fix(security): resolve 13 Vanta HIGH Dependabot vulnerabilities (#7528)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Harsh Vardhan Gupta
2026-10-05 20:52:59 +05:30
committed by GitHub
parent abb81c88e1
commit c93420c49a
22 changed files with 365 additions and 351 deletions
@@ -60,5 +60,10 @@
"tsup": "^8.5.0",
"typescript": "^5.6.0",
"vitest": "^4.1.7"
},
"pnpm": {
"overrides": {
"axios@<1.20.0": ">=1.20.0 <2.0.0"
}
}
}
+7 -4
View File
@@ -4,6 +4,9 @@ settings:
autoInstallPeers: false
excludeLinksFromLockfile: false
overrides:
axios@<1.20.0: '>=1.20.0 <2.0.0'
importers:
.:
@@ -575,8 +578,8 @@ packages:
asynckit@0.4.0:
resolution: {integrity: sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==}
axios@1.19.0:
resolution: {integrity: sha512-ht/iuYZXEjFxLH/Hkezgd7m6JKlHHXEUSneaDz8uZe1Gj5QZtCnpyDsckvAiEnT89OEbCLmnte4R4sn7P0EKFw==}
axios@1.20.0:
resolution: {integrity: sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==}
bundle-require@5.1.0:
resolution: {integrity: sha512-3WrrOuZiyaaZPWiEt4G3+IffISVC9HYlWueJEBWED4ZH4aIAC2PnkdnuRrR94M+w6yGWn4AglWtJtBI8YqvgoA==}
@@ -1610,7 +1613,7 @@ snapshots:
asynckit@0.4.0: {}
axios@1.19.0:
axios@1.20.0:
dependencies:
follow-redirects: 1.16.0
form-data: 4.0.6
@@ -1856,7 +1859,7 @@ snapshots:
mem0ai@3.1.6:
dependencies:
axios: 1.19.0
axios: 1.20.0
openai: 4.104.0(zod@3.25.76)
uuid: 11.1.1
zod: 3.25.76
+2 -2
View File
@@ -74,8 +74,8 @@
"brace-expansion@<1.1.16": ">=1.1.16 <2.0.0",
"brace-expansion@>=2.0.0 <2.1.2": ">=2.1.2 <3.0.0",
"brace-expansion@>=5.0.0 <5.0.8": ">=5.0.8",
"js-yaml@<3.15.1": ">=3.15.1 <4.0.0",
"js-yaml@>=4.0.0 <4.3.1": ">=4.3.1 <5.0.0"
"js-yaml@<3.15.2": ">=3.15.2 <4.0.0",
"js-yaml@>=4.0.0 <4.3.2": ">=4.3.2 <5.0.0"
}
}
}
+11 -11
View File
@@ -11,8 +11,8 @@ overrides:
brace-expansion@<1.1.16: '>=1.1.16 <2.0.0'
brace-expansion@>=2.0.0 <2.1.2: '>=2.1.2 <3.0.0'
brace-expansion@>=5.0.0 <5.0.8: '>=5.0.8'
js-yaml@<3.15.1: '>=3.15.1 <4.0.0'
js-yaml@>=4.0.0 <4.3.1: '>=4.3.1 <5.0.0'
js-yaml@<3.15.2: '>=3.15.2 <4.0.0'
js-yaml@>=4.0.0 <4.3.2: '>=4.3.2 <5.0.0'
importers:
@@ -1494,12 +1494,12 @@ packages:
js-tokens@4.0.0:
resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
js-yaml@3.15.1:
resolution: {integrity: sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==}
js-yaml@3.15.2:
resolution: {integrity: sha512-6EuL879VkRA+1Cz578mKMiKvjPNEuk6+r1JaFzoSWejZmtf7xWbIyw1e3KkxlkzTIt9Taw6JBhEppG7utc1P+w==}
hasBin: true
js-yaml@4.3.1:
resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==}
