chore(deps): package updates (#2528)

* chore(deps): fix audit advisories in undici, nodemailer, ip-address and smol-toml

* chore: pnpm version update
This commit is contained in:
Philip Okugbe
2026-09-29 19:44:57 +01:00
committed by GitHub
parent 7bef7b1a00
commit 0e839c8cd6
5 changed files with 32 additions and 41 deletions
+1 -1
View File
@@ -1,7 +1,7 @@
FROM node:26-slim AS base
LABEL org.opencontainers.image.source="https://github.com/docmost/docmost"
RUN npm install -g pnpm@11.25.0
RUN npm install -g pnpm@11.28.2
FROM base AS builder
+2 -3
View File
@@ -97,7 +97,7 @@
"nestjs-cls": "6.2.0",
"nestjs-kysely": "3.1.2",
"nestjs-pino": "4.6.1",
"nodemailer": "9.1.1",
"nodemailer": "10.0.10",
"openid-client": "6.8.2",
"otpauth": "9.5.0",
"p-limit": "7.3.0",
@@ -120,7 +120,7 @@
"tlds": "1.261.0",
"tmp-promise": "3.0.3",
"typesense": "3.0.5",
"undici": "7.29.0",
"undici": "7.29.1",
"ws": "8.21.3",
"yauzl": "3.4.0",
"zod": "4.3.6"
@@ -136,7 +136,6 @@
"@types/jest": "^30.0.0",
"@types/mime-types": "^3.0.1",
"@types/node": "^25.5.0",
"@types/nodemailer": "^7.0.11",
"@types/passport-google-oauth20": "^2.0.17",
"@types/passport-jwt": "^4.0.1",
"@types/supertest": "^6.0.3",
+1 -1
View File
@@ -95,5 +95,5 @@
"packages/*"
]
},
"packageManager": "pnpm@11.25.0"
"packageManager": "pnpm@11.28.2"
}
+25 -34
View File
@@ -10,7 +10,7 @@ overrides:
ws: 8.21.3
dompurify: 3.4.13
mermaid: 11.16.1
undici: 7.29.0
undici: 7.29.1
tmp: 0.2.7
nanoid@^3: 3.3.18
lodash-es: 4.18.1
@@ -21,7 +21,7 @@ overrides:
yaml@>=2.0.0 <2.8.3: 2.8.3
brace-expansion@^5: 5.0.9
axios: 1.18.1
ip-address: 10.3.1
ip-address: 10.5.1
fast-uri: 3.1.7
form-data@>=4.0.0 <4.0.6: 4.0.6
nanoid@>=4.0.0 <5.1.16: 5.1.16
@@ -29,6 +29,7 @@ overrides:
'@opentelemetry/core@>=2.0.0 <2.8.0': 2.9.0
js-yaml@>=3.0.0 <3.15.2: 3.15.2
js-yaml@>=4.0.0 <4.3.2: 4.3.2
smol-toml@<1.7.1: 1.7.1
patchedDependencies:
scimmy@1.3.5: 775d80f86830b2c5dd1a250c9802c10f8fc3da3c7898373de5aa0c23993d1673
@@ -694,8 +695,8 @@ importers:
specifier: 4.6.1
version: 4.6.1(@nestjs/common@11.2.1(class-transformer@0.5.1)(class-validator@0.15.1)(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.2.2))(pino-http@11.0.0)(pino@10.1.0)(rxjs@7.8.2)
nodemailer:
specifier: 9.1.1
version: 9.1.1
specifier: 10.0.10
version: 10.0.10
openid-client:
specifier: 6.8.2
version: 6.8.2
@@ -763,8 +764,8 @@ importers:
specifier: 3.0.5
version: 3.0.5(@babel/runtime@7.29.2)(debug@4.4.3(supports-color@7.2.0))(supports-color@10.2.2)
undici:
specifier: 7.29.0
version: 7.29.0
specifier: 7.29.1
version: 7.29.1
ws:
