chore: security patch for the dependency chain (hoppscotch#5487)

mirarifhasan · jamesgeorge007 · web-flow · commit 53e8b28459fe · 2025-10-22T18:48:20.000+05:30
v2025.10.0

---------

Co-authored-by: jamesgeorge007 &lt;25279263+jamesgeorge007@users.noreply.github.com&gt;
diff --git a/package.json b/package.json
@@ -24,21 +24,22 @@
     "./packages/*"
   ],
   "devDependencies": {
-    "@commitlint/cli": "19.8.1",
-    "@commitlint/config-conventional": "19.8.1",
+    "@commitlint/cli": "20.1.0",
+    "@commitlint/config-conventional": "20.0.0",
     "@hoppscotch/ui": "0.2.5",
-    "@types/node": "24.5.2",
-    "cross-env": "10.0.0",
+    "@types/node": "24.9.1",
+    "cross-env": "10.1.0",
     "http-server": "14.1.1",
     "husky": "9.1.7",
-    "lint-staged": "16.2.1"
+    "lint-staged": "16.2.5"
   },
   "pnpm": {
     "overrides": {
       "@nestjs-modules/mailer>mjml": "5.0.0-alpha.4",
       "apiconnect-wsdl": "2.0.36",
       "cross-spawn": "7.0.6",
       "execa@0.10.0": "2.0.0",
+      "nodemailer@<7.0.7": "7.0.7",
       "sha.js@2.4.11": "2.4.12",
       "subscriptions-transport-ws>ws": "7.5.10",
       "vue": "3.5.22",
diff --git a/packages/codemirror-lang-graphql/package.json b/packages/codemirror-lang-graphql/package.json
@@ -24,8 +24,8 @@
   "devDependencies": {
     "@lezer/generator": "1.8.0",
     "@rollup/plugin-typescript": "12.1.4",
-    "mocha": "11.7.2",
-    "rollup": "4.52.2",
-    "typescript": "5.9.2"
+    "mocha": "11.7.4",
+    "rollup": "4.52.5",
+    "typescript": "5.9.3"
   }
 }
diff --git a/packages/hoppscotch-agent/package.json b/packages/hoppscotch-agent/package.json
@@ -23,12 +23,12 @@
     "@iconify-json/lucide": "1.2.68",
     "@tauri-apps/cli": "^2.0.3",
     "@types/lodash-es": "4.17.12",
-    "@types/node": "24.3.0",
+    "@types/node": "24.9.1",
     "@vitejs/plugin-vue": "5.1.4",
     "autoprefixer": "10.4.21",
     "postcss": "8.5.6",
     "tailwindcss": "3.4.16",
-    "typescript": "5.9.2",
+    "typescript": "5.9.3",
     "unplugin-icons": "22.2.0",
     "unplugin-vue-components": "29.0.0",
     "vite": "6.3.6",
diff --git a/packages/hoppscotch-backend/package.json b/packages/hoppscotch-backend/package.json
@@ -31,20 +31,21 @@
   },
   "dependencies": {
     "@apollo/server": "4.12.1",
+    "@as-integrations/express5": "1.1.2",
     "@nestjs-modules/mailer": "2.0.2",
-    "@nestjs/apollo": "13.1.0",
+    "@nestjs/apollo": "13.2.1",
     "@nestjs/common": "11.1.6",
     "@nestjs/config": "4.0.2",
     "@nestjs/core": "11.1.6",
-    "@nestjs/graphql": "13.1.0",
-    "@nestjs/jwt": "11.0.0",
+    "@nestjs/graphql": "13.2.0",
+    "@nestjs/jwt": "11.0.1",
     "@nestjs/passport": "11.0.0",
     "@nestjs/platform-express": "11.1.6",
     "@nestjs/schedule": "6.0.1",
-    "@nestjs/swagger": "11.2.0",
+    "@nestjs/swagger": "11.2.1",
     "@nestjs/terminus": "11.0.0",
     "@nestjs/throttler": "6.4.0",
