0.0'} cpu: [wasm32] - requiresBuild: true dependencies: '@napi-rs/wasm-runtime': 1.1.2(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2) transitivePeerDependencies: @@ -1092,7 +1089,6 @@ packages: engines: {node: '>= 10'} cpu: [arm64] os: [win32] - requiresBuild: true dev: true optional: true @@ -1101,7 +1097,6 @@ packages: engines: {node: '>= 10'} cpu: [ia32] os: [win32] - requiresBuild: true dev: true optional: true @@ -1110,7 +1105,6 @@ packages: engines: {node: '>= 10'} cpu: [x64] os: [win32] - requiresBuild: true dev: true optional: true @@ -1249,201 +1243,141 @@ packages: engines: {node: '>=8.0.0'} dev: true - /@oxc-project/types@0.122.0: - resolution: {integrity: sha512-oLAl5kBpV4w69UtFZ9xqcmTi+GENWOcPF7FCrczTiBbmC0ibXxCwyvZGbO39rCVEuLGAZM84DH0pUIyyv/YJzA==} + /@oxc-project/types@0.130.0: + resolution: {integrity: sha512-ibD2usx9JRu7f5pu2tMKMI4cpA4NgXJQoYRP4pQ7Pxmn1l6k/53qWtQWZayhYy3X4QZkt90Ot+mJEaeXouio6Q==} dev: true /@pkgjs/parseargs@0.11.0: resolution: {integrity: sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==} engines: {node: '>=14'} - requiresBuild: true dev: true optional: true - /@protobufjs/aspromise@1.1.2: - resolution: {integrity: sha512-j+gKExEuLmKwvz3OgROXtrJ2UG2x8Ch2YZUxahh+s1F2HZ+wAceUNLkvy6zKCPVRkU++ZWQrdxsUeQXmcg4uoQ==} - dev: true - - /@protobufjs/base64@1.1.2: - resolution: {integrity: sha512-AZkcAA5vnN/v4PDqKyMR5lx7hZttPDgClv83E//FMNhR2TMcLUhfRUBHCmSl0oi9zMgDDqRUJkSxO3wm85+XLg==} - dev: true - - /@protobufjs/codegen@2.0.4: - resolution: {integrity: sha512-YyFaikqM5sH0ziFZCN3xDC7zeGaB/d0IUb9CATugHWbd1FRFwWwt4ld4OYMPWu5a3Xe01mGAULCdqhMlPl29Jg==} - dev: true - - /@protobufjs/eventemitter@1.1.0: - resolution: {integrity: sha512-j9ednRT81vYJ9OfVuXG6ERSTdEL1xVsNgqpkxMsbIabzSo3goCjDIveeGv5d03om39ML71RdmrGNjG5SReBP/Q==} - dev: true - - /@protobufjs/fetch@1.1.0: - resolution: {integrity: sha512-lljVXpqXebpsijW71PZaCYeIcE5on1w5DlQy5WH6GLbFryLUrBD4932W/E2BSpfRJWseIL4v/KPgBFxDOIdKpQ==} - dependencies: - '@protobufjs/aspromise': 1.1.2 - '@protobufjs/inquire': 1.1.0 - dev: true - - /@protobufjs/float@1.0.2: - resolution: {integrity: sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ==} - dev: true - - /@protobufjs/inquire@1.1.0: - resolution: {integrity: sha512-kdSefcPdruJiFMVSbn801t4vFK7KB/5gd2fYvrxhuJYg8ILrmn9SKSX2tZdV6V+ksulWqS7aXjBcRXl3wHoD9Q==} - dev: true - - /@protobufjs/path@1.1.2: - resolution: {integrity: sha512-6JOcJ5Tm08dOHAbdR3GrvP+yUUfkjG5ePsHYczMFLq3ZmMkAD98cDgcT2iA1lJ9NVwFd4tH/iSSoe44YWkltEA==} - dev: true - - /@protobufjs/pool@1.1.0: - resolution: {integrity: sha512-0kELaGSIDBKvcgS4zkjz1PeddatrjYcmMWOlAuAPwAeccUrPHdUqo/J6LiymHHEiJT5NrF1UVwxY14f+fy4WQw==} - dev: true - - /@protobufjs/utf8@1.1.0: - resolution: {integrity: sha512-Vvn3zZrhQZkkBE8LSuW3em98c0FwgO4nxzv6OdSxPKJIEKY2bGbHn+mhGIPerzI4twdxaP8/0+06HBpwf345Lw==} - dev: true - - /@rolldown/binding-android-arm64@1.0.0-rc.12: - resolution: {integrity: sha512-pv1y2Fv0JybcykuiiD3qBOBdz6RteYojRFY1d+b95WVuzx211CRh+ytI/+9iVyWQ6koTh5dawe4S/yRfOFjgaA==} + /@rolldown/binding-android-arm64@1.0.1: + resolution: {integrity: sha512-fJI3I0r3C3Oj/zdBCpaCmBRZYf07xpaq4yCfDDoSFm+beWNzbIl26puW8RraUdugoJw/95zerNOn6jasAhzSmg==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [arm64] os: [android] - requiresBuild: true dev: true optional: true - /@rolldown/binding-darwin-arm64@1.0.0-rc.12: - resolution: {integrity: sha512-cFYr6zTG/3PXXF3pUO+umXxt1wkRK/0AYT8lDwuqvRC+LuKYWSAQAQZjCWDQpAH172ZV6ieYrNnFzVVcnSflAg==} + /@rolldown/binding-darwin-arm64@1.0.1: + resolution: {integrity: sha512-cKnAhWEsV7TPcA/5EAteDp6KcJZBQ2G+BqE7zayMMi7kMvwRsbv7WT9aOnn0WNl4SKEIf43vjS31iUPu80nzXg==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [arm64] os: [darwin] - requiresBuild: true dev: true optional: true - /@rolldown/binding-darwin-x64@1.0.0-rc.12: - resolution: {integrity: sha512-ZCsYknnHzeXYps0lGBz8JrF37GpE9bFVefrlmDrAQhOEi4IOIlcoU1+FwHEtyXGx2VkYAvhu7dyBf75EJQffBw==} + /@rolldown/binding-darwin-x64@1.0.1: + resolution: {integrity: sha512-YKrVwQjIRBPo+5G/u03wGjbdy4q7pyzCe93DK9VJ7zkVmeg8LJ7GbgsiHWdR4xSoe4CAXRD7Bcjgbtr64bkXNg==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [x64] os: [darwin] - requiresBuild: true dev: true optional: true - /@rolldown/binding-freebsd-x64@1.0.0-rc.12: - resolution: {integrity: sha512-dMLeprcVsyJsKolRXyoTH3NL6qtsT0Y2xeuEA8WQJquWFXkEC4bcu1rLZZSnZRMtAqwtrF/Ib9Ddtpa/Gkge9Q==} + /@rolldown/binding-freebsd-x64@1.0.1: + resolution: {integrity: sha512-z/oBsREo46SsFqBwYtFe0kpJeBijAT48O/WXLI4suiCLBkr03RTtTJMCzSdDd2znlh8VJizL09XVkQgk8IZonw==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [x64] os: [freebsd] - requiresBuild: true dev: true optional: true - /@rolldown/binding-linux-arm-gnueabihf@1.0.0-rc.12: - resolution: {integrity: sha512-YqWjAgGC/9M1lz3GR1r1rP79nMgo3mQiiA+Hfo+pvKFK1fAJ1bCi0ZQVh8noOqNacuY1qIcfyVfP6HoyBRZ85Q==} + /@rolldown/binding-linux-arm-gnueabihf@1.0.1: + resolution: {integrity: sha512-ik8q7GM11zxvYxFc2PeDcT6TBvhCQMaUxfph/M5l9sKuTs/Sjg3L+Byw0F7w0ZVLBZmx30P+gG0ECzzN+MFcmQ==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [arm] os: [linux] - requiresBuild: true dev: true optional: true - /@rolldown/binding-linux-arm64-gnu@1.0.0-rc.12: - resolution: {integrity: sha512-/I5AS4cIroLpslsmzXfwbe5OmWvSsrFuEw3mwvbQ1kDxJ822hFHIx+vsN/TAzNVyepI/j/GSzrtCIwQPeKCLIg==} + /@rolldown/binding-linux-arm64-gnu@1.0.1: + resolution: {integrity: sha512-QoSx2EkyrrdZ6kcyE8stqZ62t0Yra8Fs5ia9lOxJrh6TMQJK7gQKmscdTHf7pOXKREKrVwOtJcQG3qVSfc866A==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [arm64] os: [linux] - requiresBuild: true dev: true optional: true - /@rolldown/binding-linux-arm64-musl@1.0.0-rc.12: - resolution: {integrity: sha512-V6/wZztnBqlx5hJQqNWwFdxIKN0m38p8Jas+VoSfgH54HSj9tKTt1dZvG6JRHcjh6D7TvrJPWFGaY9UBVOaWPw==} + /@rolldown/binding-linux-arm64-musl@1.0.1: + resolution: {integrity: sha512-uwNwFpwKeNiZawfAWBgg0VIztPTV3ihhh1vV334h9ivnNLorxnQMU6Fz8wG1Zb4Qh9LC1/MkcyT3YlDXG3Rsgg==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [arm64] os: [linux] - requiresBuild: true dev: true optional: true - /@rolldown/binding-linux-ppc64-gnu@1.0.0-rc.12: - resolution: {integrity: sha512-AP3E9BpcUYliZCxa3w5Kwj9OtEVDYK6sVoUzy4vTOJsjPOgdaJZKFmN4oOlX0Wp0RPV2ETfmIra9x1xuayFB7g==} + /@rolldown/binding-linux-ppc64-gnu@1.0.1: + resolution: {integrity: sha512-zY1bul7OWr7DFBiJ++wofXvnr8B45ce3QsQUhKrIhXsygAh7bTkwyeM1bi1a2g5C/yC/N8TZyGDEoMfm/l9mpg==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [ppc64] os: [linux] - requiresBuild: true dev: true optional: true - /@rolldown/binding-linux-s390x-gnu@1.0.0-rc.12: - resolution: {integrity: sha512-nWwpvUSPkoFmZo0kQazZYOrT7J5DGOJ/+QHHzjvNlooDZED8oH82Yg67HvehPPLAg5fUff7TfWFHQS8IV1n3og==} + /@rolldown/binding-linux-s390x-gnu@1.0.1: + resolution: {integrity: sha512-0frlsT/f4Ft6I7SMESTKnF3cZsdicQn1dCMkF/jT9wDLE+gGoiQfv1nmT9e+s7s/fekvvy6tZM2jHvI2tkbJDQ==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [s390x] os: [linux] - requiresBuild: true dev: true optional: true - /@rolldown/binding-linux-x64-gnu@1.0.0-rc.12: - resolution: {integrity: sha512-RNrafz5bcwRy+O9e6P8Z/OCAJW/A+qtBczIqVYwTs14pf4iV1/+eKEjdOUta93q2TsT/FI0XYDP3TCky38LMAg==} + /@rolldown/binding-linux-x64-gnu@1.0.1: + resolution: {integrity: sha512-XABVmGp9Tg0WspTVvwduTc4fpqy6JnAUrSQe6OuyqD/03nI7r0O9OWUkMIwFrjKAIqolvqoA4ZrJppgwE0Gxmw==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [x64] os: [linux] - requiresBuild: true dev: true optional: true - /@rolldown/binding-linux-x64-musl@1.0.0-rc.12: - resolution: {integrity: sha512-Jpw/0iwoKWx3LJ2rc1yjFrj+T7iHZn2JDg1Yny1ma0luviFS4mhAIcd1LFNxK3EYu3DHWCps0ydXQ5i/rrJ2ig==} + /@rolldown/binding-linux-x64-musl@1.0.1: + resolution: {integrity: sha512-bV4fzswuzVcKD90o/VM6QqKxnxlDq0g2BISDLNVmxrnhpv1DDbyPhCIjYfvzYLV+MvkKKnQt2Q6AO86SEBULUQ==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [x64] os: [linux] - requiresBuild: true dev: true optional: true - /@rolldown/binding-openharmony-arm64@1.0.0-rc.12: - resolution: {integrity: sha512-vRugONE4yMfVn0+7lUKdKvN4D5YusEiPilaoO2sgUWpCvrncvWgPMzK00ZFFJuiPgLwgFNP5eSiUlv2tfc+lpA==} + /@rolldown/binding-openharmony-arm64@1.0.1: + resolution: {integrity: sha512-/Mh0Zhq3OP7fVs0kcQHZP6lZEthMGTaSf8UBQYSFEZDWGXXlEC+nJ6EqenaK2t4LBXMe3A+K/G2BVXXdtOr4PQ==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [arm64] os: [openharmony] - requiresBuild: true dev: true optional: true - /@rolldown/binding-wasm32-wasi@1.0.0-rc.12(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2): - resolution: {integrity: sha512-ykGiLr/6kkiHc0XnBfmFJuCjr5ZYKKofkx+chJWDjitX+KsJuAmrzWhwyOMSHzPhzOHOy7u9HlFoa5MoAOJ/Zg==} - engines: {node: '>=14.0.0'} + /@rolldown/binding-wasm32-wasi@1.0.1: + resolution: {integrity: sha512-+1xc9X45l8ufsBAm6Gjvx2qDRIY9lTVt0cgWNcJ+1gdhXvkbxePA60yRTwSTuXL09CMhyJmjpV7E3NoyxbqFQQ==} + engines: {node: ^20.19.0 || >=22.12.0} cpu: [wasm32] - requiresBuild: true dependencies: - '@napi-rs/wasm-runtime': 1.1.2(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2) - transitivePeerDependencies: - - '@emnapi/core' - - '@emnapi/runtime' + '@emnapi/core': 1.10.0 + '@emnapi/runtime': 1.10.0 + '@napi-rs/wasm-runtime': 1.1.4(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0) dev: true optional: true - /@rolldown/binding-win32-arm64-msvc@1.0.0-rc.12: - resolution: {integrity: sha512-5eOND4duWkwx1AzCxadcOrNeighiLwMInEADT0YM7xeEOOFcovWZCq8dadXgcRHSf3Ulh1kFo/qvzoFiCLOL1Q==} + /@rolldown/binding-win32-arm64-msvc@1.0.1: + resolution: {integrity: sha512-1D+UqZdfnuR+Jy1GgMJwi85bD40H21uNmOPRWQhw4oRSuolZ/B5rixZ45DK2KXOTCvmVCecauWgEhbw8bI7tOw==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [arm64] os: [win32] - requiresBuild: true dev: true optional: true - /@rolldown/binding-win32-x64-msvc@1.0.0-rc.12: - resolution: {integrity: