dependabot[bot]
d3a54ebe97
Bump compression from 1.8.1 to 1.8.2
...
Bumps [compression](https://github.com/expressjs/compression ) from 1.8.1 to 1.8.2.
- [Release notes](https://github.com/expressjs/compression/releases )
- [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md )
- [Commits](https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2 )
---
updated-dependencies:
- dependency-name: compression
dependency-version: 1.8.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-08 17:52:51 +00:00
Satoshi Qazi Muhammed
11705910c4
Move vulnerable transitive dependencies to patched versions in range
...
`yarn up -R` for every package with an open Dependabot alert, without
changing any declared range: tar, minimatch, brace-expansion, ip-address,
form-data, bn.js, fast-uri, js-yaml, lodash, postcss, rollup, ws and others.
Of the 117 open alerts, 14 still match a locked version afterwards. All of
them come from @pezkuwi/dev's toolchain (webpack-dev-server 4,
typescript-eslint 6, terser-webpack-plugin, express, sockjs, latest-version)
and need a major upgrade there; none is in the published @pezkuwi/phishing,
which depends only on @pezkuwi/util, util-crypto, x-fetch, tldts and tslib.
2026-10-08 21:50:37 +04:00
Satoshi Qazi Muhammed
866a44380a
Depend on the fixed crypto stack, and let Lock Threads run again
...
@pezkuwi/util, util-crypto and x-fetch now require ^14.0.26, which brings
@pezkuwi/wasm-crypto 7.5.20 in place of 7.5.17. The lockfile moves with it.
axios moves to ^1.20.0 in resolutions, with the lockfile entries that the
Dependabot PR for it (#11 ) left out; without them `yarn install --immutable`
refused to run and every check on that PR failed.
Lock Threads has failed on every scheduled run: lock-threads v4 rejects a
github-token longer than 100 characters, and GitHub's tokens now are. v6.0.2
fixes the validation. Since v5 the action also locks discussions by default;
process-only keeps it to issues and pull requests, as before and as the job's
permissions allow.
2026-10-08 21:50:37 +04:00
Kurdistan Tech Ministry
c44469b8d1
fix: resolve dependabot security vulnerabilities
...
- axios: 0.21.4 -> 1.13.5 (prototype pollution DoS)
- semver: force >=7.5.2 (ReDoS)
2026-02-14 13:08:00 +03:00
Kurdistan Tech Ministry
4b24072c79
fix: add missing yarn.lock to fix CI crosscheck failures
2026-02-14 13:02:53 +03:00
Kurdistan Tech Ministry
edd4214fc3
Update prettier config and package info
2026-01-17 23:19:03 +03:00
Kurdistan Tech Ministry
a4bb93cb33
feat: complete Pezkuwi rebrand
...
- Update phishing URL to phishing.pezkuwichain.io
- Update author to Dijital Kurdistan Tech Inst
- Update README with Pezkuwi project references
- Update IPFS reference to pezkuwichain.io
- Rebrand all package references from @polkadot to @pezkuwi
2026-01-09 04:11:37 +03:00
rajk93
d30285f91d
chore: bump polkadot-js dependencies ( #5573 )
2025-12-09 17:33:49 +05:30
rajk93
d196188fde
chore: bump polkadot dependencies ( #5539 )
2025-11-25 15:31:36 +05:30
rajk93
af4456540b
chore: bump polkadot dependencies ( #5508 )
2025-11-11 12:37:01 +05:30
Valentin Fernandez
6bffcfc74a
bump @polkadot/common deps to v13.5.7 ( #5440 )
2025-10-21 09:20:03 -03:00