js-yaml@4.3.2:
resolution: {integrity: sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==}
hasBin: true
jsesc@3.1.0:
@@ -2506,7 +2506,7 @@ snapshots:
globals: 13.24.0
ignore: 5.3.2
import-fresh: 3.3.1
js-yaml: 4.3.1
js-yaml: 4.3.2
minimatch: 3.1.5
strip-json-comments: 3.1.1
transitivePeerDependencies:
@@ -2546,7 +2546,7 @@ snapshots:
camelcase: 5.3.1
find-up: 4.1.0
get-package-type: 0.1.0
js-yaml: 3.15.1
js-yaml: 3.15.2
resolve-from: 5.0.0
'@istanbuljs/schema@0.1.6': {}
@@ -3353,7 +3353,7 @@ snapshots:
imurmurhash: 0.1.4
is-glob: 4.0.3
is-path-inside: 3.0.3
js-yaml: 4.3.1
js-yaml: 4.3.2
json-stable-stringify-without-jsonify: 1.0.1
levn: 0.4.1
lodash.merge: 4.6.2
@@ -4173,12 +4173,12 @@ snapshots:
js-tokens@4.0.0: {}
js-yaml@3.15.1:
js-yaml@3.15.2:
dependencies:
argparse: 1.0.10
esprima: 4.0.1
js-yaml@4.3.1:
js-yaml@4.3.2:
dependencies:
argparse: 2.0.1
+1 -1
View File
@@ -73,7 +73,7 @@
"uuid@<11.1.1": ">=11.1.1",
"esbuild": ">=0.28.1",
"undici@<7.29.1": ">=7.29.1 <8.0.0",
"axios@<1.18.0": ">=1.18.0 <2.0.0",
"axios@<1.20.0": ">=1.20.0 <2.0.0",
"postcss@<8.5.18": ">=8.5.18 <9.0.0",
"mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0"
}
+5 -5
View File
@@ -14,7 +14,7 @@ overrides:
uuid@<11.1.1: '>=11.1.1'
esbuild: '>=0.28.1'
undici@<7.29.1: '>=7.29.1 <8.0.0'
axios@<1.18.0: '>=1.18.0 <2.0.0'
axios@<1.20.0: '>=1.20.0 <2.0.0'
postcss@<8.5.18: '>=8.5.18 <9.0.0'
mongoose@>=9.0.0 <9.7.2: '>=9.7.2 <10.0.0'
@@ -857,8 +857,8 @@ packages:
asynckit@0.4.0:
resolution: {integrity: sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==}
axios@1.18.1:
resolution: {integrity: sha512-3nTvFlvpn9Zu/RkHUqtc7/+al4UpRW5az71ap5zccp6e8RAYEzhMTecX8Dz1wWDYrPpUoB1HAQEGEAEvUr7S9g==}
axios@1.20.0:
resolution: {integrity: sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==}
base-64@0.1.0:
resolution: {integrity: sha512-Y5gU45svrR5tI2Vt/X9GPd3L0HNIKzGu202EjxrXMpuc2V2CiKgemAbUUsqYmZJvPtCXoUKjNZwBJzsNScUbXA==}
@@ -2906,7 +2906,7 @@ snapshots:
asynckit@0.4.0: {}
axios@1.18.1:
axios@1.20.0:
dependencies:
follow-redirects: 1.16.0
form-data: 4.0.6
@@ -3529,7 +3529,7 @@ snapshots:
'@supabase/supabase-js': 2.108.1
'@types/jest': 29.5.14
'@types/pg': 8.11.0
axios: 1.18.1
axios: 1.20.0
better-sqlite3: 12.10.0
cloudflare: 4.5.0
compromise: 14.15.1
+1 -1
View File
@@ -22,6 +22,6 @@ overrides:
"uuid@<11.1.1": ">=11.1.1"
"esbuild": ">=0.28.1"
"undici@<7.29.1": ">=7.29.1 <8.0.0"
"axios@<1.18.0": ">=1.18.0 <2.0.0"
"axios@<1.20.0": ">=1.20.0 <2.0.0"
"postcss@<8.5.18": ">=8.5.18 <9.0.0"
"mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0"
+1 -1
View File
@@ -74,7 +74,7 @@
"esbuild": ">=0.28.1",
"undici@<7.29.1": ">=7.29.1 <8.0.0",
"undici@>=8.0.0 <8.10.2": ">=8.10.2 <9.0.0",
"axios@<1.18.0": ">=1.18.0 <2.0.0",
"axios@<1.20.0": ">=1.20.0 <2.0.0",
"brace-expansion@>=3.0.0 <5.0.8": ">=5.0.8 <6.0.0",
"postcss@<8.5.18": ">=8.5.18 <9.0.0",
"mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0",
+5 -5
View File
@@ -10,7 +10,7 @@ overrides:
esbuild: '>=0.28.1'
undici@<7.29.1: '>=7.29.1 <8.0.0'
undici@>=8.0.0 <8.10.2: '>=8.10.2 <9.0.0'
axios@<1.18.0: '>=1.18.0 <2.0.0'
axios@<1.20.0: '>=1.20.0 <2.0.0'
brace-expansion@>=3.0.0 <5.0.8: '>=5.0.8 <6.0.0'
postcss@<8.5.18: '>=8.5.18 <9.0.0'
mongoose@>=9.0.0 <9.7.2: '>=9.7.2 <10.0.0'
@@ -1066,8 +1066,8 @@ packages:
asynckit@0.4.0:
resolution: {integrity: sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==}
axios@1.18.1:
resolution: {integrity: sha512-3nTvFlvpn9Zu/RkHUqtc7/+al4UpRW5az71ap5zccp6e8RAYEzhMTecX8Dz1wWDYrPpUoB1HAQEGEAEvUr7S9g==}
axios@1.20.0:
resolution: {integrity: sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==}
balanced-match@4.0.4:
resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
@@ -3598,7 +3598,7 @@ snapshots:
asynckit@0.4.0: {}
axios@1.18.1:
axios@1.20.0:
dependencies:
follow-redirects: 1.16.0
form-data: 4.0.6
@@ -4253,7 +4253,7 @@ snapshots:
'@supabase/supabase-js': 2.108.1
'@types/jest': 29.5.14
'@types/pg': 8.11.0
axios: 1.18.1
axios: 1.20.0
better-sqlite3: 12.10.0
cloudflare: 4.5.0
compromise: 14.15.1
@@ -7,7 +7,7 @@ overrides:
"esbuild": ">=0.28.1"
"undici@<7.29.1": ">=7.29.1 <8.0.0"
"undici@>=8.0.0 <8.10.2": ">=8.10.2 <9.0.0"
"axios@<1.18.0": ">=1.18.0 <2.0.0"
"axios@<1.20.0": ">=1.20.0 <2.0.0"
"brace-expansion@>=3.0.0 <5.0.8": ">=5.0.8 <6.0.0"
"postcss@<8.5.18": ">=8.5.18 <9.0.0"
"mongoose@>=9.0.0 <9.7.2": ">=9.7.2 <10.0.0"
+2 -2
View File
@@ -88,8 +88,8 @@
"esbuild": ">=0.28.1",
"brace-expansion@<1.1.16": ">=1.1.16 <2.0.0",
"brace-expansion@>=3.0.0 <5.0.8": ">=5.0.8 <6.0.0",
"js-yaml@<3.15.1": ">=3.15.1 <4.0.0",
"js-yaml@>=4.0.0 <4.3.1": ">=4.3.1 <5.0.0",
"js-yaml@<3.15.2": ">=3.15.2 <4.0.0",
"js-yaml@>=4.0.0 <4.3.2": ">=4.3.2 <5.0.0",
"browserslist@<4.28.7": ">=4.28.7 <5.0.0"
}
}
+6 -6
View File
@@ -14,8 +14,8 @@ overrides:
esbuild: '>=0.28.1'
brace-expansion@<1.1.16: '>=1.1.16 <2.0.0'
brace-expansion@>=3.0.0 <5.0.8: '>=5.0.8 <6.0.0'
js-yaml@<3.15.1: '>=3.15.1 <4.0.0'
js-yaml@>=4.0.0 <4.3.1: '>=4.3.1 <5.0.0'
js-yaml@<3.15.2: '>=3.15.2 <4.0.0'
