[PR #494] [MERGED] Update packages & resolve vulns #2300

New Issue

GiteaMirror · 2026-04-16T09:19:12-05:00

GiteaMirror commented

2026-04-16 09:19:12 -05:00

📋 Pull Request Information

Original PR: https://github.com/fosrl/pangolin/pull/494
Author: @grokdesigns
Created: 4/8/2025
Status: ✅ Merged
Merged: 4/9/2025
Merged by: @oschwartz10612

Base: dev ← Head: update-package-resolve-vulns

📝 Commits (2)

7fd1652 Update libraries to resolve critical security findings
40040af Bump react-email version

📊 Changes

5 files changed (+1161 additions, -1840 deletions)

View changed files

📝 package-lock.json (+1111 -1788)
📝 package.json (+10 -9)
📝 src/app/[orgId]/settings/sites/create/page.tsx (+24 -28)
📝 src/app/components/SupporterMessage.tsx (+1 -1)
📝 src/components/StrategySelect.tsx (+15 -14)

📄 Description

Community Contribution License Agreement

By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.

Description

Updated packages to resolve security findings.

Current dev branch: 13 vulnerabilities (11 moderate, 1 high, 1 critical)
Fork: 4 moderate severity vulnerabilities. I believe these are mostly due to upstream drizzle-kit dependencies.

I've tested as much as I can. I set up a new standalone server and everything appeared to work and I set up a new instance with newt and had no issues adding nodes and sending traffic. Tested sending email, etc. Could definitely use some more testing due to code changes required by updated packages.

How to test?

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/fosrl/pangolin/pull/494 **Author:** [@grokdesigns](https://github.com/grokdesigns) **Created:** 4/8/2025 **Status:** ✅ Merged **Merged:** 4/9/2025 **Merged by:** [@oschwartz10612](https://github.com/oschwartz10612) **Base:** `dev` ← **Head:** `update-package-resolve-vulns` --- ### 📝 Commits (2) - [`7fd1652`](https://github.com/fosrl/pangolin/commit/7fd1652a71ff5695567f74f59f4520e89c96443a) Update libraries to resolve critical security findings - [`40040af`](https://github.com/fosrl/pangolin/commit/40040af95741f6420a325c9b78b453d0267ec9de) Bump react-email version ### 📊 Changes **5 files changed** (+1161 additions, -1840 deletions) <details> <summary>View changed files</summary> 📝 `package-lock.json` (+1111 -1788) 📝 `package.json` (+10 -9) 📝 `src/app/[orgId]/settings/sites/create/page.tsx` (+24 -28) 📝 `src/app/components/SupporterMessage.tsx` (+1 -1) 📝 `src/components/StrategySelect.tsx` (+15 -14) </details> ### 📄 Description ## Community Contribution License Agreement By creating this pull request, I grant the project maintainers an unlimited, perpetual license to use, modify, and redistribute these contributions under any terms they choose, including both the AGPLv3 and the Fossorial Commercial license terms. I represent that I have the right to grant this license for all contributed content. ## Description Updated packages to resolve security findings. Current dev branch: 13 vulnerabilities (11 moderate, 1 high, 1 critical) Fork: 4 moderate severity vulnerabilities. I believe these are mostly due to upstream drizzle-kit dependencies. I've tested as much as I can. I set up a new standalone server and everything appeared to work and I set up a new instance with newt and had no issues adding nodes and sending traffic. Tested sending email, etc. Could definitely use some more testing due to code changes required by updated packages. ## How to test? --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2026-04-16 09:19:12 -05:00

GiteaMirror closed this issue

2026-04-16 09:19:13 -05:00

GiteaMirror referenced this issue

2026-04-16 09:41:39 -05:00

[PR #2300] [CLOSED] Bump the prod-minor-updates group across 1 directory with 3 updates #2931

GiteaMirror referenced this issue

2026-04-20 09:09:45 -05:00

[PR #2300] [CLOSED] Bump the prod-minor-updates group across 1 directory with 3 updates #4874

GiteaMirror referenced this issue

2026-04-23 02:48:48 -05:00

[PR #2300] [CLOSED] Bump the prod-minor-updates group across 1 directory with 3 updates #5818