From ca3d4b0d5bbcee4fe50f05da9dccda78f89b53f5 Mon Sep 17 00:00:00 2001 From: Ajay Jadhav Date: Sun, 18 Oct 2026 22:25:30 +0530 Subject: [PATCH] chore(security): remediate remaining transitive advisories via overrides Updates the pnpm.overrides block to current advisory fix floors and refreshes direct dependencies. Several existing pins had themselves become the vulnerable versions (brace-expansion 2.1.4, handlebars 4.7.9, fast-uri 3.1.6), so they are bumped forward; new pins cover proxy-addr (critical), qs, ws, engine.io, micromatch, yaml, the nested axios 0.x copy (via @sendgrid/client), @fastify/busboy, @grpc/grpc-js and the stale @opentelemetry/core duplicates. The ip-address pin is dropped: its only vectors left the tree with html-pdf/puppeteer. Direct deps refreshed within range: nodemailer (>=10.0.9 fixes), moment (2.31.0), firebase-admin (clears node-forge), axios 1.x and the @opentelemetry/* family (unifies core >=2.8.0). pnpm audit: 70 -> 3 advisories across the full backlog series (this batch: 59 -> 3). Remaining are the documented accepted risks in .github/dependabot.yml: aws-sdk v2 (EOL, migration tracked separately), uuid (fix is ESM-only, blocked by the ignore rule) and braces (no upstream fix, dev-only chain). Jest: 19/19 suites, 233/233 tests. Signed-off-by: Ajay Jadhav --- .github/dependabot.yml | 17 ++ apps/notification/package.json | 2 +- package.json | 31 ++-- pnpm-lock.yaml | 310 ++++++++++++++++----------------- 4 files changed, 192 insertions(+), 168 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index ab6a4cdb2..a27f50bb8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -57,6 +57,23 @@ updates: - "version-update:semver-minor" - "version-update:semver-patch" + # --- Accepted risks (security-backlog remediation, 2026-10) --- + # `pnpm audit` went from 70 advisories to the 3 below. They cannot be + # closed by a version bump and are consciously accepted: + # * aws-sdk (v2, root + libs/storage): EOL, upstream issued no patched + # release; migration to the v3 @aws-sdk/* clients is tracked + # separately (@aws-sdk/client-ses is already on v3). Low severity. + # * uuid: a patched release exists (>=11.1.1) but 11+ is ESM-only and + # breaks the CommonJS jest runtime — see the ignore rule above. + # Moderate severity; re-evaluate with the ESM migration. + # * braces: upstream advisory has no patched version; dev-only chain + # (eslint / typescript-eslint), not part of the runtime dependency + # graph. High severity, accepted until upstream ships a fix. + # (request, extract-zip, node-forge and the old handlebars/critical + # paths were cleared by removing the unused html-pdf, puppeteer and + # node-html-to-image dependencies — see pnpm.overrides in package.json + # for the transitive pins.) + labels: - "dependencies" - "pnpm" diff --git a/apps/notification/package.json b/apps/notification/package.json index ec5ff9b37..18d0fec30 100644 --- a/apps/notification/package.json +++ b/apps/notification/package.json @@ -4,6 +4,6 @@ "private": true, "type": "module", "dependencies": { - "firebase-admin": "^13.6.0" + "firebase-admin": "^13.10.0" } } \ No newline at end of file diff --git a/package.json b/package.json index 1a595af86..4e4a8b6bb 100644 --- a/package.json +++ b/package.json @@ -42,13 +42,13 @@ "@nestjs/swagger": "catalog:", "@nestjs/typeorm": "catalog:", "@nestjs/websockets": "catalog:", - "@opentelemetry/api": "^1.9.0", + "@opentelemetry/api": "^1.9.1", "@opentelemetry/exporter-logs-otlp-http": "^0.202.0", "@opentelemetry/exporter-trace-otlp-http": "^0.202.0", "@opentelemetry/instrumentation-express": "^0.51.1", "@opentelemetry/instrumentation-http": "^0.202.0", "@opentelemetry/instrumentation-nestjs-core": "^0.48.1", - "@opentelemetry/resources": "^2.5.1", + "@opentelemetry/resources": "^2.12.0", "@opentelemetry/sdk-logs": "^0.202.0", "@opentelemetry/sdk-node": "^0.221.0", "@opentelemetry/semantic-conventions": "^1.39.0", @@ -77,7 +77,7 @@ "dotenv": "^16.6.1", "express": "^5.2.1", "express-useragent": "^1.0.15", - "firebase-admin": "^13.6.1", + "firebase-admin": "^13.10.0", "fs": "0.0.1-security", "generate-password": "^1.7.1", "helmet": "^8.1.0", @@ -86,7 +86,7 @@ "jsonwebtoken": "^9.0.3", "jwks-rsa": "^3.2.2", "linebyline": "^1.3.0", - "moment": "^2.30.1", + "moment": "^2.31.0", "morgan": "^1.12.1", "multer": "^2.4.0", "nanoid": "^5.1.16", @@ -96,7 +96,7 @@ "nestjs-supabase-auth": "catalog:", "nestjs-typeorm-paginate": "catalog:", "node-qpdf2": "^2.0.0", - "nodemailer": "^10.0.2", + "nodemailer": "^10.1.6", "p-limit": "^3.1.0", "papaparse": "^5.5.4", "passport": "^0.6.0", @@ -205,16 +205,27 @@ }, "pnpm": { "overrides": { - "brace-expansion@2": "2.1.4", + "brace-expansion@2": "2.1.7", + "brace-expansion@5": "5.0.12", "tar-fs@>=3.0.0 <3.1.1": "3.1.3", - "ip-address@<=10.3.0": "10.5.0", "websocket-driver@<0.7.5": "0.7.5", - "handlebars@<4.7.9": "4.7.9", - "fast-uri@<3.1.6": "3.1.6", + "handlebars@<4.7.10": "4.7.10", + "fast-uri@<3.1.8": "3.1.8", "js-yaml@<4.3.2": "4.3.2", + "js-yaml@^5": "5.4.1", "minimatch@<9.0.7": "9.0.9", "form-data@<2.5.6": "2.5.6", - "@babel/core@<7.29.6": "7.29.6" + "@babel/core@<7.29.6": "7.29.6", + "proxy-addr@<2.0.8": "2.0.8", + "qs@<6.16.0": "6.16.0", + "ws@<8.21.0": "8.21.3", + "engine.io@<6.6.10": "6.6.10", + "micromatch@<4.0.8": "4.0.8", + "yaml@<2.8.3": "2.9.0", + "axios@<0.34.0": "0.34.0", + "@fastify/busboy@<3.2.2": "3.2.2", + "@grpc/grpc-js@<1.14.5": "1.14.5", + "@opentelemetry/core@<2.8.0": "2.10.0" } }, "packageManager": "pnpm@9.15.9+sha512.68046141893c66fad01c079231128e9afb89ef87e2691d69e4d40eee228988295fd4682181bae55b58418c3a253bde65a505ec7c5f9403ece5cc3cd37dcf2531", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 9d9526aa6..fbe8fe59b 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -74,16 +74,27 @@ catalogs: version: 4.1.0 overrides: - brace-expansion@2: 2.1.4 + brace-expansion@2: 2.1.7 + brace-expansion@5: 5.0.12 tar-fs@>=3.0.0 <3.1.1: 3.1.3 - ip-address@<=10.3.0: 10.5.0 websocket-driver@<0.7.5: 0.7.5 - handlebars@<4.7.9: 4.7.9 - fast-uri@<3.1.6: 3.1.6 + handlebars@<4.7.10: 4.7.10 + fast-uri@<3.1.8: 3.1.8 js-yaml@<4.3.2: 4.3.2 + js-yaml@^5: 5.4.1 minimatch@<9.0.7: 9.0.9 form-data@<2.5.6: 2.5.6 '@babel/core@<7.29.6': 7.29.6 + proxy-addr@<2.0.8: 2.0.8 + qs@<6.16.0: 6.16.0 + ws@<8.21.0: 8.21.3 + engine.io@<6.6.10: 6.6.10 + micromatch@<4.0.8: 4.0.8 + yaml@<2.8.3: 2.9.0 + axios@<0.34.0: 0.34.0 + '@fastify/busboy@<3.2.2': 3.2.2 + '@grpc/grpc-js@<1.14.5': 1.14.5 + '@opentelemetry/core@<2.8.0': 2.10.0 importers: @@ -115,7 +126,7 @@ importers: version: 11.0.2(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2)) '@nestjs/microservices': specifier: 'catalog:' - version: 11.2.7(@grpc/grpc-js@1.14.4)(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/websockets@11.2.7)(cache-manager@5.7.6)(ioredis@5.10.1)(nats@2.29.3)(reflect-metadata@0.1.14)(rxjs@7.8.2) + version: 11.2.7(@grpc/grpc-js@1.14.5)(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/websockets@11.2.7)(cache-manager@5.7.6)(ioredis@5.10.1)(nats@2.29.3)(reflect-metadata@0.1.14)(rxjs@7.8.2) '@nestjs/passport': specifier: 'catalog:' version: 11.0.5(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(passport@0.6.0) @@ -138,7 +149,7 @@ importers: specifier: 'catalog:' version: 11.2.7(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/platform-socket.io@11.2.7)(reflect-metadata@0.1.14)(rxjs@7.8.2) '@opentelemetry/api': - specifier: ^1.9.0 + specifier: ^1.9.1 version: 1.9.1 '@opentelemetry/exporter-logs-otlp-http': specifier: ^0.202.0 @@ -156,8 +167,8 @@ importers: specifier: ^0.48.1 version: 0.48.1(@opentelemetry/api@1.9.1) '@opentelemetry/resources': - specifier: ^2.5.1 - version: 2.7.1(@opentelemetry/api@1.9.1) + specifier: ^2.12.0 + version: 2.12.0(@opentelemetry/api@1.9.1) '@opentelemetry/sdk-logs': specifier: ^0.202.0 version: 0.202.0(@opentelemetry/api@1.9.1) @@ -243,8 +254,8 @@ importers: specifier: ^1.0.15 version: 1.0.15 firebase-admin: - specifier: ^13.6.1 - version: 13.8.0 + specifier: ^13.10.0 + version: 13.10.0 fs: specifier: 0.0.1-security version: 0.0.1-security @@ -270,8 +281,8 @@ importers: specifier: ^1.3.0 version: 1.3.0 moment: - specifier: ^2.30.1 - version: 2.30.1 + specifier: ^2.31.0 + version: 2.31.0 morgan: specifier: ^1.12.1 version: 1.12.1 @@ -300,8 +311,8 @@ importers: specifier: ^2.0.0 version: 2.0.0 nodemailer: - specifier: ^10.0.2 - version: 10.0.2 + specifier: ^10.1.6 + version: 10.1.6 p-limit: specifier: ^3.1.0 version: 3.1.0 @@ -472,8 +483,8 @@ importers: apps/notification: dependencies: firebase-admin: - specifier: ^13.6.0 - version: 13.8.0 + specifier: ^13.10.0 + version: 13.10.0 libs/common: dependencies: @@ -491,7 +502,7 @@ importers: version: 11.2.7(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/microservices@11.2.7)(@nestjs/platform-express@11.2.7)(@nestjs/websockets@11.2.7)(reflect-metadata@0.1.14)(rxjs@7.8.2) '@nestjs/microservices': specifier: 'catalog:' - version: 11.2.7(@grpc/grpc-js@1.14.4)(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/websockets@11.2.7)(cache-manager@5.7.6)(ioredis@5.10.1)(nats@2.29.3)(reflect-metadata@0.1.14)(rxjs@7.8.2) + version: 11.2.7(@grpc/grpc-js@1.14.5)(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/websockets@11.2.7)(cache-manager@5.7.6)(ioredis@5.10.1)(nats@2.29.3)(reflect-metadata@0.1.14)(rxjs@7.8.2) '@nestjs/swagger': specifier: 