js-yaml@>=4.0.0 <4.3.2: '>=4.3.2 <5.0.0'
browserslist@<4.28.7: '>=4.28.7 <5.0.0'
importers:
@@ -1356,8 +1356,8 @@ packages:
js-tokens@4.0.0:
resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
js-yaml@3.15.1:
resolution: {integrity: sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==}
js-yaml@3.15.2:
resolution: {integrity: sha512-6EuL879VkRA+1Cz578mKMiKvjPNEuk6+r1JaFzoSWejZmtf7xWbIyw1e3KkxlkzTIt9Taw6JBhEppG7utc1P+w==}
hasBin: true
jsesc@3.1.0:
@@ -2231,7 +2231,7 @@ snapshots:
camelcase: 5.3.1
find-up: 4.1.0
get-package-type: 0.1.0
js-yaml: 3.15.1
js-yaml: 3.15.2
resolve-from: 5.0.0
'@istanbuljs/schema@0.1.6': {}
@@ -3360,7 +3360,7 @@ snapshots:
js-tokens@4.0.0: {}
js-yaml@3.15.1:
js-yaml@3.15.2:
dependencies:
argparse: 1.0.10
esprima: 4.0.1
@@ -15,6 +15,6 @@ overrides:
"esbuild": ">=0.28.1"
"brace-expansion@<1.1.16": ">=1.1.16 <2.0.0"
"brace-expansion@>=3.0.0 <5.0.8": ">=5.0.8 <6.0.0"
"js-yaml@<3.15.1": ">=3.15.1 <4.0.0"
"js-yaml@>=4.0.0 <4.3.1": ">=4.3.1 <5.0.0"
"js-yaml@<3.15.2": ">=3.15.2 <4.0.0"
"js-yaml@>=4.0.0 <4.3.2": ">=4.3.2 <5.0.0"
"browserslist@<4.28.7": ">=4.28.7 <5.0.0"
+1 -1
View File
@@ -72,7 +72,7 @@
"undici@<7.29.0": ">=7.29.0 <8.0.0",
"undici@>=8.0.0 <8.9.0": ">=8.9.0 <9.0.0",
"brace-expansion@<1.1.16": ">=1.1.16 <2.0.0",
"js-yaml@<3.15.1": ">=3.15.1 <4.0.0"
"js-yaml@<3.15.2": ">=3.15.2 <4.0.0"
}
}
}
+5 -5
View File
@@ -11,7 +11,7 @@ overrides:
undici@<7.29.0: '>=7.29.0 <8.0.0'
undici@>=8.0.0 <8.9.0: '>=8.9.0 <9.0.0'
brace-expansion@<1.1.16: '>=1.1.16 <2.0.0'
js-yaml@<3.15.1: '>=3.15.1 <4.0.0'
js-yaml@<3.15.2: '>=3.15.2 <4.0.0'
importers:
@@ -951,8 +951,8 @@ packages:
js-tokens@4.0.0:
resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
js-yaml@3.15.1:
resolution: {integrity: sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==}
js-yaml@3.15.2:
resolution: {integrity: sha512-6EuL879VkRA+1Cz578mKMiKvjPNEuk6+r1JaFzoSWejZmtf7xWbIyw1e3KkxlkzTIt9Taw6JBhEppG7utc1P+w==}
hasBin: true
jsesc@3.1.0:
@@ -1654,7 +1654,7 @@ snapshots:
camelcase: 5.3.1
find-up: 4.1.0
get-package-type: 0.1.0
js-yaml: 3.15.1
js-yaml: 3.15.2
resolve-from: 5.0.0
'@istanbuljs/schema@0.1.6': {}
@@ -2714,7 +2714,7 @@ snapshots:
js-tokens@4.0.0: {}
js-yaml@3.15.1:
js-yaml@3.15.2:
dependencies:
argparse: 1.0.10
esprima: 4.0.1
+1 -1
View File
@@ -8,4 +8,4 @@ overrides:
"undici@<7.29.0": ">=7.29.0 <8.0.0"
"undici@>=8.0.0 <8.9.0": ">=8.9.0 <9.0.0"
"brace-expansion@<1.1.16": ">=1.1.16 <2.0.0"
"js-yaml@<3.15.1": ">=3.15.1 <4.0.0"
"js-yaml@<3.15.2": ">=3.15.2 <4.0.0"