Merge pull request #105 from cipherstash/minor-bump

fix(nextjs, protect): update dependencies to address upstream vuln

Author: calvinbrewer

.changeset/breezy-pans-deny.md

@@ -0,0 +1,6 @@
+---
+"@cipherstash/protect": minor
+"@cipherstash/nextjs": minor
+---
+
+Bumped versions of dependencies to address CWE-346.

apps/basic/package.json

@@ -12,8 +12,10 @@
   "description": "",
   "dependencies": {
     "@cipherstash/protect": "workspace:*",
-    "typescript": "^5.0.0",
-    "tsx": "^4.19.2",
     "dotenv": "^16.4.7"
+  },
+  "devDependencies": {
+    "tsx": "catalog:repo",
+    "typescript": "catalog:repo"
   }
 }

apps/drizzle/package.json

@@ -7,9 +7,9 @@
 		"@types/node": "^22.10.2",
 		"@types/pg": "^8.11.10",
 		"dotenv": "^16.4.7",
-		"drizzle-kit": "^0.24.2",
-		"typescript": "^5.0.0",
-		"tsx": "^4.19.2"
+		"drizzle-kit": "^0.30.5",
+		"typescript": "catalog:repo",
+		"tsx": "catalog:repo"
 	},
 	"scripts": {
 		"insert": "tsx src/insert.ts",

apps/hono-supabase/package.json

@@ -14,6 +14,7 @@
   },
   "devDependencies": {
     "@types/node": "^20.11.17",
-    "tsx": "^4.7.1"
+    "tsx": "catalog:repo",
+    "typescript": "catalog:repo"
   }
 }

apps/nextjs-clerk/package.json

@@ -35,10 +35,10 @@
 		"@types/node": "^20",
 		"@types/react": "^19",
 		"@types/react-dom": "^19",
-		"drizzle-kit": "^0.30.1",
+		"drizzle-kit": "^0.30.5",
 		"postcss": "^8",
 		"tailwindcss": "^3.4.1",
-		"tsx": "^4.19.2",
-		"typescript": "^5"
+		"tsx": "catalog:repo",
+		"typescript": "catalog:repo"
 	}
 }

packages/nextjs/package.json

@@ -38,12 +38,12 @@
 	"devDependencies": {
 		"@clerk/nextjs": "^6.9.7",
 		"dotenv": "^16.4.7",
-		"tsup": "^8.3.0",
-		"vitest": "^2.1.9"
+		"tsup": "catalog:repo",
+		"typescript": "catalog:repo",
+		"vitest": "catalog:repo"
 	},
 	"peerDependencies": {
-		"next": "^14 || ^15",
-		"typescript": "^5.0.0"
+		"next": "^14 || ^15"
 	},
 	"publishConfig": {
 		"access": "public"

packages/protect/package.json

@@ -44,12 +44,10 @@
 		"dotenv": "^16.4.7",
 		"execa": "^9.5.2",
 		"json-schema-to-typescript": "^15.0.2",
-		"tsup": "^8.3.0",
-		"tsx": "^4.19.3",
-		"vitest": "^2.1.9"
-	},
-	"peerDependencies": {
-		"typescript": "^5.0.0"
+		"tsup": "catalog:repo",
+		"typescript": "catalog:repo",
+		"tsx": "catalog:repo",
+		"vitest": "catalog:repo"
 	},
 	"publishConfig": {
 		"access": "public"