1
0
forked from baron/baron-sso

fix(ci): pin dependencies to resolve supply-chain policy violations

- Added pnpm overrides in root package.json to pin '@types/node', 'undici', 'electron-to-chromium', and '@csstools/css-syntax-patches-for-csstree' to versions satisfying the minimum release age policy.
- Regenerated pnpm-lock.yaml with policy-compliant versions.
This commit is contained in:
2026-06-04 17:50:17 +09:00
parent 5377401574
commit e5ac333efa
2 changed files with 72 additions and 118 deletions

178
pnpm-lock.yaml generated
View File

@@ -4,8 +4,16 @@ settings:
autoInstallPeers: true
excludeLinksFromLockfile: false
overrides:
'@types/node': 24.12.4
undici: 7.26.0
electron-to-chromium: 1.5.360
'@csstools/css-syntax-patches-for-csstree': 1.1.4
importers:
.: {}
adminfront:
dependencies:
'@radix-ui/react-avatar':
@@ -91,8 +99,8 @@ importers:
specifier: ^14.6.1
version: 14.6.1(@testing-library/dom@10.4.1)
'@types/node':
specifier: ^25.7.0
version: 25.9.1
specifier: 24.12.4
version: 24.12.4
'@types/react':
specifier: ^19.2.14
version: 19.2.16
@@ -104,7 +112,7 @@ importers:
version: 5.3.3
'@vitejs/plugin-react':
specifier: ^6.0.1
version: 6.0.2(vite@8.0.16(@types/node@25.9.1)(jiti@1.21.7))
version: 6.0.2(vite@8.0.16(@types/node@24.12.4)(jiti@1.21.7))
'@vitest/coverage-v8':
specifier: 4.1.6
version: 4.1.6(vitest@4.1.6)
@@ -131,10 +139,10 @@ importers:
version: 6.0.3
vite:
specifier: ^8.0.14
version: 8.0.16(@types/node@25.9.1)(jiti@1.21.7)
version: 8.0.16(@types/node@24.12.4)(jiti@1.21.7)
vitest:
specifier: ^4.1.6
version: 4.1.6(@types/node@25.9.1)(@vitest/coverage-v8@4.1.6)(jsdom@28.1.0)(vite@8.0.16(@types/node@25.9.1)(jiti@1.21.7))
version: 4.1.6(@types/node@24.12.4)(@vitest/coverage-v8@4.1.6)(jsdom@28.1.0)(vite@8.0.16(@types/node@24.12.4)(jiti@1.21.7))
common:
dependencies:
@@ -209,8 +217,8 @@ importers:
specifier: ^1.58.0
version: 1.60.0
'@types/node':
specifier: ^24.10.1
version: 24.13.0
specifier: 24.12.4
version: 24.12.4
'@types/react':
specifier: ^19.2.5
version: 19.2.16
@@ -219,7 +227,7 @@ importers:
version: 19.2.3(@types/react@19.2.16)
'@vitejs/plugin-react':
specifier: ^6.0.1
version: 6.0.2(vite@8.0.16(@types/node@24.13.0)(jiti@1.21.7))
version: 6.0.2(vite@8.0.16(@types/node@24.12.4)(jiti@1.21.7))
autoprefixer:
specifier: ^10.4.23
version: 10.5.0(postcss@8.5.15)
@@ -240,10 +248,10 @@ importers:
version: 5.9.3
vite:
specifier: ^8.0.3
version: 8.0.16(@types/node@24.13.0)(jiti@1.21.7)
version: 8.0.16(@types/node@24.12.4)(jiti@1.21.7)
vitest:
specifier: ^4.1.5
version: 4.1.6(@types/node@24.13.0)(@vitest/coverage-v8@4.1.6)(jsdom@28.1.0)(vite@8.0.16(@types/node@24.13.0)(jiti@1.21.7))