specifier: 8.21.3
version: 8.21.3
@@ -805,9 +806,6 @@ importers:
'@types/node':
specifier: ^25.5.0
version: 25.5.0
'@types/nodemailer':
specifier: ^7.0.11
version: 7.0.11
'@types/passport-google-oauth20':
specifier: ^2.0.17
version: 2.0.17
@@ -4633,9 +4631,6 @@ packages:
'@types/node@25.5.0':
resolution: {integrity: sha512-jp2P3tQMSxWugkCUKLRPVUpGaL5MVFwF8RDuSRztfwgN1wmqJeMSbKlnEtQqU8UrhTmzEmZdu2I6v2dpp7XIxw==}
'@types/nodemailer@7.0.11':
resolution: {integrity: sha512-E+U4RzR2dKrx+u3N4DlsmLaDC6mMZOM/TPROxA0UAPiTgI0y4CEFBmZE+coGWTjakDriRsXG368lNk1u9Q0a2g==}
'@types/oauth@0.9.6':
resolution: {integrity: sha512-H9TRCVKBNOhZZmyHLqFt9drPM9l+ShWiqqJijU1B8P3DX3ub84NjxDuy+Hjrz+fEca5Kwip3qPMKNyiLgNJtIA==}
@@ -6906,8 +6901,8 @@ packages:
resolution: {integrity: sha512-HuEDBTI70aYdx1v6U97SbNx9F1+svQKBDo30o0b9fw055LMepzpOOd0Ccg9Q6tbqmBSJaMuY0fB7yw9/vjBYCA==}
engines: {node: '>=12.22.0'}
ip-address@10.3.1:
resolution: {integrity: sha512-1e9d3kb97NHJTIJDZW9rKqW2h6+dFa50Dy0fpPSMQp2ADje5gvKsXmdiK6dwY5t76TaTt5+P5N1Y/LoToIxP6g==}
ip-address@10.5.1:
resolution: {integrity: sha512-EXujUp9jyOI/chPgtqk6uy7fDq8AeCB/WlfEuPg9LN0fN9lzKAKfuDYi60SMhHwgUiEhZvVYsbGZN+RUU1INiA==}
engines: {node: '>= 12'}
ipaddr.js@1.9.1:
@@ -7984,9 +7979,9 @@ packages:
resolution: {integrity: sha512-YHs7BmmcsdAI5Ozuf8JZo6PT0mv2GIWC9vMfvUC3dp65M8hn7Ux8CPL+2oBI7juNuj9d0ndhTcznq2ODBps9cQ==}
engines: {node: '>=18'}
nodemailer@9.1.1:
resolution: {integrity: sha512-izw9mVKFix6YSnC9eLgV6g1opl9DUlRio9ZNcq+Wu9Ujn2UwF+8Nl0B8nz22kEC+CTZCvinkxwJ0DeFbb6NwcQ==}
engines: {node: '>=6.0.0'}
nodemailer@10.0.10:
resolution: {integrity: sha512-He9XskOFms62SyAKkLu8CcGcYHAo+BSHSsORI8s4PJH8qZgZY4L4lDfvyN0twvmbpyG+eGrxpyBlskj9d9rJ8A==}
engines: {node: '>=20.0.0'}
normalize-path@3.0.0:
resolution: {integrity: sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==}
@@ -9058,8 +9053,8 @@ packages:
resolution: {integrity: sha512-VZBmZP8WU3sMOZm1bdgTadsQbcscK0UM8oKxKVBs4XAhUo2Xxzm/OFMGBkPusxw9xL3Uy8LrzEqGqJhclsr0yA==}
deprecated: Unsupported
smol-toml@1.6.1:
resolution: {integrity: sha512-dWUG8F5sIIARXih1DTaQAX4SsiTXhInKf1buxdY9DIg4ZYPZK5nGM1VRIYmEbDbsHt7USo99xSLFu5Q1IqTmsg==}
smol-toml@1.7.1:
resolution: {integrity: sha512-PPlsspAZ4jbMBu5DMFhfUGDQLu/vrL4SyBROVS37x8ynnVmFIs1VPBz1Co8Xks3TvpIaZXmU85y4DrQ+UyVFoQ==}
engines: {node: '>= 18'}
socket.io-adapter@2.5.4:
@@ -9570,8 +9565,8 @@ packages:
undici-types@7.18.2:
resolution: {integrity: sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==}
undici@7.29.0:
resolution: {integrity: sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==}
