mirror of
https://github.com/pezkuwichain/pezkuwi-telegram-miniapp.git
synced 2026-11-01 16:31:09 +00:00
SatoshiQaziMuhammed
909dacd1af
* chore(deps): move vulnerable dependencies to patched versions Direct dev dependencies: vite ^5.4.1 -> ^6.4.3 (5.x has no patched release for the fs.deny bypass and launch-editor advisories; also lifts esbuild from 0.21.5 to 0.25.12), vitest and @vitest/coverage-v8 -> ^4.1.11, postcss -> ^8.5.23. Transitive packages refreshed within their existing ranges: brace-expansion, js-yaml, baseline-browser-mapping, qs, @humanfs/node, browserslist, postcss-selector-parser, nanoid, form-data, @babel/core, picomatch. Overrides with a floor at the patched version where a parent pins an old release: axios ^1.20.0 (tronweb pins 1.15.0) and ws ^8.21.0 (ethers pins 8.17.1). * fix(security): address open code scanning findings - auto-merge: pass workflow_run.head_branch through env instead of interpolating it into the shell script (code injection). - ci, deploy, code-quality: restrict GITHUB_TOKEN to contents: read. - telegram-bot: return a generic error body on failure; the error stays in the function log instead of being echoed to the caller. - p2p-e2e-test.py: stop printing a prefix of the service-role key.
96 lines
3.0 KiB
JSON
96 lines
3.0 KiB
JSON
{
|
|
"name": "pezkuwi-telegram-miniapp",
|
|
"version": "1.0.246",
|
|
"type": "module",
|
|
"description": "Pezkuwichain Telegram Mini App - Forum, Announcements, Rewards",
|
|
"author": "Pezkuwichain Team",
|
|
"license": "MIT",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "node scripts/bump-version.mjs && tsc && vite build",
|
|
"build:major": "node scripts/bump-version.mjs major && tsc && vite build",
|
|
"build:minor": "node scripts/bump-version.mjs minor && tsc && vite build",
|
|
"build:patch": "node scripts/bump-version.mjs patch && tsc && vite build",
|
|
"build:no-bump": "tsc && vite build",
|
|
"preview": "vite preview",
|
|
"lint": "eslint . --ext ts,tsx --report-unused-disable-directives --max-warnings 0",
|
|
"lint:fix": "eslint . --ext ts,tsx --fix",
|
|
"format": "prettier --write \"src/**/*.{ts,tsx,css}\"",
|
|
"typecheck": "tsc --noEmit",
|
|
"test": "vitest",
|
|
"test:run": "vitest run",
|
|
"test:unit": "vitest run --grep 'P2P Fiat Trading E2E' --invert",
|
|
"test:e2e": "./scripts/run-e2e-tests.sh",
|
|
"test:p2p": "vitest run --grep 'P2P'",
|
|
"test:coverage": "vitest run --coverage",
|
|
"prepare": "husky",
|
|
"validate": "npm run typecheck && npm run lint && npm run test:run && npm run build:no-bump",
|
|
"version": "node scripts/bump-version.mjs"
|
|
},
|
|
"lint-staged": {
|
|
"*.{ts,tsx}": [
|
|
"eslint --fix",
|
|
"prettier --write"
|
|
],
|
|
"*.{json,md,css}": [
|
|
"prettier --write"
|
|
]
|
|
},
|
|
"dependencies": {
|
|
"@pezkuwi/api": "^16.5.36",
|
|
"@pezkuwi/keyring": "^14.0.25",
|
|
"@pezkuwi/util-crypto": "^14.0.25",
|
|
"@supabase/supabase-js": "^2.93.1",
|
|
"@tanstack/react-query": "^5.56.2",
|
|
"@ton/crypto": "^3.3.0",
|
|
"@ton/ton": "^16.2.2",
|
|
"@types/qrcode": "^1.5.6",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"date-fns": "^3.6.0",
|
|
"js-sha3": "^0.9.3",
|
|
"lucide-react": "^0.462.0",
|
|
"qrcode": "^1.5.4",
|
|
"react": "^18.3.1",
|
|
"react-dom": "^18.3.1",
|
|
"tailwind-merge": "^2.5.2",
|
|
"tailwindcss-animate": "^1.0.7",
|
|
"vite-plugin-node-polyfills": "^0.25.0"
|
|
},
|
|
"devDependencies": {
|
|
"@testing-library/jest-dom": "^6.9.1",
|
|
"@testing-library/react": "^16.3.2",
|
|
"@types/react": "^18.3.3",
|
|
"@types/react-dom": "^18.3.0",
|
|
"@typescript-eslint/eslint-plugin": "^8.54.0",
|
|
"@typescript-eslint/parser": "^8.54.0",
|
|
"@vitejs/plugin-react-swc": "^3.5.0",
|
|
"@vitest/coverage-v8": "^4.1.11",
|
|
"autoprefixer": "^10.4.20",
|
|
"bip39": "^3.1.0",
|
|
"eslint": "^9.39.2",
|
|
"eslint-config-prettier": "^10.1.8",
|
|
"eslint-plugin-prettier": "^5.5.5",
|
|
"eslint-plugin-react": "^7.37.5",
|
|
"eslint-plugin-react-hooks": "^7.0.1",
|
|
"husky": "^9.1.7",
|
|
"jsdom": "^27.4.0",
|
|
"lint-staged": "^16.2.7",
|
|
"pg": "^8.18.0",
|
|
"postcss": "^8.5.23",
|
|
"prettier": "^3.8.1",
|
|
"tailwindcss": "^3.4.11",
|
|
"tronweb": "^6.2.0",
|
|
"typescript": "^5.5.3",
|
|
"vite": "^6.4.3",
|
|
"vitest": "^4.1.11"
|
|
},
|
|
"engines": {
|
|
"node": ">=18.0.0"
|
|
},
|
|
"overrides": {
|
|
"axios": "^1.20.0",
|
|
"ws": "^8.21.0"
|
|
}
|
|
}
|