version: 4.1.6(@types/node@24.12.4)(@vitest/coverage-v8@4.1.6)(jsdom@28.1.0)(vite@8.0.16(@types/node@24.12.4)(jiti@1.21.7))
devfront:
dependencies:
@@ -318,8 +326,8 @@ importers:
specifier: ^1.60.0
version: 1.60.0
'@types/node':
specifier: ^25.7.0
version: 25.9.1
specifier: 24.12.4
version: 24.12.4
'@types/react':
specifier: ^19.2.14
version: 19.2.16
@@ -328,7 +336,7 @@ importers:
version: 19.2.3(@types/react@19.2.16)
'@vitejs/plugin-react':
specifier: ^6.0.1
version: 6.0.2(vite@8.0.16(@types/node@25.9.1)(jiti@1.21.7))
version: 6.0.2(vite@8.0.16(@types/node@24.12.4)(jiti@1.21.7))
'@vitest/coverage-v8':
specifier: 4.1.6
version: 4.1.6(vitest@4.1.6)
@@ -352,10 +360,10 @@ importers:
version: 6.0.3
vite:
specifier: ^8.0.14
version: 8.0.16(@types/node@25.9.1)(jiti@1.21.7)
version: 8.0.16(@types/node@24.12.4)(jiti@1.21.7)
vitest:
specifier: ^4.1.6
version: 4.1.6(@types/node@25.9.1)(@vitest/coverage-v8@4.1.6)(jsdom@28.1.0)(vite@8.0.16(@types/node@25.9.1)(jiti@1.21.7))
version: 4.1.6(@types/node@24.12.4)(@vitest/coverage-v8@4.1.6)(jsdom@28.1.0)(vite@8.0.16(@types/node@24.12.4)(jiti@1.21.7))
orgfront:
dependencies:
@@ -433,8 +441,8 @@ importers:
specifier: ^1.60.0
version: 1.60.0
'@types/node':
specifier: ^25.7.0
version: 25.9.1
specifier: 24.12.4
version: 24.12.4
'@types/react':
specifier: ^19.2.14
version: 19.2.16
@@ -443,7 +451,7 @@ importers:
version: 19.2.3(@types/react@19.2.16)
'@vitejs/plugin-react':
specifier: ^6.0.1
version: 6.0.2(vite@8.0.16(@types/node@25.9.1)(jiti@1.21.7))
version: 6.0.2(vite@8.0.16(@types/node@24.12.4)(jiti@1.21.7))
'@vitest/coverage-v8':
specifier: 4.1.6
version: 4.1.6(vitest@4.1.6)
@@ -467,10 +475,10 @@ importers:
version: 6.0.3
vite:
specifier: ^8.0.14
version: 8.0.16(@types/node@25.9.1)(jiti@1.21.7)
version: 8.0.16(@types/node@24.12.4)(jiti@1.21.7)
vitest:
specifier: 4.1.6
version: 4.1.6(@types/node@25.9.1)(@vitest/coverage-v8@4.1.6)(jsdom@28.1.0)(vite@8.0.16(@types/node@25.9.1)(jiti@1.21.7))
version: 4.1.6(@types/node@24.12.4)(@vitest/coverage-v8@4.1.6)(jsdom@28.1.0)(vite@8.0.16(@types/node@24.12.4)(jiti@1.21.7))
packages:
@@ -608,8 +616,8 @@ packages:
peerDependencies:
'@csstools/css-tokenizer': ^4.0.0
'@csstools/css-syntax-patches-for-csstree@1.1.5':
resolution: {integrity: sha512-oNjBvzLq2GPZtJphCjLqXow/cHySHSgtxvKZb7OqSZ/xHgw6NWNhfad+6AB9cLeVm6eA9d/qMll3JdEHjy6M+A==}
'@csstools/css-syntax-patches-for-csstree@1.1.4':
resolution: {integrity: sha512-wgsqt92b7C7tQhIdPNxj0n9zuUbQlvAuI1exyzeNrOKOi62SD7ren8zqszmpVREjAOqg8cD2FqYhQfAuKjk4sw==}
peerDependencies:
css-tree: ^3.2.1
peerDependenciesMeta:
@@ -1274,11 +1282,8 @@ packages:
'@types/history@4.7.11':
