From 738ad8a3a47b605f09fa2bf08abb871cd5e984c2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 21 Sep 2026 03:17:22 +0000 Subject: [PATCH 1/2] build(deps): bump node in /apps/server Bumps node from 26.8.1-alpine3.24 to 26.9.0-alpine3.24. --- updated-dependencies: - dependency-name: node dependency-version: 26.9.0-alpine3.24 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- apps/server/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/server/Dockerfile b/apps/server/Dockerfile index af0c772..4e947e6 100644 --- a/apps/server/Dockerfile +++ b/apps/server/Dockerfile @@ -1,4 +1,4 @@ -FROM node:26.8.1-alpine3.24 AS build +FROM node:26.9.0-alpine3.24 AS build RUN npm install --global pnpm@11.17.0 WORKDIR /app @@ -23,7 +23,7 @@ FROM build AS production-dependencies WORKDIR /app RUN pnpm --filter @splidly/server deploy --prod --legacy /prod/server -FROM node:26.8.1-alpine3.24 AS runtime +FROM node:26.9.0-alpine3.24 AS runtime WORKDIR /app ENV NODE_ENV=production COPY --from=production-dependencies --chown=node:node /prod/server ./apps/server From 7bb1723450bc614af99bf493e1d23d520af5a524 Mon Sep 17 00:00:00 2001 From: Florian2807 <84639717+Florian2807@users.noreply.github.com> Date: Tue, 22 Sep 2026 15:51:49 +0200 Subject: [PATCH 2/2] fix(deps): patch js-yaml audit vulnerabilities --- pnpm-lock.yaml | 20 ++++++++++---------- pnpm-workspace.yaml | 8 ++++---- 2 files changed, 14 insertions(+), 14 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index dbe640c..ee62704 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -10,8 +10,8 @@ overrides: brace-expansion@>=4.0.0 <5.0.9: 5.0.9 decode-uri-component@<0.5.0: 0.5.0 esbuild@<=0.24.2: 0.25.0 - js-yaml@>=3.0.0 <3.15.1: 3.15.1 - js-yaml@>=4.0.0 <4.3.1: 4.3.1 + js-yaml@>=3.0.0 <3.15.2: 3.15.2 + js-yaml@>=4.0.0 <4.3.2: 4.3.2 nanoid@<3.3.18: 3.3.18 postcss@<=8.5.22: 8.5.23 uuid@<11.1.1: ^11.1.1 @@ -4096,12 +4096,12 @@ packages: js-tokens@4.0.0: resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==} - js-yaml@3.15.1: - resolution: {integrity: sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==} + js-yaml@3.15.2: + resolution: {integrity: sha512-6EuL879VkRA+1Cz578mKMiKvjPNEuk6+r1JaFzoSWejZmtf7xWbIyw1e3KkxlkzTIt9Taw6JBhEppG7utc1P+w==} hasBin: true - js-yaml@4.3.1: - resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==} + js-yaml@4.3.2: + resolution: {integrity: sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==} hasBin: true jsc-safe-url@0.2.4: @@ -6951,7 +6951,7 @@ snapshots: dependencies: '@babel/code-frame': 7.29.7 chalk: 4.1.2 - js-yaml: 4.3.1 + js-yaml: 4.3.2 '@hono/node-server@2.1.1(hono@4.13.5)': dependencies: @@ -6964,7 +6964,7 @@ snapshots: camelcase: 5.3.1 find-up: 4.1.0 get-package-type: 0.1.0 - js-yaml: 3.15.1 + js-yaml: 3.15.2 resolve-from: 5.0.0 '@istanbuljs/schema@0.1.6': {} @@ -9736,12 +9736,12 @@ snapshots: js-tokens@4.0.0: {} - js-yaml@3.15.1: + js-yaml@3.15.2: dependencies: argparse: 1.0.10 esprima: 4.0.1 - js-yaml@4.3.1: + js-yaml@4.3.2: dependencies: argparse: 2.0.1 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index ea55e7f..05bc161 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -37,8 +37,8 @@ minimumReleaseAgeExclude: - uuid@11.1.1 - brace-expansion@5.0.8 - brace-expansion@5.0.9 - - js-yaml@3.15.1 - - js-yaml@4.3.1 + - js-yaml@3.15.2 + - js-yaml@4.3.2 - nanoid@3.3.18 - postcss@8.5.23 - '@expo/inline-modules@0.1.6' @@ -56,8 +56,8 @@ overrides: brace-expansion@>=4.0.0 <5.0.9: 5.0.9 decode-uri-component@<0.5.0: 0.5.0 esbuild@<=0.24.2: 0.25.0 - js-yaml@>=3.0.0 <3.15.1: 3.15.1 - js-yaml@>=4.0.0 <4.3.1: 4.3.1 + js-yaml@>=3.0.0 <3.15.2: 3.15.2 + js-yaml@>=4.0.0 <4.3.2: 4.3.2 nanoid@<3.3.18: 3.3.18 postcss@<=8.5.22: 8.5.23 uuid@<11.1.1: ^11.1.1