Valentin Fernandez
2e1392b2c2
bump @polkadot/common deps ( #5322 )
2025-08-26 14:09:49 -03:00
Valentin Fernandez
9f650faa68
bump polkadot/common to 13.5.5 ( #5284 )
2025-08-12 12:24:46 -03:00
rajk93
2fe17d9ec1
Bump @polkadot/common dependencies to 13.5.4 ( #5244 )
2025-07-29 15:21:17 +05:30
rajk93
28c84b3530
chore: update polkadot dependencies ( #5161 )
2025-07-02 10:01:34 +05:30
Valentin Fernandez
f993da4ba3
bump deps ( #5134 )
2025-06-17 13:50:27 -03:00
Arjun Porwal
35515a4ac7
feat: add tldts dependency for improved hostname parsing ( #5128 )
2025-06-16 10:45:24 +02:00
Valentin Fernandez
49b81b51e2
bump deps ( #5099 )
2025-05-27 10:43:27 -03:00
Valentin Fernandez
04ca185bf7
bump deps ( #5036 )
2025-04-15 10:24:26 -03:00
Tarik Gul
263f2e0baf
Upgrade common to 13.4.3 ( #4957 )
2025-02-18 15:56:33 +02:00
Tarik Gul
c4b1d1221e
Bump yarn to 0.83.2 ( #4887 )
2025-01-17 22:50:19 +02:00
Tarik Gul
bcb51f8705
bump ts ( #4867 )
2025-01-07 18:07:09 +02:00
Tarik Gul
74fbb1dc1d
Upgrade common to 13.3.1 ( #4866 )
2025-01-07 18:02:22 +02:00
Tarik Gul
7219e9e817
Upgrade common to 13.2.3 ( #4748 )
2024-11-12 04:20:03 +02:00
Tarik Gul
b5ab5e04a9
Bump dev to 0.82.1 w/ tslib ( #4747 )
2024-11-12 04:06:17 +02:00
Tarik Gul
a1b84deebc
Upgrade common to 13.2.2 ( #4735 )
2024-10-30 14:43:07 +02:00
Tarik Gul
c562f580c1
Upgrade polkadot common to 13.2.1 ( #4720 )
2024-10-22 22:05:09 +03:00
Tarik Gul
1d61c949fd
Bump dev to 0.81.2 ( #4719 )
2024-10-22 21:55:05 +03:00
Tarik Gul
ef7271b0b4
Bump polkadot/common to 13.0.2 ( #4517 )
2024-07-13 22:34:29 +03:00
Tarik Gul
a83f21049e
Bump @polkadot/dev to 0.79.2 w/ topo sort ( #4428 )
...
* Bump @polkadot/dev to 0.79.1 w/ topo sort
* up to 79.2
2024-05-14 04:52:39 +03:00
Tarik Gul
57b8802a4e
chore(yarn): update yarn to 4.1.0 ( #4268 )
2024-02-17 15:46:54 +02:00
Jaco
a2e9f4aed5
Bump dev deps ( #4106 )
2023-12-19 10:49:06 +02:00
Jaco
7403197503
Bump common deps ( #4103 )
2023-12-18 11:58:47 +02:00
Jaco
7e832289f3
Bump yarn berry, bump deps ( #4101 )
2023-12-18 10:25:15 +02:00
Jaco
0b58becb3d
0.22.1 ( #4043 )
2023-11-18 10:33:09 +02:00
Jaco
50fc745741
Bump TS ( #3988 )
2023-10-15 13:38:48 +03:00
Jaco
7aefe3b16a
Bump deps ( #3827 )
...
* Bump deps
* 0.21.6
2023-08-24 09:17:24 +03:00
Jaco
5366fb62b7
Bump dev deps ( #3812 )
2023-08-20 10:09:37 +03:00
Jaco
9c19e5f16a
Bump deps ( #3802 )
...
* Bump deps
* Cleanups
2023-08-18 10:31:41 +03:00
Jaco
0c484f88d6
Bump deps ( #3540 )
2023-07-06 10:20:24 +03:00
Jaco
71d67d7a58
0.21.5 ( #3447 )
...
* 0.21.5
* CHANGELOG
2023-06-11 10:26:02 +03:00
Jaco
9f397f38ac
Update dev (w/ stricter tsconfig) ( #3444 )
2023-06-09 12:58:28 +03:00
Jaco
1972f644f7
0.21.4 ( #3432 )
2023-06-05 07:51:43 +03:00
Jaco
04fc4abc1e
Bump deps (w/ TS 5.1) ( #3422 )
2023-06-02 13:19:01 +03:00
Jaco
24a29ed16e
Bump dev deps ( #3405 )
2023-05-25 10:26:47 +03:00
Jaco
bbbdaa4490
Bump dev (w/ eslint config adj) ( #3388 )
2023-05-21 12:39:51 +03:00
Jaco
3aa09462b3
Bump dev (w/ eslint config updates) ( #3386 )
2023-05-20 20:39:58 +03:00
Jaco
80c71a5938
Bump dev deps ( #3371 )
2023-05-18 11:21:13 +03:00
Jaco
eb99c88c7a
0.21.3 ( #3351 )
2023-05-13 11:41:14 +03:00
Jaco
0eb78801e8
0.21.2 ( #3309 )
2023-04-29 09:44:41 +03:00