From 19ed0bc127626e1e875fe0298670eb339b8bfee1 Mon Sep 17 00:00:00 2001 From: Pratapa Lakshmi Date: Wed, 11 Nov 2026 17:38:59 +0530 Subject: [PATCH] chore(deps): fix open Dependabot alerts (handlebars, tinypool, follow-redirects) - handlebars 4.7.9 -> 4.7.10 (override; via ts-jest, dev) - tinypool 2.1.0 -> 2.1.2 (new override; oxfmt 0.42.0 pins 2.1.0 exactly, dev) - follow-redirects 1.16.0 -> 1.16.3 (override; via axios, runtime) deepmerge 4.3.1 (via jest-config) is left as-is: no patched release exists. --- pnpm-lock.yaml | 29 +++++++++++++++-------------- pnpm-workspace.yaml | 5 +++-- 2 files changed, 18 insertions(+), 16 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 15a2145b..8405d885 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -7,8 +7,9 @@ settings: overrides: js-yaml: 4.3.2 minimatch@3: 3.1.4 - handlebars: 4.7.9 - follow-redirects: 1.16.0 + handlebars: 4.7.10 + follow-redirects: 1.16.3 + tinypool: 2.1.2 importers: @@ -949,8 +950,8 @@ packages: resolution: {integrity: sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==} engines: {node: '>=8'} - follow-redirects@1.16.0: - resolution: {integrity: sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==} + follow-redirects@1.16.3: + resolution: {integrity: sha512-toOSoqN6d51Wjf1aOFJYcoVv1aND9rj/CwjLU0Vz40oDuSpWDayCeKe4JpL5NL0WdFvoOOCI3BRo69HahjbR1A==} engines: {node: '>=4.0'} peerDependencies: debug: '*' @@ -1008,8 +1009,8 @@ packages: graceful-fs@4.2.11: resolution: {integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==} - handlebars@4.7.9: - resolution: {integrity: sha512-4E71E0rpOaQuJR2A3xDZ+GM1HyWYv1clR58tC8emQNeQe3RH7MAzSbat+V0wG78LQBo6m6bzSG/L4pBuCsgnUQ==} + handlebars@4.7.10: + resolution: {integrity: sha512-P5VJMVM7qgBn6vjXMw8WG9uVI+ncf2pi72j4de4yz5ZULLj2RGqLYaKOYGsgyrViQ0tePOVlN1tDCCXXtFqXKg==} engines: {node: '>=0.4.7'} hasBin: true @@ -1552,8 +1553,8 @@ packages: resolution: {integrity: sha512-cAGWPIyOHU6zlmg88jwm7VRyXnMN7iV68OGAbYDk/Mh/xC/pzVPlQtY6ngoIH/5/tciuhGfvESU8GrHrcxD56w==} engines: {node: '>=8'} - tinypool@2.1.0: - resolution: {integrity: sha512-Pugqs6M0m7Lv1I7FtxN4aoyToKg1C4tu+/381vH35y8oENM/Ai7f7C4StcoK4/+BSw9ebcS8jRiVrORFKCALLw==} + tinypool@2.1.2: + resolution: {integrity: sha512-9YodfrxS9g9IbFr/KOjE5bAeJ0p61n3bW6mqvy0jtoeKd1kTW1Cxm0oulm6KX2lyM9Gl6WIe8nEbY7LWv5ZJww==} engines: {node: ^20.0.0 || >=22.0.0} tmpl@1.0.5: @@ -2350,7 +2351,7 @@ snapshots: axios@1.20.0: dependencies: - follow-redirects: 1.16.0 + follow-redirects: 1.16.3 form-data: 4.0.6 https-proxy-agent: 5.0.1 proxy-from-env: 2.1.0 @@ -2610,7 +2611,7 @@ snapshots: locate-path: 5.0.0 path-exists: 4.0.0 - follow-redirects@1.16.0: {} + follow-redirects@1.16.3: {} form-data@4.0.6: dependencies: @@ -2666,7 +2667,7 @@ snapshots: graceful-fs@4.2.11: {} - handlebars@4.7.9: + handlebars@4.7.10: dependencies: minimist: 1.2.8 neo-async: 2.6.2 @@ -3181,7 +3182,7 @@ snapshots: oxfmt@0.42.0: dependencies: - tinypool: 2.1.0 + tinypool: 2.1.2 optionalDependencies: '@oxfmt/binding-android-arm-eabi': 0.42.0 '@oxfmt/binding-android-arm64': 0.42.0 @@ -3366,7 +3367,7 @@ snapshots: glob: 7.2.3 minimatch: 3.1.4 - tinypool@2.1.0: {} + tinypool@2.1.2: {} tmpl@1.0.5: {} @@ -3378,7 +3379,7 @@ snapshots: dependencies: bs-logger: 0.2.6 fast-json-stable-stringify: 2.1.0 - handlebars: 4.7.9 + handlebars: 4.7.10 jest: 29.7.0(@types/node@20.19.39)(ts-node@10.9.2(@types/node@20.19.39)(typescript@5.9.3)) json5: 2.2.3 lodash.memoize: 4.1.2 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 86ad5986..1a64f053 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -1,5 +1,6 @@ overrides: js-yaml: 4.3.2 minimatch@3: 3.1.4 - handlebars: 4.7.9 - follow-redirects: 1.16.0 + handlebars: 4.7.10 + follow-redirects: 1.16.3 + tinypool: 2.1.2