resolution: {integrity: sha512-qjDJRrmvBMiTx+jyLxvLfJU7UznFuokDv4f3WRuriHKERccVpFU+8XMQUAbDzoiJCsmexxRExQeMwwCdamSKDA==}
'@types/node@24.13.0':
resolution: {integrity: sha512-5vtOqGQr4NJKeEzV441FcOi2MeG9UTWq9LqVLGneDdu4vlX17H8kQ2PA2UmNwCUGPVDj4oBjNhS7ReVEIWJJrg==}
'@types/node@25.9.1':
resolution: {integrity: sha512-xfrlY7UD5rMJk3ZVJP8BNzS28J36YJg+xp+LPXV1TdWxr8uMH5A860QNxYDGQe/ylDSgjxE52Q9VnO7p75tJxg==}
'@types/node@24.12.4':
resolution: {integrity: sha512-GUUEShf+PBCGW2KaXwcIt3Yk+e3pkKwWKb9GSyM9WQVE+ep2jzmHdGsHzu4wgcZy5fN9FBdVzjpBQsYlpfpgLA==}
'@types/react-dom@19.2.3':
resolution: {integrity: sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==}
@@ -1587,8 +1592,8 @@ packages:
resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
engines: {node: '>= 0.4'}
electron-to-chromium@1.5.367:
resolution: {integrity: sha512-4Mk/mrynCNQ+atY40D3UpmhLWB6AHMbYMlIrPhHcMF6x0L7O0b052FCAsxw1LlaR++UFuNg3D/A6XCuGDa0guQ==}
electron-to-chromium@1.5.360:
resolution: {integrity: sha512-GkcBt6YYAw9SxFWn+xVar4cLVGlXVuswwtRLBozi2zp0GjXs4ZnOrqV4zbXzg35n7w81hCkyJNYicgXlVHAmBA==}
entities@8.0.0:
resolution: {integrity: sha512-zwfzJecQ/Uej6tusMqwAqU/6KL2XaB2VZ2Jg54Je6ahNBGNH6Ek6g3jjNCF0fG9EWQKGZNddNjU5F1ZQn/sBnA==}
@@ -2282,14 +2287,11 @@ packages:
engines: {node: '>=14.17'}
hasBin: true
undici-types@7.18.2:
resolution: {integrity: sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==}
undici-types@7.16.0:
resolution: {integrity: sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==}
undici-types@7.24.6:
resolution: {integrity: sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==}
undici@7.27.1:
resolution: {integrity: sha512-UDdpiex+mzigiyrXrGbiUaF4HzTNhKbh2vRNFaTMzcqmLIPrZxaCtwo/1TMSuWoM1Xz3WiTo9KdgI3kRqYzJGg==}
undici@7.26.0:
resolution: {integrity: sha512-3O9Tf67pGhgOv9jM35AbhkXAKi13f3oy3aE4CSgr+TckGeY+/iu97ZXN+J7DpHPzLbVApFd1IFhcnBjREYXYcg==}
engines: {node: '>=20.18.1'}
update-browserslist-db@1.2.3:
@@ -2331,7 +2333,7 @@ packages:
engines: {node: ^20.19.0 || >=22.12.0}
hasBin: true
peerDependencies:
'@types/node': ^20.19.0 || >=22.12.0
'@types/node': 24.12.4
'@vitejs/devtools': ^0.1.18
esbuild: ^0.27.0 || ^0.28.0
jiti: '>=1.21.0'
@@ -2376,7 +2378,7 @@ packages:
peerDependencies:
'@edge-runtime/vm': '*'
'@opentelemetry/api': ^1.9.0
'@types/node': ^20.0.0 || ^22.0.0 || >=24.0.0
'@types/node': 24.12.4
'@vitest/browser-playwright': 4.1.6
'@vitest/browser-preview': 4.1.6
'@vitest/browser-webdriverio': 4.1.6
@@ -2567,7 +2569,7 @@ snapshots:
dependencies:
'@csstools/css-tokenizer': 4.0.0
'@csstools/css-syntax-patches-for-csstree@1.1.5(css-tree@3.2.1)':