sha512-PyqoipaswDLAZtot351MLhrlrh6lcZPo2LSYE+VDxbVk24LVKAGOuE4hb8xZQmrPAuEtTZW8E6D2zc5EUZX4Lw==} + /@rolldown/binding-win32-x64-msvc@1.0.1: + resolution: {integrity: sha512-INAycaWuhlOK3wk4mRHGsdgwYWmd9cChdPdE9bwWmy6rn9VqVNYNFGhOdXrofXUxwHIncSiPNb8tNm8knDVIeQ==} engines: {node: ^20.19.0 || >=22.12.0} cpu: [x64] os: [win32] - requiresBuild: true dev: true optional: true - /@rolldown/pluginutils@1.0.0-rc.12: - resolution: {integrity: sha512-HHMwmarRKvoFsJorqYlFeFRzXZqCt2ETQlEDOb9aqssrnVBB1/+xgTGtuTrIk5vzLNX1MjMtTf7W9z3tsSbrxw==} + /@rolldown/pluginutils@1.0.1: + resolution: {integrity: sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==} dev: true /@standard-schema/spec@1.1.0: @@ -1465,7 +1399,6 @@ packages: resolution: {integrity: sha512-P8foouaP+y/p+hhEGBoZpzMbpVvUMwPjDpcy6wN7EYfvvyISD1USuV27qWkczecihwuPJzQ1lDBuL8ERcavTyg==} cpu: [x64] os: [darwin] - requiresBuild: true dev: true optional: true @@ -1473,7 +1406,6 @@ packages: resolution: {integrity: sha512-SIzEkvtNdzdI50FJDaIQ6kQGqgSSdFPcdn0wqmmONN6iGKjy6hsT+EH99GP65FsfV7DLZTh2NmtTIRl2kdoz5Q==} cpu: [arm64] os: [darwin] - requiresBuild: true dev: true optional: true @@ -1481,7 +1413,6 @@ packages: resolution: {integrity: sha512-pLRwFmcHHNBvsCySLS6OFabr/07kDT2pxEt/k6eBf/3asiVQZKJ7Rk88AafQx2aYA641qek4RsXvYO3JYpiBug==} cpu: [x64] os: [linux] - requiresBuild: true dev: true optional: true @@ -1489,7 +1420,6 @@ packages: resolution: {integrity: sha512-gy6ApUroC2Nzv+qjGtE/uPNkhHAFU4c8God+zd5Aiv9L9uBgHlxVJpHT3XWl5xwlJZ2KWuMrlHTaS5kmNB+q1Q==} cpu: [arm64] os: [linux] - requiresBuild: true dev: true optional: true @@ -1497,7 +1427,6 @@ packages: resolution: {integrity: sha512-d0YelTX6hAsB7kIEtGB3PzIzSfAg3yDoUlHwuwJc3adBXUsyUIs0YLG+1NNtuhcDOUGnWQeKUoJ2pGWvbpRj7w==} cpu: [x64] os: [win32] - requiresBuild: true dev: true optional: true @@ -1505,13 +1434,11 @@ packages: resolution: {integrity: sha512-/08CwpKJl3oRY8nOlh2YgilZVJDHsr60XTNxRhuDeuFXONpUZ5X+Nv65izbG/xBew9qxcJFbDX9/sAmAX+ITcQ==} cpu: [arm64] os: [win32] - requiresBuild: true dev: true optional: true /@tybys/wasm-util@0.10.1: resolution: {integrity: sha512-9tTaPJLSiejZKx+Bmog4uSubteqTvFrVrURwkmHixBo0G4seD0zUxp98E1DzUBJxLQ3NPwXrGKDiVjwx/DpPsg==} - requiresBuild: true dependencies: tslib: 2.8.1 dev: true @@ -1754,7 +1681,7 @@ packages: obug: 2.1.1 std-env: 4.0.0 tinyrainbow: 3.1.0 - vitest: 4.1.2(@types/node@25.5.0)(vite@8.0.3) + vitest: 4.1.2(@types/node@25.5.0)(vite@8.0.13) dev: true /@vitest/expect@4.1.2: @@ -1768,11 +1695,11 @@ packages: tinyrainbow: 3.1.0 dev: true - /@vitest/mocker@4.1.2(vite@8.0.3): + /@vitest/mocker@4.1.2(vite@8.0.13): resolution: {integrity: sha512-Ize4iQtEALHDttPRCmN+FKqOl2vxTiNUhzobQFFt/BM1lRUTG7zRCLOykG/6Vo4E4hnUdfVLo5/eqKPukcWW7Q==} peerDependencies: msw: ^2.4.9 - vite: ^6.0.0 || ^7.0.0 || ^8.0.0 + vite: '>=8.0.5' peerDependenciesMeta: msw: optional: true @@ -1782,7 +1709,7 @@ packages: '@vitest/spy': 4.1.2 estree-walker: 3.0.3 magic-string: 0.30.21 - vite: 8.0.3(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)(@types/node@25.5.0) + vite: 8.0.13(@types/node@25.5.0) dev: true /@vitest/pretty-format@4.1.2: @@ -1879,7 +1806,7 @@ packages: graceful-fs: 4.2.11 is-stream: 2.0.1 lazystream: 1.0.1 - lodash: 4.17.21 + lodash: 4.18.1 normalize-path: 3.0.0 readable-stream: 