Dave Page 458dec3571 chore(deps): clear vulnerable transitive deps (tar, flatted) (#10049) ...

Resolves open Dependabot security advisories for transitive npm
dependencies that have no direct manifest entry (so Dependabot cannot
auto-open fix PRs for them).

tar (6 x HIGH): an old tar@6.2.1 was pulled in via
ttf2woff2@4.0.5 -> node-gyp@9.4.1 (and node-gyp's
make-fetch-happen@10 -> cacache@16 chain). ttf2woff2 6+ switched to an
ESM/default export that breaks @vusion/webfonts-generator's callable
usage, so rather than bump ttf2woff2 we override its node-gyp to
^11.2.0 via a scoped resolution. That modernises the whole sub-tree
(node-gyp 11, make-fetch-happen 14/15, cacache 19/20) onto tar@7.5.16
while keeping ttf2woff2 at 4.0.5 so webfont generation still works.

flatted (1 x HIGH): bumped 3.4.1 -> 3.4.2 in the Electron runtime
(GHSA-rf6f-7fwh-wjgh).

2026-06-12 14:50:43 +05:30

..

assets

Improve PNG files by optimising them.

2022-10-31 18:06:53 +05:30

src

refactor: Optimize startup time with adaptive server pinging (#9782)

2026-06-09 15:33:51 +05:30

.eslintrc.js

Copyright updated for 2026

2026-01-05 13:33:45 +05:30

.gitignore

Implemented runtime using NWjs to open pgAdmin4 in a standalone window

2021-01-29 13:38:27 +05:30

.yarnrc.yml

Update yarn.lock file and added .yarnrc.yml

2023-10-31 16:27:42 +05:30

dev_config.json.in

Implemented runtime using NWjs to open pgAdmin4 in a standalone window

2021-01-29 13:38:27 +05:30

package.json

Javascript dependency: Bump axios from 1.16.1 to 1.17.0 in /runtime (#10025)

2026-06-09 09:09:48 +01:00

yarn.lock

chore(deps): clear vulnerable transitive deps (tar, flatted) (#10049)

2026-06-12 14:50:43 +05:30