'catalog:' version: 11.4.6(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14) @@ -546,7 +557,7 @@ importers: version: 11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2) '@nestjs/microservices': specifier: 'catalog:' - version: 11.2.7(@grpc/grpc-js@1.14.4)(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/websockets@11.2.7)(cache-manager@5.7.6)(ioredis@5.10.1)(nats@2.29.3)(reflect-metadata@0.1.14)(rxjs@7.8.2) + version: 11.2.7(@grpc/grpc-js@1.14.5)(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/websockets@11.2.7)(cache-manager@5.7.6)(ioredis@5.10.1)(nats@2.29.3)(reflect-metadata@0.1.14)(rxjs@7.8.2) '@nestjs/testing': specifier: 'catalog:' version: 11.2.7(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/microservices@11.2.7)(@nestjs/platform-express@11.2.7) @@ -948,8 +959,8 @@ packages: resolution: {integrity: sha512-d9zaMRSTIKDLhctzH12MtXvJKSSUhaHcjV+2Z+GK+EEY7XKpP5yR4x+N3TAcHTcu963nIr+TMcCb4DBCYX1z6Q==} engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0} - '@fastify/busboy@3.2.0': - resolution: {integrity: sha512-m9FVDXU3GT2ITSe0UaMA5rU3QkfC/UXtCU8y0gSN/GugTqtVldOBWIB5V6V3sbmenVZUIpU6f+mPEO2+m5iTaA==} + '@fastify/busboy@3.2.2': + resolution: {integrity: sha512-yXSS27qPExaXeuLvMRMXOLtpipzfQYNjG3FkunDWKGfMYjKuhFXko9CVzqxm8jcF+lmtS9Fd89QNdh9XDjnbNg==} '@firebase/app-check-interop-types@0.3.3': resolution: {integrity: sha512-gAlxfPLT2j8bTI/qfe3ahl2I2YcBQ8cFIBdhAQA4I2f3TndcO+22YizyGYuttLHPQEpWkhmpFW60VCFEPg4g5A==} @@ -1003,8 +1014,8 @@ packages: resolution: {integrity: sha512-n2FjE7NAOYyshogdc7KQOl/VZb4sneqPjWouSyia9CMDdMhRX5+RIbqalNmC7LOLzuLAN89VlF2HvG8na9G+zQ==} engines: {node: '>=14'} - '@grpc/grpc-js@1.14.4': - resolution: {integrity: sha512-k9Dj3DV/itK9D06Y8f190Qgop7/Ui+D0njFV3LHMPwPT75DpXLQohE9Wmz0QElrJnzsjB7KPWiKJbOl7IPDArQ==} + '@grpc/grpc-js@1.14.5': + resolution: {integrity: sha512-7VZM+SVdEcUUqSQeNI3zM8Qs/BhQKZndPo2h5VkYkAM8Iz0wJIa8mKV5ekQGqG8UUsnkQ0NMxIxwkIHYvj0qOw==} engines: {node: '>=12.10.0'} '@grpc/proto-loader@0.7.15': @@ -1416,7 +1427,7 @@ packages: '@nestjs/microservices@11.2.7': resolution: {integrity: sha512-vlrg1GdmALCYwJ6SUAtdd1m2oCw4fUd1mSe7tlrAReDMJCm8hAYNl/2ZNsspg5QQyvD5MXNopakHh0ak+TfT4w==} peerDependencies: - '@grpc/grpc-js': '*' + '@grpc/grpc-js': 1.14.5 '@nestjs/common': ^11.0.0 '@nestjs/core': ^11.0.0 '@nestjs/websockets': ^11.0.0 @@ -1577,20 +1588,14 @@ packages: peerDependencies: '@opentelemetry/api': '>=1.0.0 <1.10.0' - '@opentelemetry/core@2.0.1': - resolution: {integrity: sha512-MaZk9SJIDgo1peKevlbhP6+IwIiNPNmswNL4AF0WaQJLbHXjr9SrZMgS12+iqr9ToV4ZVosCcc0f8Rg67LXjxw==} - engines: {node: ^18.19.0 || >=20.6.0} - peerDependencies: - '@opentelemetry/api': '>=1.0.0 <1.10.0' - '@opentelemetry/core@2.10.0': resolution: {integrity: sha512-/wNZ8twnEQQA4HoHu22+vcsdru6pWPWxW+7w+FlxT6Id7PE/WIbZmVKkte+PF72e0F2dnImFeHD2syyE1Mw6MQ==} engines: {node: ^18.19.0 || >=20.6.0} peerDependencies: '@opentelemetry/api': '>=1.0.0 <1.10.0' - '@opentelemetry/core@2.7.1': - resolution: {integrity: sha512-QAqIj32AtK6+pEVNG7EOVxHdE06RP+FM5qpiEJ4RtDcFIqKUZHYhl7/7UY5efhwmwNAg7j8QbJVBLxMerc0+gw==} + '@opentelemetry/core@2.12.0': + resolution: {integrity: sha512-1HsSAuvT4/my0QrXWsyXFdWjKaPeCHsismKZgEEIb8NK13LP6DrMRlsUbvD/0F9mDWK3xDom9AMv3IscxgOnOQ==} engines: {node: ^18.19.0 || >=20.6.0} peerDependencies: '@opentelemetry/api': '>=1.0.0 <1.10.0' @@ -1757,8 +1762,8 @@ packages: peerDependencies: '@opentelemetry/api': '>=1.3.0 <1.10.0' - '@opentelemetry/resources@2.7.1': - resolution: {integrity: sha512-DeT6KKolmC4e/dRQvMQ/RwlnzhaqeiFOXY5ngoOPJ07GgVVKxZOg9EcrNZb5aTzUn+iCrJldAgOfQm1O/QfPAQ==} + '@opentelemetry/resources@2.12.0': + resolution: {integrity: sha512-+rSRoOdln6NhXTVcBdHSlZxJDNzwxadeweK2ltZO3tVtfp6aklABc06xclDk6ovRR+EiGgIcSbh/6NgjFhnb3A==} engines: {node: ^18.19.0 || >=20.6.0} peerDependencies: '@opentelemetry/api': '>=1.3.0 <1.10.0' @@ -2302,6 +2307,9 @@ packages: '@types/ws@8.18.1': resolution: {integrity: sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==} + '@types/ws@8.18.2': + resolution: {integrity: sha512-67MQl+fpWKVTT1NYdnmo3U4sc/xPo/zQBncVnI74qmQa0z/b+1g6iYqNmGCPbxO+zz2aklb08a0oHfegiVd0/w==} + '@types/yargs-parser@21.0.3': resolution: {integrity: sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==} @@ -2656,8 +2664,8 @@ packages: engines: {node: '>= 10.0.0'} deprecated: The AWS SDK for JavaScript (v2) has reached end-of-support, and no longer receives updates. Please migrate your code to use AWS SDK for JavaScript (v3). More info https://a.co/cUPnyil - axios@0.26.1: - resolution: {integrity: sha512-fPwcX4EvnSHuInCMItEhAGnaSEXRBjtzh9fOtsE6E1G6p7vl7edEeZe11QHf18+6+9gR5PbKV/sGKNaD8YaMeA==} + axios@0.34.0: + resolution: {integrity: sha512-CkOmqy7BaT4VC9+wRUmSM3LVwCkKK3UYc7koEqIHWRpOTJypwdNctaVOgnOjhHP3599Ubq2K8KqYwfC7c8NdPQ==} axios@1.20.0: resolution: {integrity: sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==} @@ -2747,11 +2755,11 @@ packages: bowser@2.14.1: resolution: {integrity: sha512-tzPjzCxygAKWFOJP011oxFHs57HzIhOEracIgAePE4pqB3LikALKnSzUyU4MGs9/iCEUuHlAJTjTc5M+u7YEGg==} - brace-expansion@2.1.4: - resolution: {integrity: sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==} + brace-expansion@2.1.7: + resolution: {integrity: sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==} - brace-expansion@5.0.9: - resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==} + brace-expansion@5.0.12: + resolution: {integrity: sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==} engines: {node: 20 || >=22} braces@3.0.3: @@ -3262,8 +3270,8 @@ packages: resolution: {integrity: sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q==} engines: {node: '>=10.0.0'} - engine.io@6.6.9: - resolution: {integrity: sha512-clKkw4C7nJ22mGgoVcCg6V/W/TxdNyIOTr89k2ONZu81qqkddPFDF0LXcbAwhzPD8DjkiRCjzuiO6Y+fkpD4vg==} + engine.io@6.6.10: + resolution: {integrity: sha512-9/lX2bdlizlCXMHRMOIm03VBQHQYC7VvydcxtTAUJRxNW1QzM/2PMFSmr6h/lCiMHcyCP6abK+t9Q+j4vekk8Q==} engines: {node: '>=10.2.0'} enhanced-resolve@5.21.0: @@ -3559,8 +3567,8 @@ packages: fast-sha256@1.3.0: resolution: {integrity: sha512-n11RGP/lrWEFI/bWdygLxhI+pVeo1ZYIVwvvPkW7azl/rOy+F3HYRZ2K5zeE9mmkhQppyv9sQFx0JM9UabnpPQ==} - fast-uri@3.1.6: - resolution: {integrity: sha512-7Ical1vFEMr0onbVzEDIreM22I4khW+fzyQPwvAFWBp1iwdshSZRsL4jjRvPG9JP1uiqMHRto+YU6R2/CzDz5Q==} + fast-uri@3.1.8: + resolution: {integrity: sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==} fast-xml-builder@1.1.9: resolution: {integrity: sha512-jcyKVSEX13iseJqg7n/KWw+xnu/7fdrZ333Fac54KjHDIELVCfDDJXYIm6DTJ0Su4gSzrhqiK0DzY/wZbF40mw==} @@ -3617,8 +3625,8 @@ packages: resolution: {integrity: sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng==} engines: {node: '>=10'} - firebase-admin@13.8.0: - resolution: {integrity: sha512-iawoQkmZbsA+2DY5UEuB8f6jSlskzzySoye0D2F6e3zlDZX9DUcXf0HhZqLUn/P6WhLGvTf6ZtCmshZvhAgTYg==} + firebase-admin@13.10.0: + resolution: {integrity: sha512-rbuCrJvYRwqBqvbccMS8fj/x2zsaMisdf5RQbRzQzr14Rbq9r2UlpuBHqWAwrO6c9dIRF56xF/xoepXsD5yDuQ==} engines: {node: '>=18'} flat-cache@3.2.0: @@ -3640,6 +3648,15 @@ packages: debug: optional: true + follow-redirects@1.16.1: + resolution: {integrity: sha512-FNvFGzoMLWmE6Yj9spb/zjd7yiNCHiAW9/Tg9CXrQ8wuu32HtlJOwWO11OJafl5FfY3DxTdQ0vj42zU1kvv5jg==} + engines: {node: '>=4.0'} + peerDependencies: + debug: '*' + peerDependenciesMeta: + debug: + optional: true + fontkit@1.9.0: resolution: {integrity: sha512-HkW/8Lrk8jl18kzQHvAw9aTHe1cqsyx5sDnxncx652+CIfhawokEPkeM3BoIC+z/Xv7a0yMr0f3pRRwhGH455g==} @@ -3850,8 +3867,8 @@ packages: resolution: {integrity: sha512-pCcEwRi+TKpMlxAQObHDQ56KawURgyAf6jtIY046fJ5tIv3zDe/LEIubckAO8fj6JnAxLdmWkUfNyulQ2iKdEw==} engines: {node: '>=14.0.0'} - handlebars@4.7.9: - resolution: {integrity: sha512-4E71E0rpOaQuJR2A3xDZ+GM1HyWYv1clR58tC8emQNeQe3RH7MAzSbat+V0wG78LQBo6m6bzSG/L4pBuCsgnUQ==} + handlebars@4.7.10: + resolution: {integrity: sha512-P5VJMVM7qgBn6vjXMw8WG9uVI+ncf2pi72j4de4yz5ZULLj2RGqLYaKOYGsgyrViQ0tePOVlN1tDCCXXtFqXKg==} engines: {node: '>=0.4.7'} hasBin: true @@ -4328,8 +4345,8 @@ packages: resolution: {integrity: sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==} hasBin: true - js-yaml@5.2.1: - resolution: {integrity: sha512-zfLtNfQqxVqq3uaTqSkh4x4hZw3KHobGUA0fJUj4wawW8bsQLTVqpHdXSIzidh7o+4lEW36tANuAGdaFx6Zgnw==} + js-yaml@5.4.1: + resolution: {integrity: sha512-28R/k+NAjeuf7+CKlTxWZVExJGwVVLwY06DgEnOMz2gEpfNkDcD7QvyiVPT0xy0XXhU8vHsd4Ot42OOPdJG7dQ==} hasBin: true jsesc@3.1.0: @@ -4597,10 +4614,6 @@ packages: resolution: {integrity: sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==} engines: {node: '>= 0.6'} - micromatch@4.0.5: - resolution: {integrity: sha512-DMy+ERcEW2q8Z2Po+WNXuw3c5YaUSFjAO5GsJqfEl7UjvtIuFKO6ZrKvcItdy98dwFI2N1tg3zNIdKaQT+aNdA==} - engines: {node: '>=8.6'} - micromatch@4.0.8: resolution: {integrity: sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==} engines: {node: '>=8.6'} @@ -4664,8 +4677,8 @@ packages: module-details-from-path@1.0.4: resolution: {integrity: sha512-EGWKgxALGMgzvxYF1UyGTy0HXX/2vHLkw6+NvDKW2jypWbHpjQuj4UMcqQWXHERJhVGKikolT06G3bcKe4fi7w==} - moment@2.30.1: - resolution: {integrity: sha512-uEmtNhbDOrWPFS+hdjFCBfy9f2YoyzRpwcl+DqpC6taX21FzsTLQVbMV/W7PzNSX6x/bhC1zA3c2UQ5NzH6how==} + moment@2.31.0: + resolution: {integrity: sha512-0acOTfMiWOheYS4eoWb80yYMb/JLvVv9SHbs2PehaDzfUG0Bw855SKyk0IKTnPGa5+U2bmi3W68l1+sGLX/pvw==} morgan@1.12.1: resolution: {integrity: sha512-tljKC0ex20AjO58Ob/eZ53JloycbVswbVNCHx6V6VLGzqt/w8dIynVGL0G8qVjNKwiA7sYSogCrN6QtJ82IV+g==} @@ -4776,10 +4789,6 @@ packages: resolution: {integrity: sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA==} engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0} - node-forge@1.4.0: - resolution: {integrity: sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==} - engines: {node: '>= 6.13.0'} - node-gyp-build-optional-packages@5.2.2: resolution: {integrity: sha512-s+w+rBWnpTMwSFbaE0UXsRlg7hU4FjekKU4eyAih5T8nJuNZT1nNsskXpxmeqSK9UzkBl6UgRlnKc8hz8IEqOw==} hasBin: true @@ -4799,8 +4808,8 @@ packages: resolution: {integrity: sha512-D9UOmYG3UH1V+ENW56t5QXBwJw1YEY18ruVeus89Rw+SyIgjPkCO84bRzO3uNIYosJbNwiabWVn48o3uJLjxFQ==} engines: {node: '>=18'} - nodemailer@10.0.2: - resolution: {integrity: sha512-83mO0TnWXySiJXdMAIUYmlXYdJ2KUq/w8EJgc4ogKU2UssaHf7ZPeuHcb4YCxeNiM0DDshnm291U0/ClrSZZsg==} + nodemailer@10.1.6: + resolution: {integrity: sha512-8j/UEmA4AXr51URr3Ob0h+RCBtr0NKJ76Y2P9wJT6Eu3dRyruj2ULh2e6aiKrGg8nlUj1oX6N5h8dHA82EouaQ==} engines: {node: '>=20.0.0'} normalize-path@3.0.0: @@ -5132,10 +5141,17 @@ packages: resolution: {integrity: sha512-/FPD0nUc9jH6rfFjji9IBqOz4pcSE3CsT1m7Ep6Mdb0LxSUMj8hgl6GomOvZzpNpAqqGaXA0P3VSrZLFzIhQrw==} engines: {node: '>=12.0.0'} - proxy-addr@2.0.7: - resolution: {integrity: sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==} + protobufjs@7.6.6: + resolution: {integrity: sha512-dYDWdjSl5RNb7SgPxGQcRU+GtvP7s2fpkrY0r432PcOIaZ0/rBcxEZnQN67iJhFuQiVw754JDoPruPCNdGsbjg==} + engines: {node: '>=12.0.0'} + + proxy-addr@2.0.8: + resolution: {integrity: sha512-5nnx0yGyVUcY6t9RnWcARWtwT9F1D8O9rt08htPvnd49W1IgZtmLkhu9WfMzQj1cFxjHIO6connUNVW5k7AVyQ==} engines: {node: '>= 0.10'} + proxy-from-env@1.1.0: + resolution: {integrity: sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==} + proxy-from-env@2.1.0: resolution: {integrity: sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==} engines: {node: '>=10'} @@ -5155,10 +5171,6 @@ packages: engines: {node: '>=10.13.0'} hasBin: true - qs@6.15.3: - resolution: {integrity: sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==} - engines: {node: '>=0.6'} - qs@6.16.0: resolution: {integrity: sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==} engines: {node: '>=0.6'} @@ -6148,18 +6160,6 @@ packages: resolution: {integrity: sha512-7KxauUdBmSdWnmpaGFg+ppNjKF8uNLry8LyzjauQDOVONfFLNKrKvQOxZ/VuTIcS/gge/YNahf5RIIQWTSarlg==} engines: {node: ^12.13.0 || ^14.15.0 || >=16.0.0} - ws@8.20.0: - resolution: {integrity: sha512-sAt8BhgNbzCtgGbt2OxmpuryO63ZoDk/sqaB/znQm94T4fCEsy/yV+7CdC1kJhOU9lboAEU7R3kquuycDoibVA==} - engines: {node: '>=10.0.0'} - peerDependencies: - bufferutil: ^4.0.1 - utf-8-validate: '>=5.0.2' - peerDependenciesMeta: - bufferutil: - optional: true - utf-8-validate: - optional: true - ws@8.21.3: resolution: {integrity: sha512-201TZ/kPWxoPr/OKWjquZR1SWKXcvxdH+e1xrx89b3YbmzLMFCLfnaG1HFIgWzJOEWZ7MvpK++odZufgYR50Rw==} engines: {node: '>=10.0.0'} @@ -6205,10 +6205,6 @@ packages: yallist@4.0.0: resolution: {integrity: sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==} - yaml@2.3.1: - resolution: {integrity: sha512-2eHWfjaoXgTBC2jNM1LRef62VQa0umtvRiDSk6HSzW7RvS5YtkabJrwYLLEKWBc8a5U2PTSCs+dJjUTJdlHsWQ==} - engines: {node: '>= 14'} - yaml@2.9.0: resolution: {integrity: sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==} engines: {node: '>= 14.6'} @@ -6914,7 +6910,7 @@ snapshots: '@eslint/js@8.57.1': {} - '@fastify/busboy@3.2.0': {} + '@fastify/busboy@3.2.2': {} '@firebase/app-check-interop-types@0.3.3': {} @@ -7007,7 +7003,7 @@ snapshots: - supports-color optional: true - '@grpc/grpc-js@1.14.4': + '@grpc/grpc-js@1.14.5': dependencies: '@grpc/proto-loader': 0.8.1 '@js-sdsl/ordered-map': 4.4.2 @@ -7024,7 +7020,7 @@ snapshots: dependencies: lodash.camelcase: 4.3.0 long: 5.3.2 - protobufjs: 7.6.5 + protobufjs: 7.6.6 yargs: 17.7.3 '@humanwhocodes/config-array@0.13.0': @@ -7513,7 +7509,7 @@ snapshots: tslib: 2.8.1 uid: 2.0.2 optionalDependencies: - '@nestjs/microservices': 11.2.7(@grpc/grpc-js@1.14.4)(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/websockets@11.2.7)(cache-manager@5.7.6)(ioredis@5.10.1)(nats@2.29.3)(reflect-metadata@0.1.14)(rxjs@7.8.2) + '@nestjs/microservices': 11.2.7(@grpc/grpc-js@1.14.5)(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/websockets@11.2.7)(cache-manager@5.7.6)(ioredis@5.10.1)(nats@2.29.3)(reflect-metadata@0.1.14)(rxjs@7.8.2) '@nestjs/platform-express': 11.2.7(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7) '@nestjs/websockets': 