GitNexus/gitnexus-web
svector 4e51213c82
fix(deps): bump transitive packages to patch disclosed CVEs (#3095)
* fix(deps): bump transitive packages to patch disclosed CVEs

Automated dependency bumps addressing already-disclosed advisories in
gitnexus and gitnexus-web lockfiles.

- undici 6.24.0 → 6.28.0 (@vercel/node override) — GHSA-vxpw-j846-p89q / CVE-2026-12151
- undici 7.25.0 → 7.29.0 (jsdom override) — GHSA-4cwx-7wf7-3272, GHSA-hm92-r4w5-c3mj, GHSA-vmh5-mc38-953g, GHSA-vxpw-j846-p89q
- js-yaml 4.1.1 → 4.3.1 — GHSA-52cp-r559-cp3m / CVE-2026-59869, GHSA-5p4m-2wfm-xmqj
- nanoid 3.3.16 → 3.3.18 — GHSA-2v37-7h3g-55p8 / CVE-2026-67213
- tar 7.5.20 → 7.5.22 — GHSA-r292-9mhp-454m / CVE-2026-73566
- protobufjs 7.6.4 → 7.6.6 (gitnexus override) — GHSA-j3f2-48v5-ccww / CVE-2026-59877

No application code changes. npm audit and osv-scanner report 0 remaining
vulnerabilities on these two lockfiles after the bump.

* fix(deps): prefer root bump and lockfile refresh

---------

Co-authored-by: Svector-anu <anu@svector.xyz>
Co-authored-by: Gergő Magyar <gergomagyar@icloud.com>
2026-08-30 08:03:05 +00:00
..
e2e fix(web): use repo path identity in switcher (#2420) 2026-07-11 11:43:47 +01:00
src fix(impact): make File risk comparable via shared axes (#3075) (#3082) 2026-08-29 11:58:15 +00:00
test fix(impact): make File risk comparable via shared axes (#3075) (#3082) 2026-08-29 11:58:15 +00:00
.gitignore gitnexus wal cleanup preventing reindexing issue fixed 2026-02-06 06:35:15 +05:30
index.html feat: configure prettier with pre-commit hook (#563) 2026-03-28 14:58:04 +00:00
package-lock.json fix(deps): bump transitive packages to patch disclosed CVEs (#3095) 2026-08-30 08:03:05 +00:00
package.json fix(deps): bump transitive packages to patch disclosed CVEs (#3095) 2026-08-30 08:03:05 +00:00
playwright.config.ts feat: configure prettier with pre-commit hook (#563) 2026-03-28 14:58:04 +00:00
tsconfig.app.json feat: unify web and cli ingestion pipeline (#536) 2026-03-28 14:07:11 +00:00
tsconfig.json feat: configure prettier with pre-commit hook (#563) 2026-03-28 14:58:04 +00:00
tsconfig.node.json feat: merge gitnexus-mcp into gitnexus package - unified CLI+MCP 2026-02-04 01:12:41 +05:30
vercel.json ci(web): use npm ci for deterministic Vercel installs (#1764) 2026-05-22 05:08:42 +01:00
vite.config.ts feat: add docker support (#848) 2026-04-18 08:39:18 +01:00
vitest.config.ts feat(web): Introduce Tree View and Circles View in Web Viewer (#1799) 2026-05-26 18:05:50 +01:00