mirror of
https://github.com/ankitects/anki.git
synced 2026-06-10 06:13:34 -04:00
## Summary Consolidates 8 open Dependabot PRs into a single security-focused batch. ### Addressed advisories - GHSA: tar (Cargo) [#296](https://github.com/ankitects/anki/security/dependabot/296) - @tootallnate/once [#295](https://github.com/ankitects/anki/security/dependabot/295) - ws [#293](https://github.com/ankitects/anki/security/dependabot/293) - openssl [#292](https://github.com/ankitects/anki/security/dependabot/292) - idna [#291](https://github.com/ankitects/anki/security/dependabot/291) - devalue [#287](https://github.com/ankitects/anki/security/dependabot/287)/[#239](https://github.com/ankitects/anki/security/dependabot/239)/[#217](https://github.com/ankitects/anki/security/dependabot/217)/[#216](https://github.com/ankitects/anki/security/dependabot/216) - postcss [#275](https://github.com/ankitects/anki/security/dependabot/275) - svelte [#286](https://github.com/ankitects/anki/security/dependabot/286)/[#288](https://github.com/ankitects/anki/security/dependabot/288)/[#289](https://github.com/ankitects/anki/security/dependabot/289) - lodash-es [#258](https://github.com/ankitects/anki/security/dependabot/258)/[#259](https://github.com/ankitects/anki/security/dependabot/259) - @sveltejs/kit [#294](https://github.com/ankitects/anki/security/dependabot/294) ### Sources Merged from PRs: #4914, #4887, #4867, #4866, #4865, #4846, #4744, #4892. ### Not addressed — rand (Cargo) [#268](https://github.com/ankitects/anki/security/dependabot/268) PR #4741 (rand 0.9.4 → 0.10.1) was excluded because `fsrs 5.2.0` still depends on `rand 0.9.4`. The rand 0.10 API changes (`Rng` → `RngExt`) cause a compile error at the `PostSchedulingFn` boundary. This will be unblocked when fsrs is upgraded. ### Not addressed (transitive — follow-up) - urllib3 [#284](https://github.com/ankitects/anki/security/dependabot/284)/[#283](https://github.com/ankitects/anki/security/dependabot/283) - GitPython [#282](https://github.com/ankitects/anki/security/dependabot/282) - ip-address [#276](https://github.com/ankitects/anki/security/dependabot/276) - pytest [#266](https://github.com/ankitects/anki/security/dependabot/266) - Pygments [#256](https://github.com/ankitects/anki/security/dependabot/256) - brace-expansion [#255](https://github.com/ankitects/anki/security/dependabot/255)/[#158](https://github.com/ankitects/anki/security/dependabot/158) - picomatch [#253](https://github.com/ankitects/anki/security/dependabot/253)/[#252](https://github.com/ankitects/anki/security/dependabot/252) - tar (npm) [#238](https://github.com/ankitects/anki/security/dependabot/238)/[#235](https://github.com/ankitects/anki/security/dependabot/235)/[#209](https://github.com/ankitects/anki/security/dependabot/209) - immutable [#231](https://github.com/ankitects/anki/security/dependabot/231) - minimatch [#227](https://github.com/ankitects/anki/security/dependabot/227)/[#226](https://github.com/ankitects/anki/security/dependabot/226)/[#221](https://github.com/ankitects/anki/security/dependabot/221) - fabric [#211](https://github.com/ankitects/anki/security/dependabot/211) These need manual `yarn.lock` resolutions / `uv.lock` overrides. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
105 lines
3.4 KiB
JSON
105 lines
3.4 KiB
JSON
{
|
|
"name": "anki",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"author": "Ankitects Pty Ltd and contributors",
|
|
"license": "AGPL-3.0-or-later",
|
|
"description": "Anki JS support files",
|
|
"scripts": {
|
|
"dev": "cd ts && vite dev",
|
|
"build": "cd ts && vite build",
|
|
"preview": "cd ts && vite preview",
|
|
"svelte-check:once": "cd ts && svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --fail-on-warnings --threshold warning",
|
|
"svelte-check": "cd ts && svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch",
|
|
"vitest:once": "cd ts && vitest run",
|
|
"vitest": "cd ts && vitest",
|
|
"test:e2e": "playwright test",
|
|
"test:e2e:ui": "playwright test --ui"
|
|
},
|
|
"devDependencies": {
|
|
"@bufbuild/protoc-gen-es": "^1.8.0",
|
|
"@playwright/test": "^1.60.0",
|
|
"@poppanator/sveltekit-svg": "^5.0.0",
|
|
"@sqltools/formatter": "^1.2.2",
|
|
"@sveltejs/adapter-static": "^3.0.10",
|
|
"@sveltejs/kit": "^2.60.1",
|
|
"@sveltejs/vite-plugin-svelte": "5.1",
|
|
"@types/bootstrap": "^5.0.12",
|
|
"@types/codemirror": "^5.60.0",
|
|
"@types/d3": "^7.0.0",
|
|
"@types/diff": "^5.0.0",
|
|
"@types/fabric": "^5.3.7",
|
|
"@types/jquery": "^3.5.0",
|
|
"@types/jqueryui": "^1.12.24",
|
|
"@types/lodash-es": "^4.17.4",
|
|
"@types/marked": "^5.0.0",
|
|
"@types/node": "^22",
|
|
"@typescript-eslint/eslint-plugin": "^5.60.1",
|
|
"@typescript-eslint/parser": "^5.60.1",
|
|
"@vitest/coverage-v8": "3.2.4",
|
|
"caniuse-lite": "^1.0.30001792",
|
|
"cross-env": "^7.0.2",
|
|
"diff": "^5.0.0",
|
|
"dprint": "^0.54.0",
|
|
"esbuild": "^0.28.0",
|
|
"esbuild-sass-plugin": "^3.7.0",
|
|
"esbuild-svelte": "^0.9.5",
|
|
"eslint": "^8.44.0",
|
|
"eslint-plugin-compat": "^4.1.4",
|
|
"eslint-plugin-import": "^2.32.0",
|
|
"eslint-plugin-svelte": "^2",
|
|
"license-checker-rseidelsohn": "=4.4.2",
|
|
"prettier": "^3.8.3",
|
|
"prettier-plugin-svelte": "^3.5.2",
|
|
"sass": "<1.100",
|
|
"svelte": "^5.55.7",
|
|
"svelte-check": "^4.4.8",
|
|
"svelte-preprocess": "^6.0.3",
|
|
"svelte-preprocess-esbuild": "^3.0.1",
|
|
"svgo": "^3.3.3",
|
|
"tslib": "^2.8.1",
|
|
"tsx": "^4.22.0",
|
|
"typescript": "^5.0.4",
|
|
"vite": "6",
|
|
"vitest": "^3"
|
|
},
|
|
"dependencies": {
|
|
"@bufbuild/protobuf": "^1.2.1",
|
|
"@floating-ui/dom": "^1.7.6",
|
|
"@fluent/bundle": "^0.19.1",
|
|
"@mdi/svg": "^7.0.96",
|
|
"@popperjs/core": "^2.11.8",
|
|
"bootstrap": "^5.3.8",
|
|
"bootstrap-icons": "^1.13.1",
|
|
"codemirror": "^5.63.1",
|
|
"d3": "^7.0.0",
|
|
"fabric": "^5.3.0",
|
|
"hammerjs": "^2.0.8",
|
|
"intl-pluralrules": "^2.0.0",
|
|
"jquery": "^3.5.1",
|
|
"jquery-ui-dist": "^1.12.1",
|
|
"lodash-es": "^4.18.1",
|
|
"lru-cache": "^10.2.0",
|
|
"marked": "^5.1.0",
|
|
"mathjax": "^3.1.2"
|
|
},
|
|
"resolutions": {
|
|
"canvas": "npm:empty-npm-package@1.0.0",
|
|
"cookie": "0.7.0",
|
|
"devalue": "^5.8.0",
|
|
"tar": "^7.5.7",
|
|
"vite": "6",
|
|
"js-yaml": "^4.1.1",
|
|
"glob": "^10.5.0"
|
|
},
|
|
"browserslist": [
|
|
"defaults",
|
|
"not op_mini all",
|
|
"not < 1%",
|
|
"Chrome 77",
|
|
"iOS 14.5"
|
|
],
|
|
"type": "module",
|
|
"packageManager": "yarn@4.11.0"
|
|
}
|