hipowered.dev/lucide
1
0
Fork 0
mirror of https://github.com/lucide-icons/lucide.git synced 2026-11-10 13:18:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(deps): Fix security vulnerabilities alerts (#5147)

Browse Source 
* Upgrade deps

* Fix security alerts

* Keep incompatible consumers off minimatch 11 and file-type 21

The security overrides forced minimatch 11 and file-type 21 onto every
consumer, which broke ESLint (eslint-plugin-import-x imports the removed
makeRe) and the font build (jimp 0.22 calls file-type's removed
fromBuffer). glob 7 and @eslint/eslintrc also rely on the minimatch 3
callable export. Scope those consumers back to their compatible lines.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Remove minimatch override

* Fix font build

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Eric Fennis
2026-11-02 20:58:02 +01:00
committed by GitHub
co-authored by Claude Opus 5.5
parent 58c85b4758
commit 4b203ec9b6
6 changed files with 149 additions and 273 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/package.json
+1 -1
View File
@@ -42,7 +42,7 @@
"h3": "^1.15.11",
"markdown-it": "^15.0.3",
"markdown-it-container": "^4.0.0",
"nitropack": "^2.13.4",
"nitropack": "^2.13.5",
"rollup-plugin-copy": "^3.5.0",
"semver": "^7.8.5",
"sharp": "^0.35.5",
integrations/lucide-solid/solid-start/package.json
+1 -1
View File
@@ -15,7 +15,7 @@
"@solidjs/start": "2.0.5",
"lucide-solid": "workspace:*",
"nitro": "3.0.260903-beta",
"solid-js": "1.9.15"
"solid-js": "1.9.18"
},
"devDependencies": {
"@vitest/browser-playwright": "5.0.5",
integrations/lucide-solid/vite/package.json
+1 -1
View File
@@ -11,7 +11,7 @@
},
"dependencies": {
"lucide-solid": "workspace:*",
"solid-js": "1.9.15"
"solid-js": "1.9.18"
},
"devDependencies": {
"@vitest/browser-playwright": "5.0.5",
packages/lucide-solid/package.json
+1 -1
View File
@@ -82,7 +82,7 @@
"jest-serializer-html": "^7.1.0",
"rollup": "^4.65.1",
"rollup-plugin-dts": "^6.5.1",
"solid-js": "^1.9.15",
"solid-js": "^1.9.18",
"typescript": "^6.0.3",
"vite": "^8.3.5",
"vite-plugin-solid": "^2.11.15"
pnpm-lock.yaml
Generated
+137 -263
View File
File diff suppressed because it is too large Load Diff
pnpm-workspace.yaml
+8 -6
View File
@@ -14,8 +14,14 @@ overrides:
webpack-dev-middleware: ^5.3.4
vitest: '5.0.5'
vite: '^8.3.3'
minimatch@>=9.0.0 <9.0.6: ^9.0.6
minimatch@>=9.0.0 <9.0.7: ^9.0.7
zod@<4.6.6: ^4.6.6
brace-expansion@<1.1.21: ^1.1.21
decode-uri-component@<=0.5.0: ^0.5.1
deepmerge@>=4.2.0 <=4.3.1: ^4.3.1
file-type@>=13.0.0 <21.3.1: ^21.3.1
'@jimp/core>file-type': ^16.5.4
glob@>=9.0.0 <=14.0.1: ^14.0.2
hono@>=4.12.4 <4.13.11: ^4.13.11
allowBuilds:
'@parcel/watcher': false
@@ -29,7 +35,3 @@ allowBuilds:
ttf2woff2: false
unrs-resolver: false
vue-demi: false
minimumReleaseAgeExclude:
- decode-uri-component@0.4.3
- deepmerge@4.3.2