mirror of
https://github.com/owncloud/ocis.git
synced 2026-10-23 23:29:02 +03:00
b9077d96d8
* chore(deps): consolidate dependency and security bumps Dependabot PRs applied: - #12878 qs 6.15.2 -> 6.16.0 (web/web-runtime) - #13013 alpine 3.24.1 -> 3.24.2 - #13061 actions/checkout -> v7.0.1 (missed instance in k8s.yml) - #13062 actions/setup-node -> v7.0.0 (missed instance in k8s.yml) - #13075 simple-git 3.36.0 -> 4.0.1 (security) - #13076 katex 0.16.45 -> 0.18.2+ (security) - #13077 dompurify 3.4.13 -> 3.4.16 (security) - #13079 go deps minor-and-patch group, 18 updates (opa 1.19.0 -> 1.21.1, otel 1.46 -> 1.47, bleve, govips, grpc-gateway, lico, tablewriter, logrus, gjson, x/exp, x/image, genproto, etc.) Skipped (already satisfied on master): #12513, #12624, #12625, #12633 Manual security bumps via pnpm.overrides (no dependabot PR existed): - axios -> 1.20.0 - smol-toml -> 1.9.0 - postcss -> 8.5.23 - postcss-selector-parser -> 7.1.6 - colord -> 2.9.4 - unhead -> 2.1.13 - markdown-it -> 14.3.1 - esbuild -> 0.28.1 - brace-expansion 5.0.11 -> 5.0.12 Not fixable: sprintf-js and elliptic have no patched version released upstream yet; left as-is. go build and pnpm install verified clean. * chore(deps): fix residual transitive vulns found by trivy trivy flagged duplicate/stale resolutions that survived the earlier override pass: dompurify (3.4.12 -> 3.4.16), qs (6.14.2 -> 6.16.0), and fast-uri (3.1.7 -> 3.1.8, CVE-2026-86472). Added/bumped pnpm.overrides accordingly. trivy fs scan of web/pnpm-lock.yaml now clean. * chore(deps): bump reva to bac0e1ee144ab853a81c6b02142032f102dd245a Pins github.com/owncloud/reva/v2 to bac0e1ee144ab853a81c6b02142032f102dd245a, pulling in its go-playground/locales and huandu/xstrings version bumps. Appends this PR to changelog/unreleased/bump-reva.md. go build ./... verified clean after go mod vendor resync. * fix(ci): revert unhead override, breaks web build * revert: keep k8s.yml actions/checkout and setup-node pinned
100 lines
2.8 KiB
JSON
100 lines
2.8 KiB
JSON
{
|
|
"name": "@ownclouders/web-pkg",
|
|
"version": "12.5.0",
|
|
"description": "ownCloud web pkg",
|
|
"license": "Apache-2.0",
|
|
"main": "src/index.ts",
|
|
"types": "types.d.ts",
|
|
"private": false,
|
|
"author": "ownCloud GmbH <devops@owncloud.com>",
|
|
"type": "module",
|
|
"homepage": "https://github.com/owncloud/web/tree/master/packages/web-pkg",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/owncloud/web",
|
|
"directory": "packages/web-pkg"
|
|
},
|
|
"files": [
|
|
"dist/"
|
|
],
|
|
"publishConfig": {
|
|
"directory": "package",
|
|
"linkDirectory": false,
|
|
"exports": {
|
|
".": {
|
|
"import": "./dist/web-pkg.js",
|
|
"require": "./dist/web-pkg.umd.cjs",
|
|
"types": "./dist/types/index.d.ts"
|
|
},
|
|
"./src/testing": {
|
|
"import": "./dist/web-pkg-testing.js",
|
|
"require": "./dist/web-pkg-testing.umd.cjs",
|
|
"types": "./dist/types/testing/index.d.ts"
|
|
}
|
|
}
|
|
},
|
|
"scripts": {
|
|
"vite": "vite",
|
|
"prepublishOnly": "rm -rf ./package && clean-publish && rm -rf package/dist/tests package/dist/*.css && find package && cat package/package.json",
|
|
"postpublish": "rm -rf ./package",
|
|
"test:unit": "NODE_OPTIONS=--unhandled-rejections=throw vitest"
|
|
},
|
|
"dependencies": {
|
|
"@casl/ability": "^6.8.1",
|
|
"@casl/vue": "^2.2.6",
|
|
"@chevrotain/regexp-to-ast": "^11.2.0",
|
|
"@microsoft/fetch-event-source": "^2.0.1",
|
|
"@ownclouders/design-system": "workspace:^",
|
|
"@ownclouders/web-client": "workspace:^",
|
|
"@pdf-lib/fontkit": "^1.1.1",
|
|
"@pinia/testing": "^1.0.3",
|
|
"@sentry/vue": "10.51.0",
|
|
"@uppy/core": "5.2.0",
|
|
"@uppy/drop-target": "4.1.0",
|
|
"@uppy/tus": "5.1.1",
|
|
"@uppy/utils": "7.2.0",
|
|
"@uppy/xhr-upload": "5.2.0",
|
|
"@vavt/cm-extension": "^1.11.2",
|
|
"@vue/shared": "^3.5.43",
|
|
"@vueuse/core": "^14.3.0",
|
|
"deepmerge": "^4.3.1",
|
|
"dompurify": "^3.4.13",
|
|
"emoji-regex": "^10.6.0",
|
|
"filesize": "^11.0.17",
|
|
"fuse.js": "^7.3.0",
|
|
"highlight.js": "^11.11.1",
|
|
"html2canvas": "^1.4.1",
|
|
"katex": "^0.18.2",
|
|
"lodash-es": "^4.18.1",
|
|
"luxon": "^3.7.2",
|
|
"mark.js": "^8.11.1",
|
|
"marked": "^17.0.6",
|
|
"md-editor-v3": "^6.5.0",
|
|
"mermaid": "^11.16.1",
|
|
"oidc-client-ts": "^3.5.0",
|
|
"p-queue": "^9.2.0",
|
|
"password-sheriff": "^2.0.0",
|
|
"pdf-lib": "^1.17.1",
|
|
"pinia": "^3.0.4",
|
|
"portal-vue": "^3.0.0",
|
|
"prettier": "^3.8.1",
|
|
"prismjs": "^1.30.0",
|
|
"qs": "^6.15.2",
|
|
"screenfull": "^6.0.2",
|
|
"uuid": "^14.0.0",
|
|
"vitest-mock-extended": "3.1.1",
|
|
"vue-concurrency": "^5.0.3",
|
|
"vue-router": "^5.0.6",
|
|
"vue3-gettext": "^4.0.1",
|
|
"zod": "^4.3.6"
|
|
},
|
|
"devDependencies": {
|
|
"@types/lodash-es": "4.17.12",
|
|
"@vitest/web-worker": "4.1.5",
|
|
"clean-publish": "6.0.1",
|
|
"vite": "7.3.5",
|
|
"vite-plugin-dts": "4.5.4",
|
|
"vite-plugin-node-polyfills": "0.24.0"
|
|
}
|
|
}
|