mirror of
https://github.com/pezkuwichain/pwap.git
synced 2026-11-05 16:21:07 +00:00
sign: vite 6.4.5 fixes GHSA-8g5g-mxqh-grgj (dev server fs.deny bypass, 6.4.4 only); qs 6.16.1 comes in through the url polyfill. web: qs 6.16.1, and an override pins the postcss-selector-parser that @tailwindcss/typography requires exactly (6.0.10) to 6.1.5, which fixes GHSA-rj75-hqrm-r3gf.