Skip to content

chore: #105 dependency and security upgrades (pnpm 11, Node 24) #108

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
th-huber wants to merge 12 commits into
base: main
Choose a base branch
from
+2,475 −2,048
Open

chore: #105 dependency and security upgrades (pnpm 11, Node 24) #108

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
996ea19
chore: #105 updated to pnpm@11 this also updated dependencies
th-huber Jul 24, 2026
76ada1f
chore: #105 added onlyBuiltDependencies to stop pnpms security warning
th-huber Jul 16, 2026
5bf8fc5
chore: #105 upgrade nodemailer to 9.0.3 for security fixes
th-huber Jul 24, 2026
bd8b12a
chore: #105 override postcss to >=8.5.12 for security fixes
th-huber Jul 24, 2026
d297516
chore: #105 override exceljs uuid to >=11.1.1 for security fixes
th-huber Jul 24, 2026
def016a
chore: #105 upgrade adm-zip to 0.6.0 for security fixes
th-huber Jul 24, 2026
d923170
chore: #105 ignore find-my-way GHSA-c96f-x56v-gq3h in audit
th-huber Jul 24, 2026
841268b
chore: #105 ignore sharp GHSA-f88m-g3jw-g9cj in audit
th-huber Jul 24, 2026
4062280
chore: #105 Updated to node 24 in the docker file and for volta
th-huber Jul 24, 2026
356fad3
fix(auth): #105 omit sensitive user fields from JWT session payload
th-huber Jul 24, 2026
db6592d
fix(docker): #105 copy pnpm-workspace.yaml for frozen install
th-huber Jul 24, 2026
262063c
chore: #105 Updated pnpm 11.17.0 -> 11.18.0
th-huber Aug 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions docker/app/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
#
# Node.js base image
#
FROM node:22-slim AS base
FROM node:24-slim AS base
ENV PNPM_HOME="/pnpm"
ENV PATH="$PNPM_HOME:$PATH"
RUN corepack enable
Expand All @@ -25,7 +25,7 @@ FROM base AS installer

WORKDIR /app

COPY package.json pnpm-lock.yaml .
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml .

RUN pnpm install --frozen-lockfile

Expand Down
115 changes: 57 additions & 58 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,104 +26,103 @@
"docker:dev:up": "docker compose -f docker/compose.dev.yml --project-directory . up --no-attach mailpit"
},
"dependencies": {
"@auth/core": "^0.41.2",
"@auth/prisma-adapter": "^2.11.2",
"@auth/core": "^0.41.3",
"@auth/prisma-adapter": "^2.11.3",
"@craftjs/core": "^0.2.12",
"@craftjs/layers": "^0.2.7",
"@dnd-kit/core": "^6.3.1",
"@dnd-kit/sortable": "^10.0.0",
"@dnd-kit/utilities": "^3.2.2",
"@faker-js/faker": "^9.9.0",
"@hookform/resolvers": "^5.2.2",
"@next-safe-action/adapter-react-hook-form": "^2.0.6",
"@prisma/adapter-pg": "^7.8.0",
"@prisma/client": "^7.8.0",
"@prisma/client-runtime-utils": "^7.8.0",
"@radix-ui/react-alert-dialog": "^1.1.15",
"@radix-ui/react-checkbox": "^1.3.3",
"@radix-ui/react-dialog": "^1.1.15",
"@radix-ui/react-dropdown-menu": "^2.1.16",
"@radix-ui/react-label": "^2.1.8",
"@radix-ui/react-popover": "^1.1.15",
"@radix-ui/react-radio-group": "^1.3.8",
"@radix-ui/react-select": "^2.2.6",
"@radix-ui/react-separator": "^1.1.8",
"@radix-ui/react-slot": "^1.2.4",
"@radix-ui/react-switch": "^1.2.6",
"@radix-ui/react-tabs": "^1.1.13",
"@radix-ui/react-toggle-group": "^1.1.11",
"@radix-ui/react-tooltip": "^1.2.8",
"@hookform/resolvers": "^5.4.0",
"@next-safe-action/adapter-react-hook-form": "^2.1.0",
"@prisma/adapter-pg": "^7.9.0",
"@prisma/client": "^7.9.0",
"@prisma/client-runtime-utils": "^7.9.0",
"@radix-ui/react-alert-dialog": "^1.1.21",
"@radix-ui/react-checkbox": "^1.3.9",
"@radix-ui/react-dialog": "^1.1.21",
"@radix-ui/react-dropdown-menu": "^2.1.22",
"@radix-ui/react-label": "^2.1.13",
"@radix-ui/react-popover": "^1.1.21",
"@radix-ui/react-radio-group": "^1.4.5",
"@radix-ui/react-select": "^2.3.5",
"@radix-ui/react-separator": "^1.1.13",
"@radix-ui/react-slot": "^1.3.1",
"@radix-ui/react-switch": "^1.3.5",
"@radix-ui/react-tabs": "^1.1.19",
"@radix-ui/react-toggle-group": "^1.1.17",
"@radix-ui/react-tooltip": "^1.2.14",
"@react-email/components": "^1.0.12",
"@react-email/render": "^2.0.8",
"@react-email/render": "^2.1.0",
"@react-pdf/renderer": "^4.5.1",
"@tanstack/react-form": "^1.32.0",
"@tanstack/react-query": "^5.100.11",
"@tanstack/react-query-devtools": "^5.100.11",
"@tanstack/react-form": "^1.33.2",
"@tanstack/react-query": "^5.101.4",
"@tanstack/react-query-devtools": "^5.101.4",
"@tanstack/react-table": "^8.21.3",
"@tiptap/core": "^3.23.5",
"@tiptap/extension-bubble-menu": "^3.23.5",
"@tiptap/extension-link": "^3.23.5",
"@tiptap/extension-underline": "^3.23.5",
"@tiptap/pm": "^3.23.5",
"@tiptap/react": "^3.23.5",
"@tiptap/starter-kit": "^3.23.5",
"adm-zip": "^0.5.17",
"@tiptap/core": "^3.28.0",
"@tiptap/extension-bubble-menu": "^3.28.0",
"@tiptap/extension-link": "^3.28.0",
"@tiptap/extension-underline": "^3.28.0",
"@tiptap/pm": "^3.28.0",
"@tiptap/react": "^3.28.0",
"@tiptap/starter-kit": "^3.28.0",
"adm-zip": "^0.6.0",
"bcryptjs": "^3.0.3",
"chart.js": "^4.5.1",
"class-variance-authority": "^0.7.1",
"clsx": "^2.1.1",
"cmdk": "^1.1.1",
"date-fns": "^4.2.1",
"date-fns": "^4.4.0",
"exceljs": "^4.4.0",
"framer-motion": "^12.39.0",
"isomorphic-dompurify": "^3.15.0",
"framer-motion": "^12.42.2",
"isomorphic-dompurify": "^3.19.0",
"lodash": "^4.18.1",
"lodash.debounce": "^4.0.8",
"lucide-react": "^0.563.0",
"moment": "^2.30.1",
"next": "16.1.6",
"next-auth": "5.0.0-beta.30",
"next-intl": "^4.12.0",
"next-safe-action": "^8.5.2",
"next": "16.2.11",
"next-auth": "5.0.0-beta.32",
"next-intl": "4.13.3",
"next-safe-action": "^8.6.0",
"next-themes": "^0.4.6",
"nodemailer": "^7.0.7",
"nuqs": "^2.8.9",
"pg": "^8.21.0",
"react": "^19.2.6",
"nodemailer": "^9.0.3",
"nuqs": "^2.9.1",
"pg": "^8.22.0",
"react": "^19.2.8",
"react-chartjs-2": "^5.3.1",
"react-contenteditable": "^3.3.7",
"react-day-picker": "^9.14.0",
"react-dom": "^19.2.6",
"react-dom": "^19.2.8",
"react-girocode": "^2.0.1",
"react-hook-form": "^7.76.0",
"react-hook-form": "^7.82.0",
"react-pdf-html": "^2.1.5",
"sonner": "^2.0.7",
"tailwind-merge": "^3.6.0",
"tailwindcss-animate": "^1.0.7",
"tw-animate-css": "^1.4.0",
"use-breakpoint": "^4.0.10",
"zod": "^4.4.3",
"zustand": "^5.0.13"
"zustand": "^5.0.14"
},
"devDependencies": {
"@biomejs/biome": "^2.4.15",
"@tailwindcss/postcss": "^4.3.0",
"@types/adm-zip": "^0.5.8",
"@biomejs/biome": "^2.5.5",
"@tailwindcss/postcss": "^4.3.3",
"@types/lodash": "^4.17.24",
"@types/lodash.debounce": "^4.0.9",
"@types/node": "^25.9.1",
"@types/nodemailer": "^7.0.11",
"@types/react": "^19.2.15",
"@types/node": "^25.9.5",
"@types/nodemailer": "^8.0.1",
"@types/react": "^19.2.17",
"@types/react-dom": "^19.2.3",
"babel-plugin-react-compiler": "^1.0.0",
"dotenv": "^17.4.2",
"prisma": "^7.8.0",
"tailwindcss": "^4.3.0",
"tsx": "^4.22.3",
"prisma": "^7.9.0",
"tailwindcss": "^4.3.3",
"tsx": "^4.23.1",
"typescript": "^5.9.3"
},
"volta": {
"node": "22.14.0"
"node": "24.18.0"
},
"packageManager": "pnpm@10.7.1+sha512.2d92c86b7928dc8284f53494fb4201f983da65f0fb4f0d40baafa5cf628fa31dae3e5968f12466f17df7e97310e30f343a648baea1b9b350685dafafffdf5808"
"packageManager": "pnpm@11.18.0+sha512.33d83c77da82f49fba836925c6f1b841181ec3132b670639bd012f7075f5c7cf634c5f870147c19aae7478fac01df09d8892e880454896edd23ee9b33757563c"
}
Loading