11.2.7(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/platform-socket.io@11.2.7)(reflect-metadata@0.1.14)(rxjs@7.8.2) @@ -7531,7 +7527,7 @@ snapshots: class-transformer: 0.5.1 class-validator: 0.14.4 - '@nestjs/microservices@11.2.7(@grpc/grpc-js@1.14.4)(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/websockets@11.2.7)(cache-manager@5.7.6)(ioredis@5.10.1)(nats@2.29.3)(reflect-metadata@0.1.14)(rxjs@7.8.2)': + '@nestjs/microservices@11.2.7(@grpc/grpc-js@1.14.5)(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/websockets@11.2.7)(cache-manager@5.7.6)(ioredis@5.10.1)(nats@2.29.3)(reflect-metadata@0.1.14)(rxjs@7.8.2)': dependencies: '@nestjs/common': 11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2) '@nestjs/core': 11.2.7(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/microservices@11.2.7)(@nestjs/platform-express@11.2.7)(@nestjs/websockets@11.2.7)(reflect-metadata@0.1.14)(rxjs@7.8.2) @@ -7540,7 +7536,7 @@ snapshots: rxjs: 7.8.2 tslib: 2.8.1 optionalDependencies: - '@grpc/grpc-js': 1.14.4 + '@grpc/grpc-js': 1.14.5 '@nestjs/websockets': 11.2.7(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/platform-socket.io@11.2.7)(reflect-metadata@0.1.14)(rxjs@7.8.2) cache-manager: 5.7.6 ioredis: 5.10.1 @@ -7600,7 +7596,7 @@ snapshots: '@nestjs/common': 11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2) '@nestjs/core': 11.2.7(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/microservices@11.2.7)(@nestjs/platform-express@11.2.7)(@nestjs/websockets@11.2.7)(reflect-metadata@0.1.14)(rxjs@7.8.2) '@nestjs/mapped-types': 2.1.1(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14) - js-yaml: 5.2.1 + js-yaml: 5.4.1 lodash: 4.18.1 path-to-regexp: 8.4.2 reflect-metadata: 0.1.14 @@ -7615,7 +7611,7 @@ snapshots: '@nestjs/core': 11.2.7(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/microservices@11.2.7)(@nestjs/platform-express@11.2.7)(@nestjs/websockets@11.2.7)(reflect-metadata@0.1.14)(rxjs@7.8.2) tslib: 2.8.1 optionalDependencies: - '@nestjs/microservices': 11.2.7(@grpc/grpc-js@1.14.4)(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/websockets@11.2.7)(cache-manager@5.7.6)(ioredis@5.10.1)(nats@2.29.3)(reflect-metadata@0.1.14)(rxjs@7.8.2) + '@nestjs/microservices': 11.2.7(@grpc/grpc-js@1.14.5)(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(@nestjs/websockets@11.2.7)(cache-manager@5.7.6)(ioredis@5.10.1)(nats@2.29.3)(reflect-metadata@0.1.14)(rxjs@7.8.2) '@nestjs/platform-express': 11.2.7(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7) '@nestjs/typeorm@11.0.3(@nestjs/common@11.2.7(class-transformer@0.5.1)(class-validator@0.14.4)(reflect-metadata@0.1.14)(rxjs@7.8.2))(@nestjs/core@11.2.7)(reflect-metadata@0.1.14)(rxjs@7.8.2)(typeorm@0.3.31(ioredis@5.10.1)(pg@8.20.0)(ts-node@10.9.2(@types/node@20.19.39)(typescript@5.9.3)))': @@ -7674,17 +7670,12 @@ snapshots: dependencies: '@opentelemetry/api': 1.9.1 - '@opentelemetry/core@2.0.1(@opentelemetry/api@1.9.1)': - dependencies: - '@opentelemetry/api': 1.9.1 - '@opentelemetry/semantic-conventions': 1.40.0 - '@opentelemetry/core@2.10.0(@opentelemetry/api@1.9.1)': dependencies: '@opentelemetry/api': 1.9.1 '@opentelemetry/semantic-conventions': 1.40.0 - '@opentelemetry/core@2.7.1(@opentelemetry/api@1.9.1)': + '@opentelemetry/core@2.12.0(@opentelemetry/api@1.9.1)': dependencies: '@opentelemetry/api': 1.9.1 '@opentelemetry/semantic-conventions': 1.40.0 @@ -7701,7 +7692,7 @@ snapshots: dependencies: '@opentelemetry/api': 1.9.1 '@opentelemetry/api-logs': 0.202.0 - '@opentelemetry/core': 2.0.1(@opentelemetry/api@1.9.1) + '@opentelemetry/core': 2.10.0(@opentelemetry/api@1.9.1) '@opentelemetry/otlp-exporter-base': 0.202.0(@opentelemetry/api@1.9.1) '@opentelemetry/otlp-transformer': 0.202.0(@opentelemetry/api@1.9.1) '@opentelemetry/sdk-logs': 0.202.0(@opentelemetry/api@1.9.1) @@ -7762,7 +7753,7 @@ snapshots: '@opentelemetry/exporter-trace-otlp-http@0.202.0(@opentelemetry/api@1.9.1)': dependencies: '@opentelemetry/api': 1.9.1 - '@opentelemetry/core': 2.0.1(@opentelemetry/api@1.9.1) + '@opentelemetry/core': 2.10.0(@opentelemetry/api@1.9.1) '@opentelemetry/otlp-exporter-base': 0.202.0(@opentelemetry/api@1.9.1) '@opentelemetry/otlp-transformer': 0.202.0(@opentelemetry/api@1.9.1) '@opentelemetry/resources': 2.0.1(@opentelemetry/api@1.9.1) @@ -7793,7 +7784,7 @@ snapshots: '@opentelemetry/instrumentation-express@0.51.1(@opentelemetry/api@1.9.1)': dependencies: '@opentelemetry/api': 1.9.1 - '@opentelemetry/core': 2.7.1(@opentelemetry/api@1.9.1) + '@opentelemetry/core': 2.10.0(@opentelemetry/api@1.9.1) '@opentelemetry/instrumentation': 0.202.0(@opentelemetry/api@1.9.1) '@opentelemetry/semantic-conventions': 1.40.0 transitivePeerDependencies: @@ -7802,7 +7793,7 @@ snapshots: '@opentelemetry/instrumentation-http@0.202.0(@opentelemetry/api@1.9.1)': dependencies: '@opentelemetry/api': 1.9.1 - '@opentelemetry/core': 2.0.1(@opentelemetry/api@1.9.1) + '@opentelemetry/core': 2.10.0(@opentelemetry/api@1.9.1) '@opentelemetry/instrumentation': 0.202.0(@opentelemetry/api@1.9.1) '@opentelemetry/semantic-conventions': 1.40.0 forwarded-parse: 2.1.2 @@ -7838,7 +7829,7 @@ snapshots: '@opentelemetry/otlp-exporter-base@0.202.0(@opentelemetry/api@1.9.1)': dependencies: '@opentelemetry/api': 1.9.1 - '@opentelemetry/core': 2.0.1(@opentelemetry/api@1.9.1) + '@opentelemetry/core': 2.10.0(@opentelemetry/api@1.9.1) '@opentelemetry/otlp-transformer': 0.202.0(@opentelemetry/api@1.9.1) '@opentelemetry/otlp-exporter-base@0.221.0(@opentelemetry/api@1.9.1)': @@ -7849,7 +7840,7 @@ snapshots: '@opentelemetry/otlp-grpc-exporter-base@0.221.0(@opentelemetry/api@1.9.1)': dependencies: - '@grpc/grpc-js': 1.14.4 + '@grpc/grpc-js': 1.14.5 '@opentelemetry/api': 1.9.1 '@opentelemetry/core': 2.10.0(@opentelemetry/api@1.9.1) '@opentelemetry/otlp-exporter-base': 0.221.0(@opentelemetry/api@1.9.1) @@ -7859,7 +7850,7 @@ snapshots: dependencies: '@opentelemetry/api': 1.9.1 '@opentelemetry/api-logs': 0.202.0 - '@opentelemetry/core': 2.0.1(@opentelemetry/api@1.9.1) + '@opentelemetry/core': 2.10.0(@opentelemetry/api@1.9.1) '@opentelemetry/resources': 2.0.1(@opentelemetry/api@1.9.1) '@opentelemetry/sdk-logs': 0.202.0(@opentelemetry/api@1.9.1) '@opentelemetry/sdk-metrics': 2.0.1(@opentelemetry/api@1.9.1) @@ -7889,7 +7880,7 @@ snapshots: '@opentelemetry/resources@2.0.1(@opentelemetry/api@1.9.1)': dependencies: '@opentelemetry/api': 1.9.1 - '@opentelemetry/core': 2.0.1(@opentelemetry/api@1.9.1) + '@opentelemetry/core': 2.10.0(@opentelemetry/api@1.9.1) '@opentelemetry/semantic-conventions': 1.40.0 '@opentelemetry/resources@2.10.0(@opentelemetry/api@1.9.1)': @@ -7898,17 +7889,17 @@ snapshots: '@opentelemetry/core': 2.10.0(@opentelemetry/api@1.9.1) '@opentelemetry/semantic-conventions': 1.40.0 - '@opentelemetry/resources@2.7.1(@opentelemetry/api@1.9.1)': + '@opentelemetry/resources@2.12.0(@opentelemetry/api@1.9.1)': dependencies: '@opentelemetry/api': 1.9.1 - '@opentelemetry/core': 2.7.1(@opentelemetry/api@1.9.1) + '@opentelemetry/core': 2.12.0(@opentelemetry/api@1.9.1) '@opentelemetry/semantic-conventions': 1.40.0 '@opentelemetry/sdk-logs@0.202.0(@opentelemetry/api@1.9.1)': dependencies: '@opentelemetry/api': 1.9.1 '@opentelemetry/api-logs': 0.202.0 - '@opentelemetry/core': 2.0.1(@opentelemetry/api@1.9.1) + '@opentelemetry/core': 2.10.0(@opentelemetry/api@1.9.1) '@opentelemetry/resources': 2.0.1(@opentelemetry/api@1.9.1) '@opentelemetry/sdk-logs@0.221.0(@opentelemetry/api@1.9.1)': @@ -7922,7 +7913,7 @@ snapshots: '@opentelemetry/sdk-metrics@2.0.1(@opentelemetry/api@1.9.1)': dependencies: '@opentelemetry/api': 1.9.1 - '@opentelemetry/core': 2.0.1(@opentelemetry/api@1.9.1) + '@opentelemetry/core': 2.10.0(@opentelemetry/api@1.9.1) '@opentelemetry/resources': 2.0.1(@opentelemetry/api@1.9.1) '@opentelemetry/sdk-metrics@2.10.0(@opentelemetry/api@1.9.1)': @@ -7967,7 +7958,7 @@ snapshots: '@opentelemetry/sdk-trace-base@2.0.1(@opentelemetry/api@1.9.1)': dependencies: '@opentelemetry/api': 1.9.1 - '@opentelemetry/core': 2.0.1(@opentelemetry/api@1.9.1) + '@opentelemetry/core': 2.10.0(@opentelemetry/api@1.9.1) '@opentelemetry/resources': 2.0.1(@opentelemetry/api@1.9.1) '@opentelemetry/semantic-conventions': 1.40.0 @@ -8054,7 +8045,7 @@ snapshots: '@sendgrid/client@7.7.0': dependencies: '@sendgrid/helpers': 7.7.0 - axios: 0.26.1 + axios: 0.34.0 transitivePeerDependencies: - debug @@ -8384,7 +8375,7 @@ snapshots: '@supabase/phoenix': 0.4.1 '@types/ws': 8.18.1 tslib: 2.8.1 - ws: 8.20.0 + ws: 8.21.3 transitivePeerDependencies: - bufferutil - utf-8-validate @@ -8634,6 +8625,10 @@ snapshots: dependencies: '@types/node': 20.19.39 + '@types/ws@8.18.2': + dependencies: + '@types/node': 20.19.39 + '@types/yargs-parser@21.0.3': {} '@types/yargs@17.0.35': @@ -8916,14 +8911,14 @@ snapshots: ajv@8.18.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.6 + fast-uri: 3.1.8 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 ajv@8.20.