Dependencies: drop unused and dead ones, close the remaining advisories

- yarn.lock refreshed within existing ranges for the open advisories.
- copy-webpack-plugin 11 -> 14 (serialize-javascript 7) and
  terser-webpack-plugin 5.6: build:www output is identical except four
  chunks where terser now emits `a ?? b` for `null == a ? b : a`.
- testcontainers (page-addresses, test-support) and devtron were never
  imported: removed (undici, @fastify/busboy, highlight.js went with
  them).
- The crypto-browserify webpack fallback was dead: build:www is
  byte-identical without it, so the fallback and the dependency are gone
  and a future `crypto` import fails the build instead of shipping a
  polyfill.
- braces resolves to @pezkuwi/braces 3.0.4, which limits nesting depth
  (CVE-2026-93687; no upstream release).
This commit is contained in:
Satoshi Qazi Muhammed authored and SatoshiQaziMuhammed committed 2026-10-10 04:09:47 +04:00
1 parent 0fd88403bd
commit 52da277126
6 files changed
+126 -1447

No files matched your search

+1 -1
View File
@@ -58,7 +58,6 @@
"@types/react-dom": "^18.2.18",
"@types/react-router-dom": "^5.3.3",
"@types/store": "^2.0.5",
"devtron": "^1.4.0",
"dnslink-cloudflare": "^3.0.0",
"extensionless": "^1.9.6",
"i18next-scanner": "^4.4.0",
@@ -105,6 +104,7 @@
"@pezkuwi/x-textencoder": "^14.0.26",
"@pezkuwi/x-ws": "^14.0.26",
"@zondax/ledger-substrate": "1.1.1",
"braces": "npm:@pezkuwi/braces@^3.0.4",
"typescript": "5.5.4"
}
}
+1 -2
View File
@@ -36,8 +36,7 @@
"@types/punycode": "^2.1.3",
"assert": "^2.1.0",
"buffer": "^6.0.3",
"copy-webpack-plugin": "^11.0.0",
"crypto-browserify": "^3.12.0",
"copy-webpack-plugin": "^14.0.0",
"css-loader": "^6.8.1",
"empty": "^0.10.1",
"html-webpack-plugin": "^5.5.4",
-1
View File
@@ -154,7 +154,6 @@ function createWebpack (context, mode = 'production') {
extensions: ['.js', '.jsx', '.mjs', '.ts', '.tsx'],
fallback: {
assert: require.resolve('assert/'),
crypto: require.resolve('crypto-browserify'),
fs: false,
http: require.resolve('stream-http'),
https: require.resolve('https-browserify'),
+1 -2
View File
@@ -20,8 +20,7 @@
"file-saver": "^2.0.5"
},
"devDependencies": {
"@testing-library/react": "^14.1.2",
"testcontainers": "^10.4.0"
"@testing-library/react": "^14.1.2"
},
"peerDependencies": {
"react": "*",
+1 -2
View File
@@ -16,8 +16,7 @@
"type": "module",
"version": "1.0.2-1-x",
"dependencies": {
"@testing-library/react": "^14.1.2",
"testcontainers": "^10.4.0"
"@testing-library/react": "^14.1.2"
},
"devDependencies": {
"@pezkuwi/types-support": "16.5.37",
+122 -1439
View File
File diff suppressed because it is too large. Load diff