'@csstools/css-syntax-patches-for-csstree@1.1.4(css-tree@3.2.1)':
optionalDependencies:
css-tree: 3.2.1
@@ -3178,13 +3180,9 @@ snapshots:
'@types/history@4.7.11': {}
'@types/node@24.13.0':
'@types/node@24.12.4':
dependencies:
undici-types: 7.18.2
'@types/node@25.9.1':
dependencies:
undici-types: 7.24.6
undici-types: 7.16.0
'@types/react-dom@19.2.3(@types/react@19.2.16)':
dependencies:
@@ -3205,15 +3203,10 @@ snapshots:
dependencies:
csstype: 3.2.3
'@vitejs/plugin-react@6.0.2(vite@8.0.16(@types/node@24.13.0)(jiti@1.21.7))':
'@vitejs/plugin-react@6.0.2(vite@8.0.16(@types/node@24.12.4)(jiti@1.21.7))':
dependencies:
'@rolldown/pluginutils': 1.0.1
vite: 8.0.16(@types/node@24.13.0)(jiti@1.21.7)
'@vitejs/plugin-react@6.0.2(vite@8.0.16(@types/node@25.9.1)(jiti@1.21.7))':
dependencies:
'@rolldown/pluginutils': 1.0.1
vite: 8.0.16(@types/node@25.9.1)(jiti@1.21.7)
vite: 8.0.16(@types/node@24.12.4)(jiti@1.21.7)
'@vitest/coverage-v8@4.1.6(vitest@4.1.6)':
dependencies:
@@ -3227,7 +3220,7 @@ snapshots:
obug: 2.1.1
std-env: 4.1.0
tinyrainbow: 3.1.0
vitest: 4.1.6(@types/node@25.9.1)(@vitest/coverage-v8@4.1.6)(jsdom@28.1.0)(vite@8.0.16(@types/node@25.9.1)(jiti@1.21.7))
vitest: 4.1.6(@types/node@24.12.4)(@vitest/coverage-v8@4.1.6)(jsdom@28.1.0)(vite@8.0.16(@types/node@24.12.4)(jiti@1.21.7))
'@vitest/expect@4.1.6':
dependencies:
@@ -3238,21 +3231,13 @@ snapshots:
chai: 6.2.2
tinyrainbow: 3.1.0
'@vitest/mocker@4.1.6(vite@8.0.16(@types/node@24.13.0)(jiti@1.21.7))':
'@vitest/mocker@4.1.6(vite@8.0.16(@types/node@24.12.4)(jiti@1.21.7))':
dependencies:
'@vitest/spy': 4.1.6
estree-walker: 3.0.3
magic-string: 0.30.21
optionalDependencies:
vite: 8.0.16(@types/node@24.13.0)(jiti@1.21.7)
'@vitest/mocker@4.1.6(vite@8.0.16(@types/node@25.9.1)(jiti@1.21.7))':
dependencies:
'@vitest/spy': 4.1.6
estree-walker: 3.0.3
magic-string: 0.30.21
optionalDependencies:
vite: 8.0.16(@types/node@25.9.1)(jiti@1.21.7)
vite: 8.0.16(@types/node@24.12.4)(jiti@1.21.7)
'@vitest/pretty-format@4.1.6':
dependencies:
@@ -3379,7 +3364,7 @@ snapshots:
dependencies:
baseline-browser-mapping: 2.10.33
caniuse-lite: 1.0.30001793
electron-to-chromium: 1.5.367
electron-to-chromium: 1.5.360
node-releases: 2.0.47
update-browserslist-db: 1.2.3(browserslist@4.28.2)
@@ -3436,7 +3421,7 @@ snapshots:
cssstyle@6.2.0:
dependencies:
'@asamuzakjp/css-color': 5.1.11
'@csstools/css-syntax-patches-for-csstree': 1.1.5(css-tree@3.2.1)
'@csstools/css-syntax-patches-for-csstree': 1.1.4(css-tree@3.2.1)
css-tree: 3.2.1
lru-cache: 11.5.1
@@ -3513,7 +3498,7 @@ snapshots:
es-errors: 1.3.0
gopd: 1.2.0
electron-to-chromium@1.5.367: {}
electron-to-chromium@1.5.360: {}
entities@8.0.0: {}
