From 0e839c8cd6b2d1fb7b01d70dc83b35fb11858ef8 Mon Sep 17 00:00:00 2001 From: Philip Okugbe <16838612+Philipinho@users.noreply.github.com> Date: Tue, 29 Sep 2026 19:44:57 +0100 Subject: [PATCH] chore(deps): package updates (#2528) * chore(deps): fix audit advisories in undici, nodemailer, ip-address and smol-toml * chore: pnpm version update --- Dockerfile | 2 +- apps/server/package.json | 5 ++-- package.json | 2 +- pnpm-lock.yaml | 59 +++++++++++++++++----------------------- pnpm-workspace.yaml | 5 ++-- 5 files changed, 32 insertions(+), 41 deletions(-) diff --git a/Dockerfile b/Dockerfile index 33cac2225..435941465 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,7 @@ FROM node:26-slim AS base LABEL org.opencontainers.image.source="https://github.com/docmost/docmost" -RUN npm install -g pnpm@11.25.0 +RUN npm install -g pnpm@11.28.2 FROM base AS builder diff --git a/apps/server/package.json b/apps/server/package.json index c744fcc56..3c19de8ab 100644 --- a/apps/server/package.json +++ b/apps/server/package.json @@ -97,7 +97,7 @@ "nestjs-cls": "6.2.0", "nestjs-kysely": "3.1.2", "nestjs-pino": "4.6.1", - "nodemailer": "9.1.1", + "nodemailer": "10.0.10", "openid-client": "6.8.2", "otpauth": "9.5.0", "p-limit": "7.3.0", @@ -120,7 +120,7 @@ "tlds": "1.261.0", "tmp-promise": "3.0.3", "typesense": "3.0.5", - "undici": "7.29.0", + "undici": "7.29.1", "ws": "8.21.3", "yauzl": "3.4.0", "zod": "4.3.6" @@ -136,7 +136,6 @@ "@types/jest": "^30.0.0", "@types/mime-types": "^3.0.1", "@types/node": "^25.5.0", - "@types/nodemailer": "^7.0.11", "@types/passport-google-oauth20": "^2.0.17", "@types/passport-jwt": "^4.0.1", "@types/supertest": "^6.0.3", diff --git a/package.json b/package.json index 7ef894cc5..4333fc277 100644 --- a/package.json +++ b/package.json @@ -95,5 +95,5 @@ "packages/*" ] }, - "packageManager": "pnpm@11.25.0" + "packageManager": "pnpm@11.28.2" } diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index de69cd4cc..337fdc353 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -10,7 +10,7 @@ overrides: ws: 8.21.3 dompurify: 3.4.13 mermaid: 11.16.1 - undici: 7.29.0 + undici: 7.29.1 tmp: 0.2.7 nanoid@^3: 3.3.18 lodash-es: 4.18.1 @@ -21,7 +21,7 @@ overrides: yaml@>=2.0.0 <2.8.3: 2.8.3 brace-expansion@^5: 5.0.9 axios: 1.18.1 - ip-address: 10.3.1 + ip-address: 10.5.1 fast-uri: 3.1.7 form-data@>=4.0.0 <4.0.6: 4.0.6 nanoid@>=4.0.0 <5.1.16: 5.1.16 @@ -29,6 +29,7 @@ overrides: '@opentelemetry/core@>=2.0.0 <2.8.0': 2.9.0 js-yaml@>=3.0.0 <3.15.2: 3.15.2 js-yaml@>=4.0.0 <4.3.2: 4.3.2 + smol-toml@<1.7.1: 1.7.1 patchedDependencies: scimmy@1.3.5: 775d80f86830b2c5dd1a250c9802c10f8fc3da3c7898373de5aa0c23993d1673 @@ -694,8 +695,8 @@ importers: specifier: 4.6.1 version: 4.6.1(@nestjs/common@11.2.1(class-transformer@0.5.1)(class-validator@0.15.1)(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.2.2))(pino-http@11.0.0)(pino@10.1.0)(rxjs@7.8.2) nodemailer: - specifier: 9.1.1 - version: 9.1.1 + specifier: 10.0.10 + version: 10.0.10 openid-client: specifier: 6.8.2 version: 6.8.2 @@ -763,8 +764,8 @@ importers: specifier: 3.0.5 version: 3.0.5(@babel/runtime@7.29.2)(debug@4.4.3(supports-color@7.2.0))(supports-color@10.2.2) undici: - specifier: 7.29.0 - version: 7.29.0 + specifier: 7.29.1 + version: 7.29.1 ws: specifier: 8.21.3 version: 8.21.3 @@ -805,9 +806,6 @@ importers: '@types/node': specifier: ^25.5.0 version: 25.5.0 - '@types/nodemailer': - specifier: ^7.0.11 - version: 7.0.11 '@types/passport-google-oauth20': specifier: ^2.0.17 version: 2.0.17 @@ -4633,9 +4631,6 @@ packages: '@types/node@25.5.0': resolution: {integrity: sha512-jp2P3tQMSxWugkCUKLRPVUpGaL5MVFwF8RDuSRztfwgN1wmqJeMSbKlnEtQqU8UrhTmzEmZdu2I6v2dpp7XIxw==} - '@types/nodemailer@7.0.11': - resolution: {integrity: sha512-E+U4RzR2dKrx+u3N4DlsmLaDC6mMZOM/TPROxA0UAPiTgI0y4CEFBmZE+coGWTjakDriRsXG368lNk1u9Q0a2g==} - '@types/oauth@0.9.6': resolution: {integrity: sha512-H9TRCVKBNOhZZmyHLqFt9drPM9l+ShWiqqJijU1B8P3DX3ub84NjxDuy+Hjrz+fEca5Kwip3qPMKNyiLgNJtIA==} @@ -6906,8 +6901,8 @@ packages: resolution: {integrity: sha512-HuEDBTI70aYdx1v6U97SbNx9F1+svQKBDo30o0b9fw055LMepzpOOd0Ccg9Q6tbqmBSJaMuY0fB7yw9/vjBYCA==} engines: {node: '>=12.22.0'} - ip-address@10.3.1: - resolution: {integrity: sha512-1e9d3kb97NHJTIJDZW9rKqW2h6+dFa50Dy0fpPSMQp2ADje5gvKsXmdiK6dwY5t76TaTt5+P5N1Y/LoToIxP6g==} + ip-address@10.5.1: + resolution: {integrity: sha512-EXujUp9jyOI/chPgtqk6uy7fDq8AeCB/WlfEuPg9LN0fN9lzKAKfuDYi60SMhHwgUiEhZvVYsbGZN+RUU1INiA==} engines: {node: '>= 12'} ipaddr.js@1.9.1: @@ -7984,9 +7979,9 @@ packages: resolution: {integrity: sha512-YHs7BmmcsdAI5Ozuf8JZo6PT0mv2GIWC9vMfvUC3dp65M8hn7Ux8CPL+2oBI7juNuj9d0ndhTcznq2ODBps9cQ==} engines: {node: '>=18'} - nodemailer@9.1.1: - resolution: {integrity: sha512-izw9mVKFix6YSnC9eLgV6g1opl9DUlRio9ZNcq+Wu9Ujn2UwF+8Nl0B8nz22kEC+CTZCvinkxwJ0DeFbb6NwcQ==} - engines: {node: '>=6.0.0'} + nodemailer@10.0.10: + resolution: {integrity: sha512-He9XskOFms62SyAKkLu8CcGcYHAo+BSHSsORI8s4PJH8qZgZY4L4lDfvyN0twvmbpyG+eGrxpyBlskj9d9rJ8A==} + engines: {node: '>=20.0.0'} normalize-path@3.0.0: resolution: {integrity: sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==} @@ -9058,8 +9053,8 @@ packages: resolution: {integrity: sha512-VZBmZP8WU3sMOZm1bdgTadsQbcscK0UM8oKxKVBs4XAhUo2Xxzm/OFMGBkPusxw9xL3Uy8LrzEqGqJhclsr0yA==} deprecated: Unsupported - smol-toml@1.6.1: - resolution: {integrity: sha512-dWUG8F5sIIARXih1DTaQAX4SsiTXhInKf1buxdY9DIg4ZYPZK5nGM1VRIYmEbDbsHt7USo99xSLFu5Q1IqTmsg==} + smol-toml@1.7.1: + resolution: {integrity: sha512-PPlsspAZ4jbMBu5DMFhfUGDQLu/vrL4SyBROVS37x8ynnVmFIs1VPBz1Co8Xks3TvpIaZXmU85y4DrQ+UyVFoQ==} engines: {node: '>= 18'} socket.io-adapter@2.5.4: @@ -9570,8 +9565,8 @@ packages: undici-types@7.18.2: resolution: {integrity: sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==} - undici@7.29.0: - resolution: {integrity: sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==} + undici@7.29.1: + resolution: {integrity: sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==} engines: {node: '>=20.18.1'} unicode-canonical-property-names-ecmascript@2.0.0: @@ -10163,7 +10158,7 @@ snapshots: '@ai-sdk/provider': 3.0.16 '@standard-schema/spec': 1.1.0 eventsource-parser: 3.1.1 - undici: 7.29.0 + undici: 7.29.1 zod: 4.3.6 '@ai-sdk/provider@3.0.16': @@ -14362,7 +14357,7 @@ snapshots: '@turbopuffer/turbopuffer@2.8.0': dependencies: pako: 2.2.0 - undici: 7.29.0 + undici: 7.29.1 '@tybys/wasm-util@0.10.2': dependencies: @@ -14640,10 +14635,6 @@ snapshots: dependencies: undici-types: 7.18.2 - '@types/nodemailer@7.0.11': - dependencies: - '@types/node': 25.5.0 - '@types/oauth@0.9.6': dependencies: '@types/node': 25.5.0 @@ -15617,7 +15608,7 @@ snapshots: parse5: 7.3.0 parse5-htmlparser2-tree-adapter: 7.1.0 parse5-parser-stream: 7.1.2 - undici: 7.29.0 + undici: 7.29.1 whatwg-mimetype: 4.0.0 chevrotain-allstar@0.3.1(chevrotain@11.0.3): @@ -16684,7 +16675,7 @@ snapshots: express-rate-limit@8.2.2(express@5.2.1(supports-color@10.2.2)): dependencies: express: 5.2.1(supports-color@10.2.2) - ip-address: 10.3.1 + ip-address: 10.5.1 express@5.2.1(supports-color@10.2.2): dependencies: @@ -17269,7 +17260,7 @@ snapshots: transitivePeerDependencies: - supports-color - ip-address@10.3.1: {} + ip-address@10.5.1: {} ipaddr.js@1.9.1: {} @@ -18418,7 +18409,7 @@ snapshots: node-releases@2.0.54: {} - nodemailer@9.1.1: {} + nodemailer@10.0.10: {} normalize-path@3.0.0: {} @@ -18537,7 +18528,7 @@ snapshots: safe-buffer: 5.2.1 semver: 7.8.4 signal-exit: 3.0.7 - smol-toml: 1.6.1 + smol-toml: 1.7.1 string-width: 4.2.3 string_decoder: 1.3.0 strip-ansi: 6.0.1 @@ -19776,7 +19767,7 @@ snapshots: sliced@1.0.1: {} - smol-toml@1.6.1: {} + smol-toml@1.7.1: {} socket.io-adapter@2.5.4(supports-color@10.2.2): dependencies: @@ -20340,7 +20331,7 @@ snapshots: undici-types@7.18.2: {} - undici@7.29.0: {} + undici@7.29.1: {} unicode-canonical-property-names-ecmascript@2.0.0: {} diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index d75680b42..e3b58a88a 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -9,7 +9,7 @@ overrides: ws: 8.21.3 dompurify: 3.4.13 mermaid: 11.16.1 - undici: 7.29.0 + undici: 7.29.1 tmp: 0.2.7 nanoid@^3: 3.3.18 lodash-es: 4.18.1 @@ -20,7 +20,7 @@ overrides: yaml@>=2.0.0 <2.8.3: 2.8.3 brace-expansion@^5: 5.0.9 axios: 1.18.1 - ip-address: 10.3.1 + ip-address: 10.5.1 fast-uri: 3.1.7 form-data@>=4.0.0 <4.0.6: 4.0.6 nanoid@>=4.0.0 <5.1.16: 5.1.16 @@ -28,6 +28,7 @@ overrides: '@opentelemetry/core@>=2.0.0 <2.8.0': 2.9.0 js-yaml@>=3.0.0 <3.15.2: 3.15.2 js-yaml@>=4.0.0 <4.3.2: 4.3.2 + smol-toml@<1.7.1: 1.7.1 shamefullyHoist: true minimumReleaseAge: 4320 allowBuilds: