From: Jérôme Benoit Date: Fri, 27 Mar 2026 16:32:44 +0000 (+0100) Subject: fix(deps): add security overrides for brace-expansion, picomatch, smol-toml X-Git-Tag: ocpp-server@v4.0.0~33 X-Git-Url: https://git.piment-noir.org/?a=commitdiff_plain;h=816ea7adfec784fa1c9951c93f346c6d04cfa61c;p=e-mobility-charging-stations-simulator.git fix(deps): add security overrides for brace-expansion, picomatch, smol-toml --- diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index acae0c58..c596994f 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -6,12 +6,15 @@ settings: overrides: bn.js@<5.2.3: '>=5.2.3' + brace-expansion@<1.1.13: '>=1.1.13' d3-color@<3.1.0: '>=3.1.0' form-data@<2.5.4: '>=2.5.4' got@<11.8.5: '>=11.8.5' minimatch@>=10.0.0 <10.2.3: '>=10.2.3' minimatch@>=9.0.0 <9.0.7: '>=9.0.7' + picomatch@<2.3.2: '>=2.3.2' qs@<6.14.1: '>=6.14.1' + smol-toml@<1.6.1: '>=1.6.1' tar@<7.5.7: '>=7.5.7' tmp@<=0.2.3: '>=0.2.4' tough-cookie@<4.1.3: '>=4.1.3' @@ -1814,9 +1817,6 @@ packages: react-native-b4a: optional: true - balanced-match@1.0.2: - resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==} - balanced-match@4.0.4: resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==} engines: {node: 18 || 20 || >=22} @@ -1872,13 +1872,14 @@ packages: resolution: {integrity: sha512-9gYgQKXx+1nP8mP7CzFyaUARhg7D3n1dF/FnErWmu9l6JvGpNUN278h0aSb+QjoiKSWG+iZ3uHrcqk0qrY9RQQ==} engines: {node: '>=10'} - brace-expansion@1.1.12: - resolution: {integrity: sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==} - brace-expansion@5.0.4: resolution: {integrity: sha512-h+DEnpVvxmfVefa4jFbCf5HdH5YMDXRsmKflpf1pILZWRFlTbJpxeU55nJl4Smt5HQaGzg1o6RHFPJaOqnmBDg==} engines: {node: 18 || 20 || >=22} + brace-expansion@5.0.5: + resolution: {integrity: sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ==} + engines: {node: 18 || 20 || >=22} + braces@3.0.3: resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==} engines: {node: '>=8'} @@ -2195,9 +2196,6 @@ packages: compare-func@2.0.0: resolution: {integrity: sha512-zHig5N+tPWARooBnb0Zx1MFcdfpyJrfTJ3Y5L+IFvUm8rM74hHz66z0gw0x4tijh5CorKkKUCnW82R2vmpeCRA==} - concat-map@0.0.1: - resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==} - concat-stream@1.6.2: resolution: {integrity: sha512-27HBghJxjiZtIk3Ycvn/4kbJk/1uZuJFfuPEns6LaEvpvG1f0hTea8lilrouyo9mVc2GWdcEZ8OLoGmSADlrCw==} engines: {'0': node >= 0.8} @@ -4755,10 +4753,6 @@ packages: picocolors@1.1.1: resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==} - picomatch@2.3.1: - resolution: {integrity: sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==} - engines: {node: '>=8.6'} - picomatch@4.0.4: resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==} engines: {node: '>=12'} @@ -5242,8 +5236,8 @@ packages: resolution: {integrity: sha512-stxByr12oeeOyY2BlviTNQlYV5xOj47GirPr4yA1hE9JCtxfQN0+tVbkxwCtYDQWhEKWFHsEK48ORg5jrouCAg==} engines: {node: '>=20'} - smol-toml@1.6.0: - resolution: {integrity: sha512-4zemZi0HvTnYwLfrpk/CF9LOd9Lt87kAt50GnqhMpyF9U3poDAP2+iukq2bZsO/ufegbYehBkqINbsWxj4l4cw==} + smol-toml@1.6.1: + resolution: {integrity: sha512-dWUG8F5sIIARXih1DTaQAX4SsiTXhInKf1buxdY9DIg4ZYPZK5nGM1VRIYmEbDbsHt7USo99xSLFu5Q1IqTmsg==} engines: {node: '>= 18'} sonic-boom@1.4.1: @@ -7833,7 +7827,7 @@ snapshots: anymatch@3.1.3: dependencies: normalize-path: 3.0.0 - picomatch: 2.3.1 + picomatch: 4.0.4 are-docs-informative@0.0.2: {} @@ -7993,8 +7987,6 @@ snapshots: b4a@1.8.0: {} - balanced-match@1.0.2: {} - balanced-match@4.0.4: {} base64-js@1.5.1: {} @@ -8061,12 +8053,11 @@ snapshots: widest-line: 3.1.0 wrap-ansi: 7.0.0 - brace-expansion@1.1.12: + brace-expansion@5.0.4: dependencies: - balanced-match: 1.0.2 - concat-map: 0.0.1 + balanced-match: 4.0.4 - brace-expansion@5.0.4: + brace-expansion@5.0.5: dependencies: balanced-match: 4.0.4 @@ -8483,8 +8474,6 @@ snapshots: array-ify: 1.0.0 dot-prop: 5.3.0 - concat-map@0.0.1: {} - concat-stream@1.6.2: dependencies: buffer-from: 1.1.2 @@ -8650,7 +8639,7 @@ snapshots: dependencies: '@cspell/cspell-types': 9.7.0 comment-json: 4.6.2 - smol-toml: 1.6.0 + smol-toml: 1.6.1 yaml: 2.8.3 cspell-dictionary@9.7.0: @@ -10746,7 +10735,7 @@ snapshots: micromatch@4.0.8: dependencies: braces: 3.0.3 - picomatch: 2.3.1 + picomatch: 4.0.4 mikro-orm@6.6.10: {} @@ -10794,11 +10783,11 @@ snapshots: minimatch@10.2.4: dependencies: - brace-expansion: 5.0.4 + brace-expansion: 5.0.5 minimatch@3.1.5: dependencies: - brace-expansion: 1.1.12 + brace-expansion: 5.0.4 minimist@1.2.8: {} @@ -11308,8 +11297,6 @@ snapshots: picocolors@1.1.1: {} - picomatch@2.3.1: {} - picomatch@4.0.4: {} pify@2.3.0: {} @@ -11524,7 +11511,7 @@ snapshots: readdirp@3.6.0: dependencies: - picomatch: 2.3.1 + picomatch: 4.0.4 readdirp@5.0.0: {} @@ -11890,7 +11877,7 @@ snapshots: ansi-styles: 6.2.3 is-fullwidth-code-point: 5.1.0 - smol-toml@1.6.0: {} + smol-toml@1.6.1: {} sonic-boom@1.4.1: dependencies: diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 15560511..e2b42a07 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -4,12 +4,15 @@ packages: overrides: bn.js@<5.2.3: '>=5.2.3' + brace-expansion@<1.1.13: '>=1.1.13' d3-color@<3.1.0: '>=3.1.0' form-data@<2.5.4: '>=2.5.4' got@<11.8.5: '>=11.8.5' minimatch@>=10.0.0 <10.2.3: '>=10.2.3' minimatch@>=9.0.0 <9.0.7: '>=9.0.7' + picomatch@<2.3.2: '>=2.3.2' qs@<6.14.1: '>=6.14.1' + smol-toml@<1.6.1: '>=1.6.1' tar@<7.5.7: '>=7.5.7' tmp@<=0.2.3: '>=0.2.4' tough-cookie@<4.1.3: '>=4.1.3'