Files
ethernet e932116a3c fix(sec): patch the npm advisories in every workspace
undici 6.28.0, brace-expansion 5.0.9, and electron 41.10.4 in the root
workspace, the desktop app, and the TUI. postcss and undici in website/.

dompurify 3.4.12, mermaid 11.6.0, nanoid 3.3.17 in the desktop app.

npm audit also reported js-yaml 4.3.0 (GHSA-5p4m-2wfm-xmqj, quadratic
CPU in !!omap): through electron-builder in the root and desktop
workspaces, and through docusaurus in website/. An override in each
workspace moves it to 4.3.1.

tar pinned to 7.5.22 (superficially seems compatible with 6!)
and image-size pinned to an inhouse-fork of the real repo (lol)

Each .npmrc gets the matching exclusion, so a transitive copy cannot
pull an old version back in.
2026-08-08 20:59:47 -04:00
..