chore(deps): npm audit fix for transitive security advisories (#1380)

Browse source

Resolves 15 of 16 Dependabot alerts via lockfile-only updates (no
breaking major bumps): handlebars (critical), fast-uri, flatted, hono,
path-to-regexp, rollup, vite, express-rate-limit, @hono/node-server,
ajv, brace-expansion, ip-address, picomatch, postcss, qs, ws, yaml,
and @tootallnate/once.

The remaining minimatch@3.1.2 advisory comes from @eslint/config-array
(dev/lint-only, not shipped) and will clear when ESLint bumps it.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

...

This commit is contained in:

Ola Hungerford 2026-05-31 14:36:50 -07:00 • committed by GitHub

parent f18775a1a5

commit 10f429759f

No known key found for this signature in database

GPG key ID: B5690EEEBB952194

1 changed files with 369 additions and 796 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1165

package-lock.json generated

View file

File diff suppressed because it is too large Load diff