FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

security: fix Dependabot alerts in dompurify, astro, and @babel/core by sauravpanda · Pull Request #158 · browser-use/browsercode · GitHub

/ browsercode Public

security: fix Dependabot alerts in dompurify, astro, and @babel/core #158

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
sauravpanda merged 4 commits into from
Aug 26, 2026
Conversation 11 Commits 4 Checks 3 Files changed
Merged

security: fix Dependabot alerts in dompurify, astro, and @babel/core #158

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
e812c25
security: fix Dependabot alerts in dompurify, astro, and @babel/core …
sauravpanda Aug 26, 2026
a990237
security: bump solid-js to 1.9.15 to satisfy @astrojs/solid-js peer r…
sauravpanda Aug 26, 2026
657519a
chore: remove stray solid-js tarballs committed by accident
sauravpanda Aug 26, 2026
67bd12b
security: align @astrojs/markdown-remark with astro 7.1.0's exact peer
sauravpanda Aug 26, 2026
File filter

Filter by extension

Filter by extension .json  (5) .lock  (1) .mjs  (1) .patch  (2) All 4 file types selected
Only manifest files
Deleted files Viewed files
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Unified
Split
Hide whitespace
Diff view
Unified
Split
Hide whitespace
482 changes: 438 additions & 44 deletions bun.lock
Show comments
View file
Open in desktop

Large diffs are not rendered by default.

