garrytan e77c5320c5 fix(deps): clear the weekly OSV findings (#3040) ...

Raise overrides to fixed releases: ip-address 10.7.3 (our own pin was the
vulnerable 10.3.1; reachable through socks in browse's proxy path),
fast-uri 3.1.8, hono 4.13.13, proxy-addr 2.0.8, @modelcontextprotocol/sdk
1.31.0, sharp 0.35.5, and in lib/diagram-render dompurify 3.4.16 (bundled
by mermaid) and source-map-js 1.2.2; the render page is rebuilt. Three
advisories without a usable fix get justified, expiring ignores: braces
(build-time only, excalidraw -> sass -> chokidar; a test checks the page
carries no chokidar code), sprintf-js (roarr's constant-format logger) and
katex (needs pre-existing prototype pollution; fix outside mermaid's range).
osv-scanner with the repo config: no issues found.

2026-10-06 18:19:28 +00:00

..

BUILD_INFO.json

fix(deps): clear the weekly OSV findings (#3040)

2026-10-06 18:19:28 +00:00

diagram-render.html

fix(deps): clear the weekly OSV findings (#3040)

2026-10-06 18:19:28 +00:00