Merge pull request #31 from XpressAI/fahreza/further-package-updates

Fix all remaining dependency vulnerabilities

Author: treo

pyproject.toml

@@ -15,7 +15,7 @@ dependencies = [
     "questionary>=2.1.0",
     "numpy>=1.0.0,<2.0.0; sys_platform == 'darwin' and platform_machine == 'x86_64'",
     "numpy>=2.2.5; (sys_platform != 'darwin' or platform_machine != 'x86_64')",
-    "aiohttp>=3.8.0",
+    "aiohttp>=3.13.3",
     "websockets>=11.0.0",
     "mkdocs-llmstxt>=0.2.0",
     "av!=14.4.0",
@@ -89,9 +89,9 @@ local = [
     "sentence-transformers>=4.1.0",
     "soundfile>=0.13.1",
     "tiktoken>=0.9.0",
-    "torch>=2.3.0; (sys_platform != 'darwin' or platform_machine != 'x86_64')",
+    "torch>=2.8.0; (sys_platform != 'darwin' or platform_machine != 'x86_64')",
     "torch>=2.2.0,<2.3.0; sys_platform == 'darwin' and platform_machine == 'x86_64'",
-    "transformers>=4.51.3",
+    "transformers>=4.53.0",
 ]
 livekit = [
     "livekit-agents>=1.0.22"

ui/package.json

@@ -18,24 +18,24 @@
   },
   "devDependencies": {
     "@chromatic-com/storybook": "^3.2.7",
-    "@inlang/paraglide-js": "^2.12.0",
+    "@inlang/paraglide-js": "^2.13.1",
     "@lucide/svelte": "^0.486.0",
     "@storybook/addon-essentials": "^8.6.14",
     "@storybook/addon-svelte-csf": "5.0.0-next.27",
     "@storybook/blocks": "^8.6.14",
     "@storybook/experimental-addon-test": "^8.6.14",
-    "@storybook/svelte": "^8.6.16",
-    "@storybook/sveltekit": "^8.6.16",
+    "@storybook/svelte": "^8.6.17",
+    "@storybook/sveltekit": "^8.6.17",
     "@storybook/test": "^8.6.15",
     "@sveltejs/adapter-static": "^3.0.10",
-    "@sveltejs/kit": "^2.52.0",
+    "@sveltejs/kit": "^2.53.4",
     "@sveltejs/vite-plugin-svelte": "^5.1.1",
     "@tailwindcss/container-queries": "^0.1.1",
     "@tailwindcss/forms": "^0.5.11",
     "@tailwindcss/typography": "^0.5.19",
     "@vitest/browser": "^3.2.4",
     "@vitest/coverage-v8": "^3.2.4",
-    "autoprefixer": "^10.4.24",
+    "autoprefixer": "^10.4.27",
     "bits-ui": "^1.8.0",
     "clsx": "^2.1.1",
     "graphql-ws": "^6.0.7",
@@ -45,11 +45,11 @@
     "paneforge": "1.0.0-next.4",
     "playwright": "^1.58.2",
     "prettier": "^3.8.1",
-    "prettier-plugin-svelte": "^3.4.1",
+    "prettier-plugin-svelte": "^3.5.1",
     "prettier-plugin-tailwindcss": "^0.6.14",
-    "storybook": "^10.2.9",
-    "svelte": "^5.51.3",
-    "svelte-check": "^4.4.0",
+    "storybook": "^10.2.15",
+    "svelte": "^5.53.7",
+    "svelte-check": "^4.4.4",
     "svelte-jsoneditor": "^3.11.0",
     "tailwind-merge": "^2.6.1",
     "tailwind-variants": "^0.3.1",
@@ -66,7 +66,8 @@
     ],
     "overrides": {
       "ajv@<8.18.0": ">=8.18.0",
-      "cookie@<0.7.0": ">=0.7.0"
+      "cookie@<0.7.0": ">=0.7.0",
+      "dompurify@>=3.1.3 <=3.3.1": ">=3.3.2"
     }
   }
 }