10 changes: 5 additions & 5 deletions package.json
Show comments
View file
Open in desktop
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@
"@solid-primitives/storage": "4.3.3",
"@tailwindcss/vite": "4.1.11",
"diff": "8.0.2",
"dompurify": "3.4.11",
"dompurify": "3.4.13",
"drizzle-kit": "1.0.0-rc.2",
"drizzle-orm": "1.0.0-rc.2",
"effect": "4.0.0-beta.83",
Expand Down Expand Up @@ -89,7 +89,7 @@
"@solidjs/start": "https://pkg.pr.new/@solidjs/start@dfb2020",
"@sentry/solid": "10.36.0",
"@sentry/vite-plugin": "4.6.0",
"solid-js": "1.9.10",
"solid-js": "1.9.15",
"vite-plugin-solid": "2.11.10",
"@lydell/node-pty": "1.2.0-beta.12"
}
Expand Down Expand Up @@ -139,6 +139,7 @@
"@opentui/core": "catalog:",
"@opentui/keymap": "catalog:",
"@opentui/solid": "catalog:",
"solid-js": "catalog:",
"@types/bun": "catalog:",
"@types/node": "catalog:",
"postcss": "8.5.16",
Expand All @@ -147,15 +148,14 @@
"@opentelemetry/sdk-trace-base": "2.9.0",
"@opentelemetry/resources": "2.9.0",
"@opentelemetry/sdk-trace-node": "2.9.0",
"astro": "6.4.8",
"@astrojs/starlight": "0.40.0"
"astro": "7.1.0",
"@astrojs/starlight": "0.41.7"
},
"patchedDependencies": {
"@ff-labs/fff-bun@0.9.3": "patches/@ff-labs%2Ffff-bun@0.9.3.patch",
"@npmcli/agent@4.0.2": "patches/@npmcli%2Fagent@4.0.2.patch",
"@silvia-odwyer/photon-node@0.3.4": "patches/@silvia-odwyer%2Fphoton-node@0.3.4.patch",
"@standard-community/standard-openapi@0.2.9": "patches/@standard-community%2Fstandard-openapi@0.2.9.patch",
"solid-js@1.9.10": "patches/solid-js@1.9.10.patch",
"@ai-sdk/xai@3.0.102": "patches/@ai-sdk%2Fxai@3.0.102.patch",
"gcp-metadata@8.1.2": "patches/gcp-metadata@8.1.2.patch",
"pacote@21.5.0": "patches/pacote@21.5.0.patch",
Expand Down
2 changes: 1 addition & 1 deletion packages/opencode/package.json
Show comments
View file
Open in desktop
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@
}
},
"devDependencies": {
"@babel/core": "7.28.4",
"@babel/core": "7.29.6",
"@octokit/webhooks-types": "7.6.1",
"@opencode-ai/core": "workspace:*",
"@opencode-ai/http-recorder": "workspace:*",
Expand Down
2 changes: 1 addition & 1 deletion packages/session-ui/package.json
Show comments
View file
Open in desktop
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,7 @@
"@solidjs/meta": "catalog:",
"@solidjs/router": "catalog:",
"diff": "catalog:",
"dompurify": "3.3.1",
"dompurify": "3.4.13",
"fuzzysort": "catalog:",
"katex": "0.16.27",
"luxon": "catalog:",
Expand Down
2 changes: 1 addition & 1 deletion packages/ui/package.json
Show comments
View file
Open in desktop
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Original file line number Diff line number Diff line change
Expand Up @@ -89,7 +89,7 @@
"@solid-primitives/resize-observer": "2.1.3",
"@shikijs/stream": "catalog:",
"diff": "catalog:",
"dompurify": "3.4.11",
"dompurify": "3.4.13",
"fuzzysort": "catalog:",
"katex": "0.16.27",
"luxon": "catalog:",
Expand Down
2 changes: 1 addition & 1 deletion packages/web/astro.config.mjs
Show comments
View file
Open in desktop
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ export default defineConfig({
// when unset (plain `astro build`) this is undefined and the adapter falls
// back to its default config detection.
configPath: process.env.SST_WRANGLER_PATH,
// @astrojs/cloudflare v13 defaults to prerendering in the workerd runtime,
// @astrojs/cloudflare v13+ defaults to prerendering in the workerd runtime,
// which lacks Node built-ins (path/fs/url) that Astro/Zod internals import.
// Prerender in Node instead, matching the previous (v12) behavior.
prerenderEnvironment: "node",
Expand Down
10 changes: 5 additions & 5 deletions packages/web/package.json
Show comments
View file
Open in desktop
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Original file line number Diff line number Diff line change
Expand Up @@ -12,16 +12,16 @@
"astro": "astro"
},
"dependencies": {
"@astrojs/cloudflare": "13.7.0",
"@astrojs/markdown-remark": "7.2.0",
"@astrojs/solid-js": "6.0.1",
"@astrojs/starlight": "0.40.0",
"@astrojs/cloudflare": "14.1.7",
"@astrojs/markdown-remark": "7.2.1",
"@astrojs/solid-js": "7.0.2",
Comment thread
sauravpanda marked this conversation as resolved.
Comment thread
sauravpanda marked this conversation as resolved.
Comment thread
sauravpanda marked this conversation as resolved.
"@astrojs/starlight": "0.41.7",
"@fontsource/ibm-plex-mono": "5.2.5",
"@shikijs/transformers": "3.20.0",
"@solid-primitives/resize-observer": "2.1.5",
"@types/luxon": "catalog:",
"ai": "catalog:",
"astro": "6.4.8",
"astro": "7.1.0",
Comment thread
sauravpanda marked this conversation as resolved.
"diff": "catalog:",
"js-base64": "3.7.7",
"lang-map": "0.4.0",
Expand Down
58 changes: 0 additions & 58 deletions patches/solid-js@1.9.10.patch
Show comments
View file
Open in desktop

This file was deleted.

4 changes: 2 additions & 2 deletions patches/toolbeam-docs-theme@0.4.8.patch
Show comments
View file
Open in desktop
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Original file line number Diff line number Diff line change
Expand Up @@ -8,8 +8,8 @@ index 04cb0f7f1265123ea3319a78527c42155fca7fbf..3d3385ff2131cf9975d8d2619715d08c
"peerDependencies": {
- "@astrojs/starlight": "^0.34.3",
- "astro": "^5.7.13"
+ "@astrojs/starlight": "^0.34.3 || ^0.40.0",
+ "astro": "^5.7.13 || ^6.4.5"
+ "@astrojs/starlight": "^0.34.3 || ^0.40.0 || ^0.41.0",
+ "astro": "^5.7.13 || ^6.4.5 || ^7.0.2"
}
}
\ No newline at end of file
Loading
Back | FazBrowse Home | New Git URL