fabro/apps/fabro-web/package.json
Bryan Helmkamp ba6372d555
Some checks failed
Rust / Format (push) Waiting to run
Rust / Clippy (push) Waiting to run
Rust / Generated Docs (push) Waiting to run
Rust / Test (Linux) (push) Waiting to run
Rust / Test (macOS) (push) Waiting to run
TypeScript / Typecheck (push) Has been cancelled
TypeScript / Test (push) Has been cancelled
TypeScript / Build (push) Has been cancelled
security: patch react-router CVE alerts (#535)
## Summary
- Updates direct web runtime dependency `react-router` from `7.12.0` to
`7.15.1` in `apps/fabro-web`.
- Regenerates the root Bun workspace lockfile.
- Expected to resolve Dependabot alerts:
  - https://github.com/fabro-sh/fabro/security/dependabot/31
  - https://github.com/fabro-sh/fabro/security/dependabot/32
  - https://github.com/fabro-sh/fabro/security/dependabot/33
  - https://github.com/fabro-sh/fabro/security/dependabot/34
  - https://github.com/fabro-sh/fabro/security/dependabot/35
  - https://github.com/fabro-sh/fabro/security/dependabot/36
  - https://github.com/fabro-sh/fabro/security/dependabot/37

## Grouping
- Grouped these alerts because they all affect the same direct package,
same manifest, same runtime scope, and same verification path.
- Kept separate from the Rust `tar` alert because it touches a different
ecosystem and lockfile.

## Verification
- `bun pm why react-router` resolves `react-router@7.15.1` for
`fabro-web`.
- `cd apps/fabro-web && bun run typecheck`
- `cd apps/fabro-web && bun test --isolate` (625 passed, 0 failed)
- `cd apps/fabro-web && bun run build`
- `git diff --check`

## Residual alerts
- Rust `tar` alert 30 is handled separately in
https://github.com/fabro-sh/fabro/pull/534.

Co-authored-by: Release Repro <release-repro@example.com>
2026-06-27 12:10:39 -04:00

49 lines
1.4 KiB
JSON

{
"name": "fabro-web",
"private": true,
"type": "module",
"scripts": {
"build": "bun run scripts/build.ts",
"dev": "bun run scripts/build.ts --watch",
"test": "bun test --isolate",
"typecheck": "tsc"
},
"dependencies": {
"@assistant-ui/react": "0.14.5",
"@assistant-ui/react-markdown": "0.14.0",
"@assistant-ui/react-ui": "0.2.1",
"@dnd-kit/core": "^6.3.1",
"@dnd-kit/sortable": "^10.0.0",
"@dnd-kit/utilities": "^3.2.2",
"@headlessui/react": "^2.2.9",
"@heroicons/react": "^2.2.0",
"@pierre/diffs": "1.1.15",
"@pierre/theme": "0.0.28",
"@pierre/trees": "1.0.0-beta.3",
"@qltysh/fabro-api-client": "workspace:*",
"@radix-ui/react-hover-card": "^1.1.15",
"@radix-ui/react-tooltip": "^1.2.8",
"@tailwindcss/typography": "^0.5.19",
"@viz-js/viz": "^3.24.0",
"@xterm/addon-fit": "^0.11.0",
"@xterm/xterm": "^6.0.0",
"axios": "^1.7.0",
"fflate": "^0.8.3",
"marked": "^18.0.0",
"react": "^19.2.4",
"react-dom": "^19.2.4",
"react-router": "7.15.1",
"remark-gfm": "^4.0.1",
"sonner": "^2.0.7",
"swr": "^2.4.1"
},
"devDependencies": {
"@tailwindcss/cli": "^4.1.13",
"@types/node": "^22",
"@types/react": "^19.2.7",
"@types/react-dom": "^19.2.3",
"react-test-renderer": "19.2.0",
"tailwindcss": "^4.1.13",
"typescript": "^5.9.2"
}
}