chore: security patch for the dependency chain v2025.12.0 (hoppscotch#5678)

Co-authored-by: James George <[email protected]>

Author: mirarifhasan

package.json

@@ -24,8 +24,8 @@
     "./packages/*"
   ],
   "devDependencies": {
-    "@commitlint/cli": "20.1.0",
-    "@commitlint/config-conventional": "20.0.0",
+    "@commitlint/cli": "20.2.0",
+    "@commitlint/config-conventional": "20.2.0",
     "@hoppscotch/ui": "0.2.5",
     "@types/node": "24.10.1",
     "cross-env": "10.1.0",
@@ -37,12 +37,12 @@
     "overrides": {
       "@nestjs-modules/mailer>mjml": "5.0.0-alpha.4",
       "apiconnect-wsdl": "2.0.36",
+      "body-parser": "2.2.1",
       "cross-spawn": "7.0.6",
       "[email protected]": "2.0.0",
+      "jws@<3.2.3": "3.2.3",
+      "nodemailer@<7.0.11": "7.0.11",
       "glob@<11.1.0": "11.1.0",
-      "hono@<4.10.3": "4.10.3",
-      "nodemailer@<7.0.7": "7.0.7",
-      "[email protected]": "2.4.12",
       "subscriptions-transport-ws>ws": "7.5.10",
       "vue": "3.5.25",
       "form-data": "4.0.4",

packages/hoppscotch-agent/package.json

@@ -13,25 +13,25 @@
     "@hoppscotch/ui": "0.2.5",
     "@tauri-apps/api": "2.1.1",
     "@tauri-apps/plugin-shell": "2.3.3",
-    "@vueuse/core": "14.0.0",
+    "@vueuse/core": "14.1.0",
     "axios": "1.13.2",
     "fp-ts": "2.16.11",
     "lodash-es": "4.17.21",
     "vue": "3.5.25"
   },
   "devDependencies": {
-    "@iconify-json/lucide": "1.2.73",
+    "@iconify-json/lucide": "1.2.80",
     "@tauri-apps/cli": "2.9.3",
     "@types/lodash-es": "4.17.12",
     "@types/node": "24.10.1",
-    "@vitejs/plugin-vue": "6.0.2",
-    "autoprefixer": "10.4.21",
+    "@vitejs/plugin-vue": "6.0.3",
+    "autoprefixer": "10.4.22",
     "postcss": "8.5.6",
     "tailwindcss": "3.4.16",
     "typescript": "5.9.3",
     "unplugin-icons": "22.5.0",
     "unplugin-vue-components": "30.0.0",
-    "vite": "7.2.4",
+    "vite": "7.2.7",
     "vue-tsc": "2.2.0"
   }
 }

