safe-global / safe-events-service / 36719353987

87%

push

github

chore: Refresh lockfile to fix transitive vulnerabilities (#619)

Run `pnpm update` inside the current ranges. This moves transitive
dependencies to patched versions (axios, multer, form-data, lodash,
brace-expansion, minimatch, typeorm, ...). `pnpm audit` goes from 99
to 12 vulnerabilities.

Add pnpm overrides for `@tiptap/core` and `@tiptap/pm`. After the
update, AdminJS's tiptap extensions resolve to 2.27.3 but link to the
2.1.13 core pinned by `@adminjs/design-system`, and the app fails at
boot with "does not provide an export named 'canInsertNode'".

The 12 left need majors that AdminJS 7 does not support (tinymce,
tiptap, react-router, uuid, i18next-http-backend) or come from
`@nestjs/swagger` 11 pinning js-yaml 5.3.0.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

79 of 89 branches covered (88.76%)

Branch coverage included in aggregate %.

686 of 786 relevant lines covered (87.28%)

10.38 hits per line