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.6 + fast-uri: 3.1.8 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -9059,9 +9054,11 @@ snapshots: uuid: 8.0.0 xml2js: 0.6.2 - axios@0.26.1: + axios@0.34.0: dependencies: - follow-redirects: 1.16.0 + follow-redirects: 1.16.1 + form-data: 4.0.6 + proxy-from-env: 1.1.0 transitivePeerDependencies: - debug @@ -9179,7 +9176,7 @@ snapshots: http-errors: 2.0.1 iconv-lite: 0.4.24 on-finished: 2.4.1 - qs: 6.15.3 + qs: 6.16.0 raw-body: 2.5.3 type-is: 1.6.18 unpipe: 1.0.0 @@ -9202,11 +9199,11 @@ snapshots: bowser@2.14.1: {} - brace-expansion@2.1.4: + brace-expansion@2.1.7: dependencies: balanced-match: 1.0.2 - brace-expansion@5.0.9: + brace-expansion@5.0.12: dependencies: balanced-match: 4.0.4 @@ -9699,13 +9696,12 @@ snapshots: engine.io-parser@5.2.3: {} - engine.io@6.6.9: + engine.io@6.6.10: dependencies: '@types/cors': 2.8.19 '@types/node': 20.19.39 - '@types/ws': 8.18.1 + '@types/ws': 8.18.2 accepts: 1.3.8 - base64id: 2.0.0 cookie: 0.7.2 cors: 2.8.6 debug: 4.4.3 @@ -10099,7 +10095,7 @@ snapshots: on-finished: 2.4.1 once: 1.4.0 parseurl: 1.3.3 - proxy-addr: 2.0.7 + proxy-addr: 2.0.8 qs: 6.16.0 range-parser: 1.2.1 router: 2.2.0 @@ -10135,7 +10131,7 @@ snapshots: fast-sha256@1.3.0: {} - fast-uri@3.1.6: {} + fast-uri@3.1.8: {} fast-xml-builder@1.1.9: dependencies: @@ -10181,7 +10177,7 @@ snapshots: file-stream-rotator@0.6.1: dependencies: - moment: 2.30.1 + moment: 2.31.0 file-type@21.3.4: dependencies: @@ -10217,9 +10213,9 @@ snapshots: locate-path: 6.0.0 path-exists: 4.0.0 - firebase-admin@13.8.0: + firebase-admin@13.10.0: dependencies: - '@fastify/busboy': 3.2.0 + '@fastify/busboy': 3.2.2 '@firebase/database-compat': 2.1.3 '@firebase/database-types': 1.0.19 farmhash-modern: 1.1.0 @@ -10227,8 +10223,6 @@ snapshots: google-auth-library: 10.6.2 jsonwebtoken: 9.0.3 jwks-rsa: 3.2.2 - node-forge: 1.4.0 - uuid: 11.1.1 optionalDependencies: '@google-cloud/firestore': 7.11.6 '@google-cloud/storage': 7.19.0 @@ -10248,6 +10242,8 @@ snapshots: follow-redirects@1.16.0: {} + follow-redirects@1.16.1: {} + fontkit@1.9.0: dependencies: '@swc/helpers': 0.3.17 @@ -10518,7 +10514,7 @@ snapshots: google-gax@4.6.1: dependencies: - '@grpc/grpc-js': 1.14.4 + '@grpc/grpc-js': 1.14.5 '@grpc/proto-loader': 0.7.15 '@types/long': 4.0.2 abort-controller: 3.0.0 @@ -10555,7 +10551,7 @@ snapshots: - supports-color optional: true - handlebars@4.7.9: + handlebars@4.7.10: dependencies: minimist: 1.2.8 neo-async: 2.6.2 @@ -11225,7 +11221,7 @@ snapshots: dependencies: argparse: 2.0.1 - js-yaml@5.2.1: + js-yaml@5.4.1: dependencies: argparse: 2.0.1 @@ -11339,10 +11335,10 @@ snapshots: execa: 7.2.0 lilconfig: 2.1.0 listr2: 6.6.1 - micromatch: 4.0.5 + micromatch: 4.0.8 pidtree: 0.6.0 string-argv: 0.3.2 - yaml: 2.3.1 + yaml: 2.9.0 transitivePeerDependencies: - enquirer - supports-color @@ -11481,11 +11477,6 @@ snapshots: methods@1.1.2: {} - micromatch@4.0.5: - dependencies: - braces: 3.0.3 - picomatch: 2.3.2 - micromatch@4.0.8: dependencies: braces: 3.0.3 @@ -11516,11 +11507,11 @@ snapshots: minimatch@10.2.6: dependencies: - brace-expansion: 5.0.9 + brace-expansion: 5.0.12 minimatch@9.0.9: dependencies: - brace-expansion: 2.1.4 + brace-expansion: 2.1.7 minimist@1.2.8: {} @@ -11530,7 +11521,7 @@ snapshots: module-details-from-path@1.0.4: {} - moment@2.30.1: {} + moment@2.31.0: {} morgan@1.12.1: dependencies: @@ -11636,8 +11627,6 @@ snapshots: fetch-blob: 3.2.0 formdata-polyfill: 4.0.10 - node-forge@1.4.0: {} - node-gyp-build-optional-packages@5.2.2: dependencies: detect-libc: 2.1.2 @@ -11651,7 +11640,7 @@ snapshots: node-releases@2.0.53: {} - nodemailer@10.0.2: {} + nodemailer@10.1.6: {} normalize-path@3.0.0: {} @@ -11978,11 +11967,27 @@ snapshots: '@types/node': 20.19.39 long: 5.3.2 - proxy-addr@2.0.7: + protobufjs@7.6.6: + dependencies: + '@protobufjs/aspromise': 1.1.2 + '@protobufjs/base64': 1.1.2 + '@protobufjs/codegen': 2.0.5 + '@protobufjs/eventemitter': 1.1.1 + '@protobufjs/fetch': 1.1.1 + '@protobufjs/float': 1.0.2 + '@protobufjs/path': 1.1.2 + '@protobufjs/pool': 1.1.0 + '@protobufjs/utf8': 1.1.2 + '@types/node': 20.19.39 + long: 5.3.2 + + proxy-addr@2.0.8: dependencies: forwarded: 0.2.0 ipaddr.js: 1.9.1 + proxy-from-env@1.1.0: {} + proxy-from-env@2.1.0: {} punycode@1.3.2: {} @@ -11997,11 +12002,6 @@ snapshots: pngjs: 5.0.0 yargs: 15.4.1 - qs@6.15.3: - dependencies: - es-define-property: 1.0.1 - side-channel: 1.1.1 - qs@6.16.0: dependencies: es-define-property: 1.0.1 @@ -12380,7 +12380,7 @@ snapshots: base64id: 2.0.0 cors: 2.8.6 debug: 4.4.3 - engine.io: 6.6.9 + engine.io: 6.6.10 socket.io-adapter: 2.5.8 socket.io-parser: 4.2.7 transitivePeerDependencies: @@ -12644,7 +12644,7 @@ snapshots: dependencies: bs-logger: 0.2.6 fast-json-stable-stringify: 2.1.0 - handlebars: 4.7.9 + handlebars: 4.7.10 jest: 29.7.0(@types/node@20.19.39)(ts-node@10.9.2(@types/node@20.19.39)(typescript@5.9.3)) json5: 2.2.3 lodash.memoize: 4.1.2 @@ -13092,8 +13092,6 @@ snapshots: imurmurhash: 0.1.4 signal-exit: 3.0.7 - ws@8.20.0: {} - ws@8.21.3: {} xml-js@1.6.11: @@ -13119,8 +13117,6 @@ snapshots: yallist@4.0.0: {} - yaml@2.3.1: {} - yaml@2.9.0: {} yargs-parser@18.1.3: