mirror of
https://github.com/maziggy/bambuddy.git
synced 2026-10-04 21:21:54 +02:00
maziggy
861de7a0e6
Runtime:
- dompurify 3.4.0 -> 3.4.10 (package.json floor raised from
^3.4.0 to ^3.4.10 so fresh installs cannot land on the
deprecated 3.4.4 release; release notes 3.4.1 -> 3.4.10
reviewed — the three call sites (MakerworldPage,
ProjectDetailPage, ProjectPageModal) use string-output
sanitisation and are unaffected by 3.4.4's widened default
allow-list)
Build / lint / test tooling (transitive, dev-only):
- @babel/core 7.29.0 -> 7.29.7 (via @vitejs/plugin-react and
eslint-plugin-react-hooks)
- vite 7.3.2 -> 7.3.5
- markdown-it 14.1.1 -> 14.2.0 (via @tiptap/extension-link
-> @tiptap/pm -> prosemirror-markdown; Bambuddy never calls
markdown-it.render directly)
- js-yaml 4.1.1 -> 4.2.0 (via eslint)
- form-data 4.0.5 -> 4.0.6 (via jsdom)
- ws 8.20.1 -> 8.21.0 (via jsdom)