undici@7.29.1:
resolution: {integrity: sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==}
engines: {node: '>=20.18.1'}
unicode-canonical-property-names-ecmascript@2.0.0:
@@ -10163,7 +10158,7 @@ snapshots:
'@ai-sdk/provider': 3.0.16
'@standard-schema/spec': 1.1.0
eventsource-parser: 3.1.1
undici: 7.29.0
undici: 7.29.1
zod: 4.3.6
'@ai-sdk/provider@3.0.16':
@@ -14362,7 +14357,7 @@ snapshots:
'@turbopuffer/turbopuffer@2.8.0':
dependencies:
pako: 2.2.0
undici: 7.29.0
undici: 7.29.1
'@tybys/wasm-util@0.10.2':
dependencies:
@@ -14640,10 +14635,6 @@ snapshots:
dependencies:
undici-types: 7.18.2
'@types/nodemailer@7.0.11':
dependencies:
'@types/node': 25.5.0
'@types/oauth@0.9.6':
dependencies:
'@types/node': 25.5.0
@@ -15617,7 +15608,7 @@ snapshots:
parse5: 7.3.0
parse5-htmlparser2-tree-adapter: 7.1.0
parse5-parser-stream: 7.1.2
undici: 7.29.0
undici: 7.29.1
whatwg-mimetype: 4.0.0
chevrotain-allstar@0.3.1(chevrotain@11.0.3):
@@ -16684,7 +16675,7 @@ snapshots:
express-rate-limit@8.2.2(express@5.2.1(supports-color@10.2.2)):
dependencies:
express: 5.2.1(supports-color@10.2.2)
ip-address: 10.3.1
ip-address: 10.5.1
express@5.2.1(supports-color@10.2.2):
dependencies:
@@ -17269,7 +17260,7 @@ snapshots:
transitivePeerDependencies:
- supports-color
ip-address@10.3.1: {}
ip-address@10.5.1: {}
ipaddr.js@1.9.1: {}
@@ -18418,7 +18409,7 @@ snapshots:
node-releases@2.0.54: {}
nodemailer@9.1.1: {}
nodemailer@10.0.10: {}
normalize-path@3.0.0: {}
@@ -18537,7 +18528,7 @@ snapshots:
safe-buffer: 5.2.1
semver: 7.8.4
signal-exit: 3.0.7
smol-toml: 1.6.1
smol-toml: 1.7.1
string-width: 4.2.3
string_decoder: 1.3.0
strip-ansi: 6.0.1
@@ -19776,7 +19767,7 @@ snapshots:
sliced@1.0.1: {}
smol-toml@1.6.1: {}
smol-toml@1.7.1: {}
socket.io-adapter@2.5.4(supports-color@10.2.2):
dependencies:
@@ -20340,7 +20331,7 @@ snapshots:
undici-types@7.18.2: {}
undici@7.29.0: {}
undici@7.29.1: {}
unicode-canonical-property-names-ecmascript@2.0.0: {}
+3 -2
View File
@@ -9,7 +9,7 @@ overrides:
ws: 8.21.3
dompurify: 3.4.13
mermaid: 11.16.1
undici: 7.29.0
undici: 7.29.1
tmp: 0.2.7
nanoid@^3: 3.3.18
lodash-es: 4.18.1
@@ -20,7 +20,7 @@ overrides:
yaml@>=2.0.0 <2.8.3: 2.8.3
brace-expansion@^5: 5.0.9
axios: 1.18.1
ip-address: 10.3.1
ip-address: 10.5.1
fast-uri: 3.1.7
form-data@>=4.0.0 <4.0.6: 4.0.6
nanoid@>=4.0.0 <5.1.16: 5.1.16
@@ -28,6 +28,7 @@ overrides:
'@opentelemetry/core@>=2.0.0 <2.8.0': 2.9.0
js-yaml@>=3.0.0 <3.15.2: 3.15.2
js-yaml@>=4.0.0 <4.3.2: 4.3.2
smol-toml@<1.7.1: 1.7.1
shamefullyHoist: true
minimumReleaseAge: 4320
allowBuilds: