🔒 Fix open Dependabot security alerts

Browse Source

Bump transitive deps to patched versions (source-map-js, dompurify,
brace-expansion, @fastify/busboy, @grpc/grpc-js) and add npm overrides
for the two that parents pin to vulnerable ranges: mermaid's nested
katex now dedupes to the root katex, and @tailwindcss/typography uses
postcss-selector-parser ^7.1.6.

Compiled CSS and vendored assets are unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

...

This commit is contained in:

Nuno CoraçãoandClaude Opus 5.5 committed 2026-10-07 17:02:38 +01:00

1 parent 9b173140ce

commit 59fc919de8

3 files changed

+618 -1050

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

scripts/package-lock.json

Generated

+502 -854

File diff suppressed because it is too large. Load diff