mirror of
https://github.com/zitadel/zitadel.git
synced 2026-08-19 01:14:48 -05:00
Max Peintner
b27fdfc28c
# Which Problems Are Solved Fixes multiple high-severity Dependabot alerts for transitive dependencies (axios, protobufjs, systeminformation, tmp, fast-uri, @babel/plugin-transform-modules-systemjs). # How the Problems Are Solved **Direct dependency updates:** - `@opentelemetry/*` 0.217 → 0.218 in login (new otlp-transformer dropped protobufjs as direct dep) - `posthog-js` 1.374 → 1.380 in console (dropped the OpenTelemetry/protobufjs chain entirely) **pnpm overrides** for remaining transitive deps that can't be updated via their parents (all pulled by the gRPC stack, Cypress, karma, nx, or ajv): - `axios` → ≥1.17.0 (prototype pollution, proxy bypass) - `protobufjs` → ≥7.5.7 / ≥8.0.2 (code injection, prototype pollution, DoS) - `systeminformation` → ≥5.31.6 (command injection) - `tmp` → ≥0.2.6 (path traversal) - `fast-uri` → ≥3.1.2 (path traversal, host confusion) **Benchmark:** refreshed `package-lock.json` to resolve @babel and fast-uri alerts.
103 lines
3.8 KiB
JSON
103 lines
3.8 KiB
JSON
{
|
|
"name": "@zitadel/console",
|
|
"packageManager": "pnpm@10.28.2+sha512.41872f037ad22f7348e3b1debbaf7e867cfd448f2726d9cf74c08f19507c31d2c8e7a11525b983febc2df640b5438dee6023ebb1f84ed43cc2d654d2bc326264",
|
|
"scripts": {
|
|
"ng": "ng",
|
|
"dev": "wait-on --verbose --interval 2000 --simultaneous 1 --timeout 30m ${ENVIRONMENT_JSON_URL} && node prebuild.development.js && ng serve --host=${DEVCONTAINER_LISTEN_HOST:-127.0.0.1}",
|
|
"build": "ng build --configuration production --base-href=/ui/console/",
|
|
"lint-check-ng": "eslint .",
|
|
"lint-check-prettier": "prettier --check src",
|
|
"lint-fix": "prettier --write src",
|
|
"generate": "pnpm exec buf generate ../proto --include-imports --include-wkt",
|
|
"clean": "rm -rf dist .angular node_modules src/app/proto/generated"
|
|
},
|
|
"private": true,
|
|
"dependencies": {
|
|
"@angular/animations": "^21.2.13",
|
|
"@angular/cdk": "^21.2.11",
|
|
"@angular/common": "^21.2.13",
|
|
"@angular/compiler": "^21.2.13",
|
|
"@angular/core": "^21.2.13",
|
|
"@angular/forms": "^21.2.13",
|
|
"@angular/material": "^21.2.11",
|
|
"@angular/material-moment-adapter": "^21.2.11",
|
|
"@angular/platform-browser": "^21.2.13",
|
|
"@angular/platform-browser-dynamic": "^21.2.13",
|
|
"@angular/router": "^21.2.13",
|
|
"@angular/service-worker": "^21.2.13",
|
|
"@bufbuild/protobuf": "^2.12.0",
|
|
"@connectrpc/connect": "^2.1.1",
|
|
"@connectrpc/connect-web": "^2.1.1",
|
|
"@ctrl/ngx-codemirror": "^7.0.0",
|
|
"@fortawesome/angular-fontawesome": "^4.0.0",
|
|
"@fortawesome/fontawesome-svg-core": "^7.2.0",
|
|
"@fortawesome/free-brands-svg-icons": "^7.2.0",
|
|
"@netlify/build-info": "^10.5.1",
|
|
"@ng-icons/core": "^33.2.2",
|
|
"@ng-icons/heroicons": "^33.2.2",
|
|
"@ngx-translate/core": "^17.0.0",
|
|
"@tanstack/angular-query-experimental": "^5.100.11",
|
|
"angular-oauth2-oidc": "^20.0.2",
|
|
"angularx-qrcode": "^21.0.5",
|
|
"buffer": "^6.0.3",
|
|
"codemirror": "^5.65.21",
|
|
"file-saver": "^2.0.5",
|
|
"flag-icons": "^7.5.0",
|
|
"google-protobuf": "^4.0.2",
|
|
"grpc-web": "^2.0.2",
|
|
"i18n-iso-countries": "^7.14.0",
|
|
"libphonenumber-js": "^1.13.2",
|
|
"material-design-icons-iconfont": "^6.7.0",
|
|
"moment": "^2.30.1",
|
|
"ngx-color": "^10.1.0",
|
|
"opentype.js": "^1.3.4",
|
|
"posthog-js": "^1.380.1",
|
|
"rxjs": "^7.8.2",
|
|
"tinycolor2": "^1.6.0",
|
|
"tslib": "^2.8.1",
|
|
"uuid": "^14.0.0",
|
|
"zone.js": "~0.16.2"
|
|
},
|
|
"devDependencies": {
|
|
"@angular-eslint/eslint-plugin": "21.4.0",
|
|
"@angular-eslint/eslint-plugin-template": "21.4.0",
|
|
"@angular-eslint/template-parser": "21.4.0",
|
|
"@angular/build": "^21.2.11",
|
|
"@angular/cli": "^21.2.11",
|
|
"@angular/compiler-cli": "^21.2.13",
|
|
"@angular/language-service": "^21.2.13",
|
|
"@eslint/js": "^10.0.1",
|
|
"@tailwindcss/postcss": "^4.3.0",
|
|
"@types/file-saver": "^2.0.7",
|
|
"@types/google-protobuf": "^3.15.12",
|
|
"@types/jasmine": "~5.1.15",
|
|
"@types/jasminewd2": "~2.0.13",
|
|
"@types/node": "^25.9.1",
|
|
"@types/opentype.js": "^1.3.9",
|
|
"@types/qrcode": "^1.5.6",
|
|
"@types/uuid": "^11.0.0",
|
|
"@typescript-eslint/eslint-plugin": "^8.59.4",
|
|
"@typescript-eslint/parser": "^8.59.4",
|
|
"@zitadel/client": "workspace:*",
|
|
"@zitadel/proto": "workspace:*",
|
|
"eslint": "^10.4.0",
|
|
"eslint-config-prettier": "^10.1.8",
|
|
"eslint-import-resolver-typescript": "^4.4.4",
|
|
"eslint-plugin-import": "^2.32.0",
|
|
"globals": "^17.6.0",
|
|
"jasmine-core": "~5.12.1",
|
|
"jasmine-spec-reporter": "~7.0.0",
|
|
"karma": "^6.4.4",
|
|
"karma-chrome-launcher": "^3.2.0",
|
|
"karma-coverage": "^2.2.1",
|
|
"karma-coverage-istanbul-reporter": "^3.0.3",
|
|
"karma-jasmine": "^5.1.0",
|
|
"karma-jasmine-html-reporter": "^2.2.0",
|
|
"postcss": "^8.5.15",
|
|
"prettier": "^3.8.3",
|
|
"prettier-plugin-organize-imports": "^4.3.0",
|
|
"tailwindcss": "^4.3.0",
|
|
"typescript": "5.9.2"
|
|
}
|
|
}
|