4.7.0 dev: true @@ -1951,7 +1878,6 @@ packages: /bare-events@2.8.2: resolution: {integrity: sha512-riJjyv1/mHLIPX4RwiK+oW9/4c3TEUeORHKefKAKnZ5kyslbN+HXowtbaVEqt4IMUB7OXlfixcs6gsFeo/jhiQ==} - requiresBuild: true peerDependencies: bare-abort-controller: '*' peerDependenciesMeta: @@ -1962,7 +1888,6 @@ packages: /bare-fs@4.6.0: resolution: {integrity: sha512-2YkS7NuiJceSEbyEOdSNLE9tsGd+f4+f7C+Nik/MCk27SYdwIMPT/yRKvg++FZhQXgk0KWJKJyXX9RhVV0RGqA==} engines: {bare: '>=1.16.0'} - requiresBuild: true peerDependencies: bare-buffer: '*' peerDependenciesMeta: @@ -1983,13 +1908,11 @@ packages: /bare-os@3.6.2: resolution: {integrity: sha512-T+V1+1srU2qYNBmJCXZkUY5vQ0B4FSlL3QDROnKQYOqeiQR8UbjNHlPa+TIbM4cuidiN9GaTaOZgSEgsvPbh5A==} engines: {bare: '>=1.14.0'} - requiresBuild: true dev: true optional: true /bare-path@3.0.0: resolution: {integrity: sha512-tyfW2cQcB5NN8Saijrhqn0Zh7AnFNsnczRcuWODH0eYAXBsJ5gVxAUuNr7tsHSC6IZ77cA0SitzT+s47kot8Mw==} - requiresBuild: true dependencies: bare-os: 3.6.2 dev: true @@ -1997,7 +1920,6 @@ packages: /bare-stream@2.7.0(bare-events@2.8.2): resolution: {integrity: sha512-oyXQNicV1y8nc2aKffH+BUHFRXmx6VrPzlnaEvMhram0nPBrKcEdcyBg5r08D0i8VxngHFAiVyn1QKXpSG0B8A==} - requiresBuild: true peerDependencies: bare-buffer: '*' bare-events: '*' @@ -2017,7 +1939,6 @@ packages: /bare-url@2.3.2: resolution: {integrity: sha512-ZMq4gd9ngV5aTMa5p9+UfY0b3skwhHELaDkhEHetMdX0LRkW9kzaym4oo/Eh+Ghm0CCDuMTsRIGM/ytUc1ZYmw==} - requiresBuild: true dependencies: bare-path: 3.0.0 dev: true @@ -2084,7 +2005,6 @@ packages: /buildcheck@0.0.7: resolution: {integrity: sha512-lHblz4ahamxpTmnsk+MNTRWsjYKv965MwOrSJyeD588rR3Jcu7swE+0wN5F+PbL5cjgu/9ObkhfzEPuofEMwLA==} engines: {node: '>=10.0.0'} - requiresBuild: true dev: true optional: true @@ -2227,7 +2147,7 @@ packages: resolution: {integrity: sha512-LzcZ6Dk+Ps5SbLZ4iqAcagzYFZ+bBWQ52uzUNfORNkXyash2EjHZI4REf1ccG19emroS0iWElfQN8RQJ8HOIIg==} engines: {node: '>= 6.0.0'} dependencies: - yaml: 2.8.2 + yaml: 2.9.0 dev: true /docker-modem@5.0.6: @@ -2250,7 +2170,7 @@ packages: '@grpc/grpc-js': 1.14.2 '@grpc/proto-loader': 0.7.15 docker-modem: 5.0.6 - protobufjs: 7.5.4 + protobufjs: 8.3.0 tar-fs: 2.1.4 uuid: 10.0.0 transitivePeerDependencies: @@ -2421,7 +2341,6 @@ packages: /events-universal@1.0.1: resolution: {integrity: sha512-LUd5euvbMLpwOF8m6ivPCbhQeSiYVNb8Vs0fQ8QjXo0JTkEHpz8pxdQf0gStltaPpw0Cca8b39KxvK9cfKRiAw==} - requiresBuild: true dependencies: bare-events: 2.8.2 transitivePeerDependencies: @@ -2474,16 +2393,16 @@ packages: fast-string-width: 3.0.2 dev: true - /fdir@6.5.0(picomatch@4.0.3): + /fdir@6.5.0(picomatch@4.0.4): resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==} engines: {node: '>=12.0.0'} peerDependencies: - picomatch: ^3 || ^4 + picomatch: '>=4.0.4' peerDependenciesMeta: picomatch: optional: true dependencies: - picomatch: 4.0.3 + picomatch: 4.0.4 dev: true /file-entry-cache@8.0.0: @@ -2505,12 +2424,12 @@ packages: resolution: {integrity: sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==} engines: {node: '>=16'} dependencies: - flatted: 3.3.3 + flatted: 3.4.2 keyv: 4.5.4 dev: true - /flatted@3.3.3: - resolution: {integrity: sha512-GX+ysw4PBCz0PzosHDepZGANEuFCMLrnRTiEy9McGjmkCQYwRq4A/X786G/fjM/+OjsWSU1ZrY5qyARZmO/uwg==} + /flatted@3.4.2: + resolution: {integrity: sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==} dev: true /foreground-child@3.3.1: @@ -2529,7 +2448,6 @@ packages: resolution: {integrity: sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==} engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0} os: [darwin] - requiresBuild: true dev: true optional: true @@ -2735,7 +2653,6 @@ packages: engines: {node: '>= 12.0.0'} cpu: [arm64] os: [android] - requiresBuild: true dev: true optional: true @@ -2744,7 +2661,6 @@ packages: engines: {node: '>= 12.0.0'} cpu: [arm64] os: [darwin] - requiresBuild: true dev: true optional: true @@ -2753,7 +2669,6 @@ packages: engines: {node: '>= 12.0.0'} cpu: [x64] os: [darwin] - requiresBuild: true dev: true optional: true @@ -2762,7 +2677,6 @@ packages: engines: {node: '>= 12.0.0'} cpu: [x64] os: [freebsd] - requiresBuild: true dev: true optional: true @@ -2771,7 +2685,6 @@ packages: engines: {node: '>= 12.0.0'} cpu: [arm] os: [linux] - requiresBuild: true dev: true optional: true @@ -2780,7 +2693,6 @@ packages: engines: {node: '>= 12.0.0'} cpu: [arm64] os: [linux] - requiresBuild: true dev: true optional: true @@ -2789,7 +2701,6 @@ packages: engines: {node: '>= 12.0.0'} cpu: [arm64] os: [linux] - requiresBuild: true dev: true optional: true @@ -2798,7 +2709,6 @@ packages: engines: {node: '>= 12.0.0'} cpu: [x64] os: [linux] - requiresBuild: true dev: true optional: true @@ -2807,7 +2717,6 @@ packages: engines: {node: '>= 12.0.0'} cpu: [x64] os: [linux] - requiresBuild: true dev: true optional: true @@ -2816,7 +2725,6 @@ packages: engines: {node: '>= 12.0.0'} cpu: [arm64] os: [win32] - requiresBuild: true dev: true optional: true @@ -2825,7 +2733,6 @@ packages: engines: {node: '>= 12.0.0'} cpu: [x64] os: [win32] - requiresBuild: true dev: true optional: true @@ -2865,8 +2772,8 @@ packages: /lodash.isarguments@3.1.0: resolution: {integrity: sha512-chi4NHZlZqZD18a0imDHnZPrDeBbTtVN7GXMwuGdRH9qotxAjYs3aVLKc7zNOG9eddR5Ksd8rvFEBc9SsggPpg==} - /lodash@4.17.21: - resolution: {integrity: sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==} + /lodash@4.18.1: + resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==} dev: true /long@5.3.2: @@ -2951,7 +2858,6 @@ packages: /nan@2.26.2: resolution: {integrity: sha512-0tTvBTYkt3tdGw22nrAy50x7gpbGCCFH3AFcyS5WiUu7Eu4vWlri1woE6qHBSfy11vksDqkiwjOnlR7WV8G1Hw==} - requiresBuild: true dev: true optional: true @@ -3036,18 +2942,13 @@ packages: resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==} dev: true - /picomatch@4.0.3: - resolution: {integrity: sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==} - engines: {node: '>=12'} - dev: true - /picomatch@4.0.4: resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==} engines: {node: '>=12'} dev: true - /postcss@8.5.8: - resolution: {integrity: sha512-OW/rX8O/jXnm82Ey1k44pObPtdblfiuWnrd8X7GJ7emImCOstunGbXUpp7HdBrFQX6rJzn3sPT397Wp5aCwCHg==} + /postcss@8.5.14: + resolution: {integrity: sha512-SoSL4+OSEtR99LHFZQiJLkT59C5B1amGO1NzTwj7TT1qCUgUO6hxOvzkOYxD+vMrXBM3XJIKzokoERdqQq/Zmg==} engines: {node: ^10 || ^12 || >=14} dependencies: nanoid: 3.3.11 @@ -3101,22 +3002,11 @@ packages: - supports-color dev: true - /protobufjs@7.5.4: - resolution: {integrity: sha512-CvexbZtbov6jW2eXAvLukXjXUW1TzFaivC46BpWc/3BpcCysb5Vffu+B3XHMm8lVEuy2Mm4XGex8hBSg1yapPg==} + /protobufjs@8.3.0: + resolution: {integrity: sha512-JpJpFaR7yKNb6WqKvJJ1MLbiuIQWQnbUUb06nDtf2/i8YWYYLEfP6xf9BwSJoJQg1wAy61EQB8dssQg64oX4aA==} engines: {node: '>=12.0.0'} requiresBuild: true dependencies: - '@protobufjs/aspromise': 1.1.2 - '@protobufjs/base64': 1.1.2 - '@protobufjs/codegen': 2.0.4 - '@protobufjs/eventemitter': 1.1.0 - '@protobufjs/fetch': 1.1.0 - '@protobufjs/float': 1.0.2 - '@protobufjs/inquire': 1.1.0 - '@protobufjs/path': 1.1.2 - '@protobufjs/pool': 1.1.0 - '@protobufjs/utf8': 1.1.0 - '@types/node': 25.5.0 long: 5.3.2 dev: true @@ -3190,32 +3080,29 @@ packages: engines: {node: '>= 4'} dev: true - /rolldown@1.0.0-rc.12(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2): - resolution: {integrity: sha512-yP4USLIMYrwpPHEFB5JGH1uxhcslv6/hL0OyvTuY+3qlOSJvZ7ntYnoWpehBxufkgN0cvXxppuTu5hHa/zPh+A==} + /rolldown@1.0.1: + resolution: {integrity: sha512-X0KQHljNnEkWNqqiz9zJrGunh1B0HgOxLXvnFpCOcadzcy5qohZ3tqMEUg00vncoRovXuK3ZqCT9KnnKzoInFQ==} engines: {node: ^20.19.0 || >=22.12.0} hasBin: true dependencies: - '@oxc-project/types': 0.122.0 - '@rolldown/pluginutils': 1.0.0-rc.12 + '@oxc-project/types': 0.130.0 + '@rolldown/pluginutils': 1.0.1 optionalDependencies: - '@rolldown/binding-android-arm64': 1.0.0-rc.12 - '@rolldown/binding-darwin-arm64': 1.0.0-rc.12 - '@rolldown/binding-darwin-x64': 1.0.0-rc.12 - '@rolldown/binding-freebsd-x64': 1.0.0-rc.12 - '@rolldown/binding-linux-arm-gnueabihf': 1.0.0-rc.12 - '@rolldown/binding-linux-arm64-gnu': 1.0.0-rc.12 - '@rolldown/binding-linux-arm64-musl': 1.0.0-rc.12 - '@rolldown/binding-linux-ppc64-gnu': 1.0.0-rc.12 - '@rolldown/binding-linux-s390x-gnu': 1.0.0-rc.12 - '@rolldown/binding-linux-x64-gnu': 1.0.0-rc.12 - '@rolldown/binding-linux-x64-musl': 1.0.0-rc.12 - '@rolldown/binding-openharmony-arm64': 1.0.0-rc.12 - '@rolldown/binding-wasm32-wasi': 1.0.0-rc.12(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2) - '@rolldown/binding-win32-arm64-msvc': 1.0.0-rc.12 - '@rolldown/binding-win32-x64-msvc': 1.0.0-rc.12 - transitivePeerDependencies: - - '@emnapi/core' - - '@emnapi/runtime' + '@rolldown/binding-android-arm64': 1.0.1 + '@rolldown/binding-darwin-arm64': 1.0.1 + '@rolldown/binding-darwin-x64': 1.0.1 + '@rolldown/binding-freebsd-x64': 1.0.1 + '@rolldown/binding-linux-arm-gnueabihf': 1.0.1 + '@rolldown/binding-linux-arm64-gnu': 1.0.1 + '@rolldown/binding-linux-arm64-musl': 1.0.1 + '@rolldown/binding-linux-ppc64-gnu': 1.0.1 + '@rolldown/binding-linux-s390x-gnu': 1.0.1 + '@rolldown/binding-linux-x64-gnu': 1.0.1 + '@rolldown/binding-linux-x64-musl': 1.0.1 + '@rolldown/binding-openharmony-arm64': 1.0.1 + '@rolldown/binding-wasm32-wasi': 1.0.1 + '@rolldown/binding-win32-arm64-msvc': 1.0.1 + '@rolldown/binding-win32-x64-msvc': 1.0.1 dev: true /safe-buffer@5.1.2: @@ -3446,7 +3333,6 @@ packages: /text-decoder@1.2.3: resolution: {integrity: sha512-3/o9z3X0X0fTupwsYvR03pJ/DjWuqqrfwBgTQzdWDiQSm9KitAyz/9WqsT2JQW7KV2m+bC2ol/zqpW37NHxLaA==} - requiresBuild: true dependencies: b4a: 1.7.3 transitivePeerDependencies: @@ -3466,8 +3352,16 @@ packages: resolution: {integrity: sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==} engines: {node: '>=12.0.0'} dependencies: - fdir: 6.5.0(picomatch@4.0.3) - picomatch: 4.0.3 + fdir: 6.5.0(picomatch@4.0.4) + picomatch: 4.0.4 + dev: true + + /tinyglobby@0.2.16: + resolution: {integrity: sha512-pn99VhoACYR8nFHhxqix+uvsbXineAasWm5ojXoN8xEwK5Kd3/TrhNn1wByuD52UxWRLy8pu+kRMniEi6Eq9Zg==} + engines: {node: '>=12.0.0'} + dependencies: + fdir: 6.5.0(picomatch@4.0.4) + picomatch: 4.0.4 dev: true /tinyrainbow@3.1.0: @@ -3491,7 +3385,6 @@ packages: /tslib@2.8.1: resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==} - requiresBuild: true dev: true /turbo@2.9.3: @@ -3576,14 +3469,14 @@ packages: hasBin: true dev: true - /vite@8.0.3(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)(@types/node@25.5.0): - resolution: {integrity: sha512-B9ifbFudT1TFhfltfaIPgjo9Z3mDynBTJSUYxTjOQruf/zHH+ezCQKcoqO+h7a9Pw9Nm/OtlXAiGT1axBgwqrQ==} + /vite@8.0.13(@types/node@25.5.0): + resolution: {integrity: sha512-MFtjBYgzmSxmgA4RAfjIyXWpGe1oALnjgUTzzV7QLx/TKxCzjtMH6Fd9/eVK+5Fg1qNoz5VAwsmMs/NofrmJvw==} engines: {node: ^20.19.0 || >=22.12.0} hasBin: true peerDependencies: '@types/node': ^20.19.0 || >=22.12.0 - '@vitejs/devtools': ^0.1.0 - esbuild: ^0.27.0 + '@vitejs/devtools': ^0.1.18 + esbuild: ^0.27.0 || ^0.28.0 jiti: '>=1.21.0' less: ^4.0.0 sass: ^1.70.0 @@ -3592,7 +3485,7 @@ packages: sugarss: ^5.0.0 terser: ^5.16.0 tsx: ^4.8.1 - yaml: ^2.4.2 + yaml: '>=2.8.3' peerDependenciesMeta: '@types/node': optional: true @@ -3622,17 +3515,14 @@ packages: '@types/node': 25.5.0 lightningcss: 1.32.0 picomatch: 4.0.4 - postcss: 8.5.8 - rolldown: 1.0.0-rc.12(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2) - tinyglobby: 0.2.15 + postcss: 8.5.14 + rolldown: 1.0.1 + tinyglobby: 0.2.16 optionalDependencies: fsevents: 2.3.3 - transitivePeerDependencies: - - '@emnapi/core' - - '@emnapi/runtime' dev: true - /vitest@4.1.2(@types/node@25.5.0)(vite@8.0.3): + /vitest@4.1.2(@types/node@25.5.0)(vite@8.0.13): resolution: {integrity: sha512-xjR1dMTVHlFLh98JE3i/f/WePqJsah4A0FK9cc8Ehp9Udk0AZk6ccpIZhh1qJ/yxVWRZ+Q54ocnD8TXmkhspGg==} engines: {node: ^20.0.0 || ^22.0.0 || >=24.0.0} hasBin: true @@ -3646,7 +3536,7 @@ packages: '@vitest/ui': 4.1.2 happy-dom: '*' jsdom: '*' - vite: ^6.0.0 || ^7.0.0 || ^8.0.0 + vite: '>=8.0.5' peerDependenciesMeta: '@edge-runtime/vm': optional: true @@ -3669,7 +3559,7 @@ packages: dependencies: '@types/node': 25.5.0 '@vitest/expect': 4.1.2 - '@vitest/mocker': 4.1.2(vite@8.0.3) + '@vitest/mocker': 4.1.2(vite@8.0.13) '@vitest/pretty-format': 4.1.2 '@vitest/runner': 4.1.2 '@vitest/snapshot': 4.1.2 @@ -3680,13 +3570,13 @@ packages: magic-string: 0.30.21 obug: 2.1.1 pathe: 2.0.3 - picomatch: 4.0.3 + picomatch: 4.0.4 std-env: 4.0.0 tinybench: 2.9.0 tinyexec: 1.0.4 tinyglobby: 0.2.15 tinyrainbow: 3.1.0 - vite: 8.0.3(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)(@types/node@25.5.0) + vite: 8.0.13(@types/node@25.5.0) why-is-node-running: 2.3.0 transitivePeerDependencies: - msw @@ -3741,8 +3631,8 @@ packages: engines: {node: '>=10'} dev: true - /yaml@2.8.2: - resolution: {integrity: sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A==} + /yaml@2.9.0: + resolution: {integrity: sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==} engines: {node: '>= 14.6'} hasBin: true dev: true