From 84f421b40ebbfdc2bed8d004493a118ced9942bd Mon Sep 17 00:00:00 2001 From: Antoine Keranflec'h Date: Wed, 19 Aug 2026 15:59:12 +0200 Subject: [PATCH] update postcss and nanoid to clear two high-severity advisories --- CHANGELOG.md | 4 ++++ web/package-lock.json | 14 +++++++------- 2 files changed, 11 insertions(+), 7 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index a000f50..8d66799 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,10 @@ All notable changes to this project are documented here. This covers both the Py ## Unreleased +### Security + +- Updated `postcss` to 8.5.26 and `nanoid` to 3.3.18 in the website's lockfile, clearing two high-severity advisories. Both are transitive dependencies of `vite`, which is a devDependency, so they only ever ran on the build machine and were never shipped to the browser. The change is lockfile-only: no direct dependency was added, removed, or had its version range altered. + ## v0.2.0 - 2026-08-19 ### Added diff --git a/web/package-lock.json b/web/package-lock.json index 7a9d2c1..9cf0e6f 100644 --- a/web/package-lock.json +++ b/web/package-lock.json @@ -1496,9 +1496,9 @@ "license": "MIT" }, "node_modules/nanoid": { - "version": "3.3.12", - "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.12.tgz", - "integrity": "sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==", + "version": "3.3.18", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz", + "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==", "dev": true, "funding": [ { @@ -1552,9 +1552,9 @@ } }, "node_modules/postcss": { - "version": "8.5.15", - "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.15.tgz", - "integrity": "sha512-FfR8sjd4em2T6fb3I2MwAJU7HWVMr9zba+enmQeeWFfCbm+UOC/0X4DS8XtpUTMwWMGbjKYP7xjfNekzyGmB3A==", + "version": "8.5.26", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.26.tgz", + "integrity": "sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==", "dev": true, "funding": [ { @@ -1572,7 +1572,7 @@ ], "license": "MIT", "dependencies": { - "nanoid": "^3.3.12", + "nanoid": "^3.3.17", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" },