packages/hoppscotch-backend/package.json

@@ -39,23 +39,23 @@
     "@nestjs/config": "4.0.2",
     "@nestjs/core": "11.1.9",
     "@nestjs/graphql": "13.2.0",
-    "@nestjs/jwt": "11.0.1",
+    "@nestjs/jwt": "11.0.2",
     "@nestjs/passport": "11.0.0",
     "@nestjs/platform-express": "11.1.9",
-    "@nestjs/schedule": "6.0.1",
+    "@nestjs/schedule": "6.1.0",
     "@nestjs/swagger": "11.2.3",
     "@nestjs/terminus": "11.0.0",
-    "@nestjs/throttler": "6.4.0",
-    "@prisma/adapter-pg": "7.0.0",
-    "@prisma/client": "7.0.0",
+    "@nestjs/throttler": "6.5.0",
+    "@prisma/adapter-pg": "7.1.0",
+    "@prisma/client": "7.1.0",
     "argon2": "0.44.0",
     "bcrypt": "6.0.0",
     "class-transformer": "0.5.1",
-    "class-validator": "0.14.2",
-    "cookie": "1.0.2",
+    "class-validator": "0.14.3",
+    "cookie": "1.1.1",
     "cookie-parser": "1.4.7",
     "dotenv": "17.2.3",
-    "express": "5.1.0",
+    "express": "5.2.1",
     "express-session": "1.18.2",
     "fp-ts": "2.16.11",
     "graphql": "16.12.0",
@@ -65,52 +65,52 @@
     "handlebars": "4.7.8",
     "io-ts": "2.2.22",
     "morgan": "1.10.1",
-    "nodemailer": "7.0.10",
+    "nodemailer": "7.0.11",
     "passport": "0.7.0",
     "passport-github2": "0.1.12",
     "passport-google-oauth20": "2.0.0",
     "passport-jwt": "4.0.1",
     "passport-local": "1.0.0",
     "passport-microsoft": "2.1.0",
     "pg": "8.16.3",
-    "posthog-node": "5.13.2",
-    "prisma": "7.0.0",
+    "posthog-node": "5.17.2",
+    "prisma": "7.1.0",
     "reflect-metadata": "0.2.2",
     "rimraf": "6.1.2",
     "rxjs": "7.8.2"
   },
   "devDependencies": {
-    "@eslint/eslintrc": "3.3.1",
+    "@eslint/eslintrc": "3.3.3",
     "@eslint/js": "9.39.1",
-    "@nestjs/cli": "11.0.12",
+    "@nestjs/cli": "11.0.14",
     "@nestjs/schematics": "11.0.9",
     "@nestjs/testing": "11.1.9",
     "@relmify/jest-fp-ts": "2.1.1",
     "@types/bcrypt": "6.0.0",
     "@types/cookie-parser": "1.4.10",
-    "@types/express": "5.0.5",
+    "@types/express": "5.0.6",
     "@types/jest": "30.0.0",
-    "@types/node": "24.10.1",
+    "@types/node": "24.10.2",
     "@types/nodemailer": "7.0.4",
     "@types/passport-github2": "1.2.9",
     "@types/passport-google-oauth20": "2.0.17",
     "@types/passport-jwt": "4.0.1",
     "@types/passport-microsoft": "2.1.1",
     "@types/pg": "8.15.6",
     "@types/supertest": "6.0.3",
-    "@typescript-eslint/eslint-plugin": "8.48.0",
-    "@typescript-eslint/parser": "8.48.0",
+    "@typescript-eslint/eslint-plugin": "8.49.0",
+    "@typescript-eslint/parser": "8.49.0",
     "cross-env": "10.1.0",
     "eslint": "9.39.1",
     "eslint-config-prettier": "10.1.8",
     "eslint-plugin-prettier": "5.5.4",
     "globals": "16.5.0",
     "jest": "30.2.0",
     "jest-mock-extended": "4.0.0",
-    "prettier": "3.6.2",
+    "prettier": "3.7.4",
     "source-map-support": "0.5.21",
     "supertest": "7.1.4",
-    "ts-jest": "29.4.5",
+    "ts-jest": "29.4.6",
     "ts-loader": "9.5.4",
     "ts-node": "10.9.2",
     "tsconfig-paths": "4.2.0",

packages/hoppscotch-cli/package.json

@@ -53,22 +53,22 @@
     "qs": "6.14.0",
     "tough-cookie": "6.0.0",
     "verzod": "0.4.0",
-    "xmlbuilder2": "4.0.0",
+    "xmlbuilder2": "4.0.3",
     "zod": "3.25.32"
   },
   "devDependencies": {
     "@hoppscotch/data": "workspace:^",
     "@hoppscotch/js-sandbox": "workspace:^",
     "@relmify/jest-fp-ts": "2.1.1",
     "@types/lodash-es": "4.17.12",
-    "@types/papaparse": "5.5.0",
+    "@types/papaparse": "5.5.1",
     "@types/qs": "6.14.0",
     "fp-ts": "2.16.11",
-    "prettier": "3.6.2",
+    "prettier": "3.7.4",
     "qs": "6.11.2",
     "semver": "7.7.3",
     "tsup": "8.5.1",
     "typescript": "5.9.3",
-    "vitest": "4.0.14"
+    "vitest": "4.0.15"
   }
 }

packages/hoppscotch-common/package.json

@@ -33,7 +33,7 @@
     "@codemirror/merge": "6.11.2",
     "@codemirror/search": "6.5.11",
     "@codemirror/state": "6.5.2",
-    "@codemirror/view": "6.38.8",
+    "@codemirror/view": "6.39.4",
     "@guolao/vue-monaco-editor": "1.6.0",
     "@hoppscotch/codemirror-lang-graphql": "workspace:^",
     "@hoppscotch/data": "workspace:^",
@@ -48,22 +48,22 @@
     "@scure/base": "2.0.0",
     "@shopify/lang-jsonc": "1.0.1",
     "@tauri-apps/api": "2.1.1",
-    "@tauri-apps/plugin-store": "2.2.0",
+    "@tauri-apps/plugin-store": "2.4.1",
     "@types/hawk": "9.0.7",
     "@types/markdown-it": "14.1.2",
     "@types/node": "24.10.1",
     "@unhead/vue": "2.0.19",
     "@urql/core": "6.0.1",
     "@urql/devtools": "2.0.3",
     "@urql/exchange-auth": "3.0.0",
-    "@vueuse/core": "14.0.0",
+    "@vueuse/core": "14.1.0",
     "acorn-walk": "8.3.4",
     "aws4fetch": "1.0.20",
     "axios": "1.13.2",
     "buffer": "6.0.3",
     "cookie-es": "2.0.0",
     "dioc": "3.0.2",
-    "dompurify": "3.3.0",
+    "dompurify": "3.3.1",
     "esprima": "4.0.1",
     "events": "3.3.0",
     "fp-ts": "2.16.11",
@@ -103,7 +103,7 @@
     "splitpanes": "3.1.5",
     "stream-browserify": "3.0.0",
     "subscriptions-transport-ws": "0.11.0",
-    "superjson": "2.2.5",
+    "superjson": "2.2.6",
     "tern": "0.24.3",
     "timers": "0.1.1",
     "tippy.js": "6.3.7",
@@ -115,7 +115,7 @@
     "vue-i18n": "11.2.2",
     "vue-json-pretty": "2.6.0",
     "vue-pdf-embed": "2.1.3",
-    "vue-router": "4.6.3",
+    "vue-router": "4.6.4",
     "vue-tippy": "6.7.1",
     "vuedraggable-es": "4.1.1",
     "wonka": "6.3.5",
@@ -129,13 +129,13 @@
     "@esbuild-plugins/node-modules-polyfill": "0.2.2",
     "@graphql-codegen/add": "6.0.0",
     "@graphql-codegen/cli": "6.1.0",
-    "@graphql-codegen/typed-document-node": "6.1.3",
-    "@graphql-codegen/typescript": "5.0.5",
-    "@graphql-codegen/typescript-operations": "5.0.5",
+    "@graphql-codegen/typed-document-node": "6.1.4",
+    "@graphql-codegen/typescript": "5.0.6",
+    "@graphql-codegen/typescript-operations": "5.0.6",
     "@graphql-codegen/typescript-urql-graphcache": "3.1.1",
     "@graphql-codegen/urql-introspection": "3.0.1",
     "@graphql-typed-document-node/core": "3.2.0",
-    "@iconify-json/lucide": "1.2.75",
+    "@iconify-json/lucide": "1.2.80",
     "@import-meta-env/cli": "0.7.4",
     "@intlify/unplugin-vue-i18n": "11.0.1",
     "@relmify/jest-fp-ts": "2.1.1",
@@ -149,9 +149,9 @@
     "@types/qs": "6.14.0",
     "@types/splitpanes": "2.2.6",
     "@types/yargs-parser": "21.0.3",
-    "@typescript-eslint/eslint-plugin": "8.48.0",
-    "@typescript-eslint/parser": "8.48.0",
-    "@vitejs/plugin-vue": "6.0.2",
+    "@typescript-eslint/eslint-plugin": "8.49.0",
+    "@typescript-eslint/parser": "8.49.0",
+    "@vitejs/plugin-vue": "6.0.3",
     "@vue/compiler-sfc": "3.5.25",
     "@vue/eslint-config-typescript": "13.0.0",
     "@vue/runtime-core": "3.5.25",
@@ -160,31 +160,31 @@
     "dotenv": "17.2.3",
     "eslint": "8.57.0",
     "eslint-plugin-prettier": "5.5.4",
-    "eslint-plugin-vue": "10.6.1",
+    "eslint-plugin-vue": "10.6.2",
     "glob": "13.0.0",
-    "jsdom": "27.2.0",
+    "jsdom": "27.3.0",
     "npm-run-all": "4.1.5",
     "openapi-types": "12.1.3",
     "postcss": "8.5.6",
-    "prettier": "3.6.2",
+    "prettier": "3.7.4",
     "prettier-plugin-tailwindcss": "0.7.1",
     "rollup-plugin-polyfill-node": "0.13.0",
-    "sass": "1.94.2",
+    "sass": "1.96.0",
     "tailwindcss": "3.4.16",
     "tsup": "8.5.1",
     "typescript": "5.9.3",
     "unplugin-fonts": "1.4.0",
     "unplugin-icons": "22.5.0",
     "unplugin-vue-components": "30.0.0",
-    "vite": "7.2.4",
+    "vite": "7.2.7",
     "vite-plugin-checker": "0.11.0",
     "vite-plugin-fonts": "0.7.0",
     "vite-plugin-html-config": "2.0.2",
-    "vite-plugin-pages": "0.33.1",
+    "vite-plugin-pages": "0.33.2",
     "vite-plugin-pages-sitemap": "1.7.1",
-    "vite-plugin-pwa": "1.1.0",
+    "vite-plugin-pwa": "1.2.0",
     "vite-plugin-vue-layouts": "0.11.0",
-    "vitest": "4.0.14",
+    "vitest": "4.0.15",
     "vue-tsc": "1.8.8"
   }
 }