-    "@prisma/client": "6.16.2",
+    "@prisma/client": "6.17.1",
     "argon2": "0.44.0",
     "bcrypt": "6.0.0",
     "class-transformer": "0.5.1",
@@ -61,54 +62,54 @@
     "handlebars": "4.7.8",
     "io-ts": "2.2.22",
     "morgan": "1.10.1",
-    "nodemailer": "7.0.6",
+    "nodemailer": "7.0.9",
     "passport": "0.7.0",
     "passport-github2": "0.1.12",
     "passport-google-oauth20": "2.0.0",
     "passport-jwt": "4.0.1",
     "passport-local": "1.0.0",
     "passport-microsoft": "2.1.0",
-    "posthog-node": "5.8.8",
-    "prisma": "6.16.2",
+    "posthog-node": "5.10.0",
+    "prisma": "6.17.1",
     "reflect-metadata": "0.2.2",
     "rimraf": "6.0.1",
     "rxjs": "7.8.2"
   },
   "devDependencies": {
     "@eslint/eslintrc": "3.3.1",
-    "@eslint/js": "9.36.0",
+    "@eslint/js": "9.37.0",
     "@nestjs/cli": "11.0.10",
-    "@nestjs/schematics": "11.0.7",
+    "@nestjs/schematics": "11.0.9",
     "@nestjs/testing": "11.1.6",
     "@relmify/jest-fp-ts": "2.1.1",
     "@types/bcrypt": "6.0.0",
     "@types/cookie-parser": "1.4.9",
     "@types/express": "5.0.3",
     "@types/jest": "30.0.0",
-    "@types/node": "24.5.2",
-    "@types/nodemailer": "7.0.1",
+    "@types/node": "24.9.1",
+    "@types/nodemailer": "7.0.2",
     "@types/passport-github2": "1.2.9",
     "@types/passport-google-oauth20": "2.0.16",
     "@types/passport-jwt": "4.0.1",
     "@types/passport-microsoft": "2.1.0",
     "@types/supertest": "6.0.3",
-    "@typescript-eslint/eslint-plugin": "8.44.1",
-    "@typescript-eslint/parser": "8.44.1",
-    "cross-env": "10.0.0",
-    "eslint": "9.36.0",
+    "@typescript-eslint/eslint-plugin": "8.46.1",
+    "@typescript-eslint/parser": "8.46.1",
+    "cross-env": "10.1.0",
+    "eslint": "9.37.0",
     "eslint-config-prettier": "10.1.8",
     "eslint-plugin-prettier": "5.5.4",
     "globals": "16.4.0",
-    "jest": "30.1.3",
+    "jest": "30.2.0",
     "jest-mock-extended": "4.0.0",
     "prettier": "3.6.2",
     "source-map-support": "0.5.21",
     "supertest": "7.1.4",
-    "ts-jest": "29.4.4",
+    "ts-jest": "29.4.5",
     "ts-loader": "9.5.4",
     "ts-node": "10.9.2",
     "tsconfig-paths": "4.2.0",
-    "typescript": "5.9.2"
+    "typescript": "5.9.3"
   },
   "jest": {
     "moduleFileExtensions": [
diff --git a/packages/hoppscotch-cli/package.json b/packages/hoppscotch-cli/package.json
@@ -64,9 +64,9 @@
     "fp-ts": "2.16.11",
     "prettier": "3.6.2",
     "qs": "6.11.2",
-    "semver": "7.7.2",
+    "semver": "7.7.3",
     "tsup": "8.5.0",
-    "typescript": "5.9.2",
+    "typescript": "5.9.3",
     "vitest": "3.2.4"
   }
 }
diff --git a/packages/hoppscotch-common/package.json b/packages/hoppscotch-common/package.json
@@ -21,7 +21,7 @@
     "do-lintfix": "pnpm run lintfix"
   },
   "dependencies": {
-    "@apidevtools/swagger-parser": "12.0.0",
+    "@apidevtools/swagger-parser": "12.1.0",
     "@codemirror/autocomplete": "6.18.6",
     "@codemirror/commands": "6.8.1",
     "@codemirror/lang-javascript": "6.2.4",
@@ -34,7 +34,7 @@
     "@codemirror/search": "6.5.11",
     "@codemirror/state": "6.5.2",
     "@codemirror/view": "6.38.1",
-    "@guolao/vue-monaco-editor": "1.5.5",
+    "@guolao/vue-monaco-editor": "1.6.0",
     "@hoppscotch/codemirror-lang-graphql": "workspace:^",
     "@hoppscotch/data": "workspace:^",
     "@hoppscotch/httpsnippet": "3.0.9",
@@ -51,7 +51,7 @@
     "@tauri-apps/plugin-store": "2.2.0",
     "@types/hawk": "9.0.6",
     "@types/markdown-it": "14.1.2",
-    "@unhead/vue": "2.0.17",
+    "@unhead/vue": "2.0.19",
     "@urql/core": "6.0.1",
     "@urql/devtools": "2.0.3",
     "@urql/exchange-auth": "3.0.0",
@@ -77,7 +77,7 @@
     "jsonc-parser": "3.3.1",
     "jsonpath-plus": "10.3.0",
     "lodash-es": "4.17.21",
-    "lossless-json": "4.2.0",
+    "lossless-json": "4.3.0",
     "markdown-it": "14.1.0",
     "minisearch": "7.2.0",
     "monaco-editor": "0.52.2",
@@ -98,7 +98,7 @@
     "splitpanes": "3.1.5",
     "stream-browserify": "3.0.0",
     "subscriptions-transport-ws": "0.11.0",
-    "superjson": "2.2.2",
+    "superjson": "2.2.3",
     "tern": "0.24.3",
     "timers": "0.1.1",
     "tippy.js": "6.3.7",
@@ -110,7 +110,7 @@
     "vue-i18n": "11.1.12",
     "vue-json-pretty": "2.5.0",
     "vue-pdf-embed": "2.1.3",
-    "vue-router": "4.5.1",
+    "vue-router": "4.6.3",
     "vue-tippy": "6.7.1",
     "vuedraggable-es": "4.1.1",
     "wonka": "6.3.5",
@@ -133,7 +133,7 @@
     "@iconify-json/lucide": "1.2.68",
     "@intlify/unplugin-vue-i18n": "6.0.8",
     "@relmify/jest-fp-ts": "2.1.1",
-    "@rushstack/eslint-patch": "1.12.0",
+    "@rushstack/eslint-patch": "1.14.0",
     "@types/har-format": "1.2.16",
     "@types/js-yaml": "4.0.9",
     "@types/lodash-es": "4.17.12",
@@ -144,18 +144,18 @@
     "@types/splitpanes": "2.2.6",
     "@types/uuid": "10.0.0",
     "@types/yargs-parser": "21.0.3",
-    "@typescript-eslint/eslint-plugin": "8.44.1",
-    "@typescript-eslint/parser": "8.44.1",
+    "@typescript-eslint/eslint-plugin": "8.46.2",
+    "@typescript-eslint/parser": "8.46.2",
     "@vitejs/plugin-vue": "5.1.4",
     "@vue/compiler-sfc": "3.5.22",
     "@vue/eslint-config-typescript": "13.0.0",
     "@vue/runtime-core": "3.5.22",
     "autoprefixer": "10.4.21",
-    "cross-env": "10.0.0",
-    "dotenv": "17.2.2",
+    "cross-env": "10.1.0",
+    "dotenv": "17.2.3",
     "eslint": "8.57.0",
     "eslint-plugin-prettier": "5.5.4",
-    "eslint-plugin-vue": "10.5.0",
+    "eslint-plugin-vue": "10.5.1",
     "glob": "11.0.3",
     "jsdom": "26.1.0",
     "npm-run-all": "4.1.5",
@@ -166,7 +166,7 @@
     "rollup-plugin-polyfill-node": "0.13.0",
     "sass": "1.93.2",
     "tailwindcss": "3.4.16",
-    "typescript": "5.9.2",
+    "typescript": "5.9.3",
     "unplugin-fonts": "1.4.0",
     "unplugin-icons": "22.2.0",
     "unplugin-vue-components": "29.0.0",
@@ -176,7 +176,7 @@
     "vite-plugin-html-config": "2.0.2",
     "vite-plugin-pages": "0.33.1",
     "vite-plugin-pages-sitemap": "1.7.1",
-    "vite-plugin-pwa": "1.0.3",
+    "vite-plugin-pwa": "1.1.0",
     "vite-plugin-vue-layouts": "0.11.0",
     "vitest": "3.2.4",
     "vue-tsc": "1.8.8"
diff --git a/packages/hoppscotch-data/package.json b/packages/hoppscotch-data/package.json
@@ -37,7 +37,7 @@
   "devDependencies": {
     "@types/lodash": "4.17.20",
     "@types/uuid": "10.0.0",
-    "typescript": "5.9.2",
+    "typescript": "5.9.3",
     "vite": "6.3.6"
   },
   "dependencies": {
diff --git a/packages/hoppscotch-desktop/package.json b/packages/hoppscotch-desktop/package.json
@@ -36,13 +36,13 @@
     "fp-ts": "2.16.11",
     "rxjs": "7.8.2",
     "vue": "3.5.22",
-    "vue-router": "4.5.1",
+    "vue-router": "4.6.3",
     "vue-tippy": "6.7.1",
     "zod": "3.25.32"
   },
   "devDependencies": {
     "@iconify-json/lucide": "1.2.68",
-    "@rushstack/eslint-patch": "1.12.0",
+    "@rushstack/eslint-patch": "1.14.0",
     "@tauri-apps/cli": "^2",
     "@typescript-eslint/eslint-plugin": "8.44.1",
     "@typescript-eslint/parser": "8.44.1",
@@ -51,11 +51,11 @@
     "autoprefixer": "10.4.21",
     "eslint": "8.57.0",
     "eslint-plugin-prettier": "5.5.4",
-    "eslint-plugin-vue": "10.5.0",
+    "eslint-plugin-vue": "10.5.1",
     "postcss": "8.5.6",
     "sass": "1.93.2",
     "tailwindcss": "3.4.16",
-    "typescript": "5.9.2",
+    "typescript": "5.9.3",
     "unplugin-icons": "22.2.0",
     "unplugin-vue-components": "29.0.0",
     "vite": "6.3.5",
diff --git a/packages/hoppscotch-desktop/plugin-workspace/tauri-plugin-appload/package.json b/packages/hoppscotch-desktop/plugin-workspace/tauri-plugin-appload/package.json
@@ -26,8 +26,8 @@
   },
   "devDependencies": {
     "@rollup/plugin-typescript": "^11.1.6",
-    "rollup": "^4.52.2",
+    "rollup": "^4.52.5",
     "tslib": "^2.6.2",
-    "typescript": "5.9.2"
+    "typescript": "5.9.3"
   }
 }
diff --git a/packages/hoppscotch-desktop/plugin-workspace/tauri-plugin-relay/package.json b/packages/hoppscotch-desktop/plugin-workspace/tauri-plugin-relay/package.json
@@ -26,8 +26,8 @@
   },
   "devDependencies": {
     "@rollup/plugin-typescript": "^11.1.6",
-    "rollup": "^4.52.2",
+    "rollup": "^4.52.5",
     "tslib": "^2.6.2",
-    "typescript": "5.9.2"
+    "typescript": "5.9.3"
   }
 }
diff --git a/packages/hoppscotch-js-sandbox/package.json b/packages/hoppscotch-js-sandbox/package.json
@@ -63,15 +63,15 @@
     "@relmify/jest-fp-ts": "2.1.1",
     "@types/jest": "30.0.0",
     "@types/lodash": "4.17.20",
-    "@types/node": "24.3.0",
+    "@types/node": "24.9.1",
     "@typescript-eslint/eslint-plugin": "8.44.1",
     "@typescript-eslint/parser": "8.44.1",
     "eslint": "8.57.0",
     "eslint-config-prettier": "10.1.8",
     "eslint-plugin-prettier": "5.5.4",
     "io-ts": "2.2.22",
     "prettier": "3.6.2",
-    "typescript": "5.9.2",
+    "typescript": "5.9.3",
     "vite": "6.3.6",
     "vitest": "3.2.4"
   },
diff --git a/packages/hoppscotch-kernel/package.json b/packages/hoppscotch-kernel/package.json
@@ -35,8 +35,8 @@
   },
   "homepage": "https://github.com/hoppscotch/hoppscotch#readme",
   "devDependencies": {
-    "@types/node": "24.3.0",
-    "typescript": "5.9.2",
+    "@types/node": "24.9.1",
+    "typescript": "5.9.3",
     "vite": "6.3.5"
   },
   "peerDependencies": {
@@ -48,15 +48,15 @@
     }
   },
   "dependencies": {
-    "axios": "1.12.2",
-    "fp-ts": "2.16.11",
-    "aws4fetch": "1.0.20",
-    "zod": "3.25.32",
-    "superjson": "2.2.2",
-    "@tauri-apps/plugin-shell": "2.2.1",
+    "@hoppscotch/plugin-relay": "github:CuriousCorrelation/tauri-plugin-relay#5d59b97fe331ca62e8be0454ff3f4e5f6185ae70",
     "@tauri-apps/plugin-dialog": "2.0.1",
     "@tauri-apps/plugin-fs": "2.0.2",
+    "@tauri-apps/plugin-shell": "2.2.1",
     "@tauri-apps/plugin-store": "2.2.0",
-    "@hoppscotch/plugin-relay": "github:CuriousCorrelation/tauri-plugin-relay#5d59b97fe331ca62e8be0454ff3f4e5f6185ae70"
+    "aws4fetch": "1.0.20",
+    "axios": "1.12.2",
+    "fp-ts": "2.16.11",
+    "superjson": "2.2.3",
+    "zod": "3.25.32"
   }
 }
diff --git a/packages/hoppscotch-selfhost-desktop/package.json b/packages/hoppscotch-selfhost-desktop/package.json
diff --git a/packages/hoppscotch-selfhost-web/package.json b/packages/hoppscotch-selfhost-web/package.json
diff --git a/packages/hoppscotch-sh-admin/package.json b/packages/hoppscotch-sh-admin/package.json
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/prod.Dockerfile b/prod.Dockerfile

Original file line number	Diff line number	Diff line change
`@@ -24,8 +24,8 @@`
`24`	`24`	`"devDependencies": {`
`25`	`25`	`"@lezer/generator": "1.8.0",`
`26`	`26`	`"@rollup/plugin-typescript": "12.1.4",`
`27`		`- "mocha": "11.7.2",`
`28`		`- "rollup": "4.52.2",`
`29`		`- "typescript": "5.9.2"`
	`27`	`+ "mocha": "11.7.4",`
	`28`	`+ "rollup": "4.52.5",`
	`29`	`+ "typescript": "5.9.3"`
`30`	`30`	`}`
`31`	`31`	`}`
Original file line number	Diff line number	Diff line change
`@@ -64,9 +64,9 @@`
`64`	`64`	`"fp-ts": "2.16.11",`
`65`	`65`	`"prettier": "3.6.2",`
`66`	`66`	`"qs": "6.11.2",`
`67`		`- "semver": "7.7.2",`
	`67`	`+ "semver": "7.7.3",`
`68`	`68`	`"tsup": "8.5.0",`
`69`		`- "typescript": "5.9.2",`
	`69`	`+ "typescript": "5.9.3",`
`70`	`70`	`"vitest": "3.2.4"`
`71`	`71`	`}`
`72`	`72`	`}`
Original file line number	Diff line number	Diff line change
`@@ -26,8 +26,8 @@`
`26`	`26`	`},`
`27`	`27`	`"devDependencies": {`
`28`	`28`	`"@rollup/plugin-typescript": "^11.1.6",`
`29`		`- "rollup": "^4.52.2",`
	`29`	`+ "rollup": "^4.52.5",`
`30`	`30`	`"tslib": "^2.6.2",`
`31`		`- "typescript": "5.9.2"`
	`31`	`+ "typescript": "5.9.3"`
`32`	`32`	`}`
`33`	`33`	`}`