mirror of
https://github.com/pezkuwichain/pezkuwi-apps.git
synced 2026-10-20 18:56:30 +00:00
- yarn.lock refreshed within existing ranges for the open advisories. - copy-webpack-plugin 11 -> 14 (serialize-javascript 7) and terser-webpack-plugin 5.6: build:www output is identical except four chunks where terser now emits `a ?? b` for `null == a ? b : a`. - testcontainers (page-addresses, test-support) and devtron were never imported: removed (undici, @fastify/busboy, highlight.js went with them). - The crypto-browserify webpack fallback was dead: build:www is byte-identical without it, so the fallback and the dependency are gone and a future `crypto` import fails the build instead of shipping a polyfill. - braces resolves to @pezkuwi/braces 3.0.4, which limits nesting depth (CVE-2026-93687; no upstream release).