@@ -3709,7 +3694,7 @@ snapshots:
saxes: 6.0.0
symbol-tree: 3.2.4
tough-cookie: 6.0.1
undici: 7.27.1
undici: 7.26.0
w3c-xmlserializer: 5.0.0
webidl-conversions: 8.0.1
whatwg-mimetype: 5.0.0
@@ -4145,11 +4130,9 @@ snapshots:
typescript@6.0.3: {}
undici-types@7.18.2: {}
undici-types@7.16.0: {}
undici-types@7.24.6: {}
undici@7.27.1: {}
undici@7.26.0: {}
update-browserslist-db@1.2.3(browserslist@4.28.2):
dependencies:
@@ -4178,7 +4161,7 @@ snapshots:
util-deprecate@1.0.2: {}
vite@8.0.16(@types/node@24.13.0)(jiti@1.21.7):
vite@8.0.16(@types/node@24.12.4)(jiti@1.21.7):
dependencies:
lightningcss: 1.32.0
picomatch: 4.0.4
@@ -4186,26 +4169,14 @@ snapshots:
rolldown: 1.0.3
tinyglobby: 0.2.17
optionalDependencies:
'@types/node': 24.13.0
'@types/node': 24.12.4
fsevents: 2.3.3
jiti: 1.21.7
vite@8.0.16(@types/node@25.9.1)(jiti@1.21.7):
dependencies:
lightningcss: 1.32.0
picomatch: 4.0.4
postcss: 8.5.15
rolldown: 1.0.3
tinyglobby: 0.2.17
optionalDependencies:
'@types/node': 25.9.1
fsevents: 2.3.3
jiti: 1.21.7
vitest@4.1.6(@types/node@24.13.0)(@vitest/coverage-v8@4.1.6)(jsdom@28.1.0)(vite@8.0.16(@types/node@24.13.0)(jiti@1.21.7)):
vitest@4.1.6(@types/node@24.12.4)(@vitest/coverage-v8@4.1.6)(jsdom@28.1.0)(vite@8.0.16(@types/node@24.12.4)(jiti@1.21.7)):
dependencies:
'@vitest/expect': 4.1.6
'@vitest/mocker': 4.1.6(vite@8.0.16(@types/node@24.13.0)(jiti@1.21.7))
'@vitest/mocker': 4.1.6(vite@8.0.16(@types/node@24.12.4)(jiti@1.21.7))
'@vitest/pretty-format': 4.1.6
'@vitest/runner': 4.1.6
'@vitest/snapshot': 4.1.6
@@ -4222,39 +4193,10 @@ snapshots:
tinyexec: 1.2.4
tinyglobby: 0.2.17
tinyrainbow: 3.1.0
vite: 8.0.16(@types/node@24.13.0)(jiti@1.21.7)
vite: 8.0.16(@types/node@24.12.4)(jiti@1.21.7)
why-is-node-running: 2.3.0
optionalDependencies:
'@types/node': 24.13.0
'@vitest/coverage-v8': 4.1.6(vitest@4.1.6)
jsdom: 28.1.0
transitivePeerDependencies:
- msw
vitest@4.1.6(@types/node@25.9.1)(@vitest/coverage-v8@4.1.6)(jsdom@28.1.0)(vite@8.0.16(@types/node@25.9.1)(jiti@1.21.7)):
dependencies:
'@vitest/expect': 4.1.6
'@vitest/mocker': 4.1.6(vite@8.0.16(@types/node@25.9.1)(jiti@1.21.7))
'@vitest/pretty-format': 4.1.6
'@vitest/runner': 4.1.6
'@vitest/snapshot': 4.1.6
'@vitest/spy': 4.1.6
'@vitest/utils': 4.1.6
es-module-lexer: 2.1.0
expect-type: 1.3.0
magic-string: 0.30.21
obug: 2.1.1
pathe: 2.0.3
picomatch: 4.0.4
std-env: 4.1.0
tinybench: 2.9.0
tinyexec: 1.2.4
tinyglobby: 0.2.17
tinyrainbow: 3.1.0
vite: 8.0.16(@types/node@25.9.1)(jiti@1.21.7)
why-is-node-running: 2.3.0
optionalDependencies:
'@types/node': 25.9.1
'@types/node': 24.12.4
'@vitest/coverage-v8': 4.1.6(vitest@4.1.6)
jsdom: 28.1.0
transitivePeerDependencies: