From d802eeefc08d34a2a1d7ad44700bd6285bc3389c Mon Sep 17 00:00:00 2001
From: SatoshiQaziMuhammed <info@pezkuwichain.io>
Date: Wed, 4 Nov 2026 23:34:41 +0400
Subject: [PATCH] build(deps): bump vite to 6.4.5, qs to 6.16.1 and
 postcss-selector-parser to 6.1.5 (#67)

sign: vite 6.4.5 fixes GHSA-8g5g-mxqh-grgj (dev server fs.deny bypass,
6.4.4 only); qs 6.16.1 comes in through the url polyfill.
web: qs 6.16.1, and an override pins the postcss-selector-parser that
@tailwindcss/typography requires exactly (6.0.10) to 6.1.5, which fixes
GHSA-rj75-hqrm-r3gf.
---
 sign/package-lock.json | 14 +++++++-------
 sign/package.json      |  2 +-
 web/package-lock.json  | 40 ++++++----------------------------------
 web/package.json       |  5 ++++-
 4 files changed, 18 insertions(+), 43 deletions(-)

diff --git a/sign/package-lock.json b/sign/package-lock.json
index 3b0e074b..b33d3956 100644
--- a/sign/package-lock.json
+++ b/sign/package-lock.json
@@ -24,7 +24,7 @@
         "@types/react-dom": "^18.3.1",
         "@vitejs/plugin-react-swc": "^3.5.0",
         "typescript": "^5.6.3",
-        "vite": "^6.4.4",
+        "vite": "^6.4.5",
         "vite-plugin-node-polyfills": "^0.25.0"
       }
     },
@@ -3575,9 +3575,9 @@
       "license": "MIT"
     },
     "node_modules/qs": {
-      "version": "6.16.0",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.0.tgz",
-      "integrity": "sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==",
+      "version": "6.16.1",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.1.tgz",
+      "integrity": "sha512-5Px6J7rfHBAGUhNQ3es4YzcOdBBw0SDcVtThJml4RdnKw4tKs2epA0kPZ+K8X+WiHktT93RHVcQ/3ym5aTCgtg==",
       "dev": true,
       "license": "BSD-3-Clause",
       "dependencies": {
@@ -4180,9 +4180,9 @@
       "license": "MIT"
     },
     "node_modules/vite": {
-      "version": "6.4.4",
-      "resolved": "https://registry.npmjs.org/vite/-/vite-6.4.4.tgz",
-      "integrity": "sha512-xGjU/SyjeNyb0E4KxXBvYz/1C+3JXuujvf2hXNOtnlcE+58o5ajd9N2/n2VhkiJvpCP2qQasnUpx5PXNeI+p1Q==",
+      "version": "6.4.5",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-6.4.5.tgz",
+      "integrity": "sha512-4enwjFfi4IwtEh0w+jPzpLVOFQiPHmmzPxcHXQOyEur47o6u0jE573DmGpjA+7irXoMLYRZD5ZaFUEneS3abPg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
diff --git a/sign/package.json b/sign/package.json
index 38c23c96..f6966727 100644
--- a/sign/package.json
+++ b/sign/package.json
@@ -26,7 +26,7 @@
     "@types/react-dom": "^18.3.1",
     "@vitejs/plugin-react-swc": "^3.5.0",
     "typescript": "^5.6.3",
-    "vite": "^6.4.4",
+    "vite": "^6.4.5",
     "vite-plugin-node-polyfills": "^0.25.0"
   }
 }
diff --git a/web/package-lock.json b/web/package-lock.json
index 35eb9b27..21502910 100644
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -11035,24 +11035,10 @@
         "postcss": "^8.2.14"
       }
     },
-    "node_modules/postcss-nested/node_modules/postcss-selector-parser": {
-      "version": "6.1.4",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.4.tgz",
-      "integrity": "sha512-bIoJLOmjCO1S9XdY/DcnR5hJxvrDir1PbGChrzXG3vw0/FOliy/fA3dmdhQ441kah4gKv+TwckGzex6wNS5cnQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/postcss-selector-parser": {
-      "version": "6.0.10",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.0.10.tgz",
-      "integrity": "sha512-IQ7TZdoaqbT+LCpShg46jnZVlhWD2w6iQYAcYXfHARZ7X1t/UGhhceQDs5X0cGqKvYlHNOuv7Oa1xmb0oQuA3w==",
+      "version": "6.1.5",
+      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.5.tgz",
+      "integrity": "sha512-TEHFzb5KRDKaOgJ4TYE+0jyJtFbjLvkdVOu0fZ2b6MTWzoqZd4Le+61aEppWkvTlYePgOX4ATL1wsAIPMLTw6Q==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -11238,9 +11224,9 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.16.0",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.0.tgz",
-      "integrity": "sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==",
+      "version": "6.16.1",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.1.tgz",
+      "integrity": "sha512-5Px6J7rfHBAGUhNQ3es4YzcOdBBw0SDcVtThJml4RdnKw4tKs2epA0kPZ+K8X+WiHktT93RHVcQ/3ym5aTCgtg==",
       "dev": true,
       "license": "BSD-3-Clause",
       "dependencies": {
@@ -12665,20 +12651,6 @@
         "tailwindcss": ">=3.0.0 || insiders"
       }
     },
-    "node_modules/tailwindcss/node_modules/postcss-selector-parser": {
-      "version": "6.1.4",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.4.tgz",
-      "integrity": "sha512-bIoJLOmjCO1S9XdY/DcnR5hJxvrDir1PbGChrzXG3vw0/FOliy/fA3dmdhQ441kah4gKv+TwckGzex6wNS5cnQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "cssesc": "^3.0.0",
-        "util-deprecate": "^1.0.2"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/tailwindcss/node_modules/resolve": {
       "version": "1.22.11",
       "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.22.11.tgz",
diff --git a/web/package.json b/web/package.json
index f168f1fe..b9745f5e 100644
--- a/web/package.json
+++ b/web/package.json
@@ -116,7 +116,10 @@
     "@pezkuwi/x-textencoder": "^14.0.26",
     "@pezkuwi/x-ws": "^14.0.26",
     "@pezkuwi/networks": "^14.0.26",
-    "elliptic": "^6.6.1"
+    "elliptic": "^6.6.1",
+    "@tailwindcss/typography": {
+      "postcss-selector-parser": "6.1.5"
+    }
   },
   "devDependencies": {
     "@eslint/js": "^9.9.0",