packages/hoppscotch-common/src/components/http/Request.vue

@@ -70,9 +70,7 @@
       <HoppButtonPrimary
         id="send"
         v-tippy="{ theme: 'tooltip', delay: [500, 20], allowHTML: true }"
-        :title="`${t(
-          'action.send'
-        )} <kbd>${getSpecialKey()}</kbd><kbd>↩</kbd>`"
+        :title="`${t('action.send')} <kbd>${getSpecialKey()}</kbd><kbd>↩</kbd>`"
         :label="`${
           !isTabResponseLoading ? t('action.send') : t('action.cancel')
         }`"

packages/hoppscotch-common/src/components/lenses/ResponseBodyRenderer.vue

@@ -106,10 +106,10 @@ const showIndicator = computed(() => {
   const { expectResults, tests, envDiff } = doc.value.testResults
   return Boolean(
     expectResults.length ||
-      tests.length ||
-      envDiff.selected.additions.length ||
-      envDiff.selected.updations.length ||
-      envDiff.global.updations.length
+    tests.length ||
+    envDiff.selected.additions.length ||
+    envDiff.selected.updations.length ||
+    envDiff.global.updations.length
   )
 })
 

packages/hoppscotch-common/src/helpers/import-export/import/postman.ts

@@ -258,8 +258,8 @@ const getHoppResponses = (
 }
 
 type PMRequestAuthDef<
-  AuthType extends
-    RequestAuthDefinition["type"] = RequestAuthDefinition["type"],
+  AuthType extends RequestAuthDefinition["type"] =
+    RequestAuthDefinition["type"],
 > = AuthType extends RequestAuthDefinition["type"] & string
   ? // eslint-disable-next-line no-unused-vars
     { type: AuthType } & { [x in AuthType]: VariableDefinition[] }

packages/hoppscotch-common/src/helpers/runner/adapter.ts

@@ -32,9 +32,7 @@ type Requests = {
 
 export type CollectionNode = Collection | Folder | Requests
 
-export class TestRunnerCollectionsAdapter
-  implements SmartTreeAdapter<CollectionNode>
-{
+export class TestRunnerCollectionsAdapter implements SmartTreeAdapter<CollectionNode> {
   constructor(
     public data: Ref<HoppCollection[]>,
     private show: Ref<"all" | "passed" | "failed">

packages/hoppscotch-common/src/services/documentation.service.ts

@@ -69,8 +69,7 @@ export interface BaseDocumentationOptions {
 /**
  * Options for setting collection documentation
  */
-export interface SetCollectionDocumentationOptions
-  extends BaseDocumentationOptions {
+export interface SetCollectionDocumentationOptions extends BaseDocumentationOptions {
   /**
    * The path (for personal collections) or ID (for team collections) of the collection
    */
@@ -81,8 +80,7 @@ export interface SetCollectionDocumentationOptions
 /**
  * Request documentation
  */
-export interface SetRequestDocumentationOptions
-  extends BaseDocumentationOptions {
+export interface SetRequestDocumentationOptions extends BaseDocumentationOptions {
   parentCollectionID: string
   folderPath: string
   requestID?: string // For team requests