chore: security patch for the dependency chain (hoppscotch#5349)

mirarifhasan · jamesgeorge007 · web-flow · commit a0c2635000e0 · 2025-08-26T14:56:48.000+05:30
Co-authored-by: jamesgeorge007 &lt;25279263+jamesgeorge007@users.noreply.github.com&gt;
diff --git a/package.json b/package.json
@@ -35,26 +35,12 @@
   },
   "pnpm": {
     "overrides": {
-      "cross-spawn": "7.0.6",
-      "vue": "3.5.19",
       "@nestjs-modules/mailer>mjml": "5.0.0-alpha.4",
-      "subscriptions-transport-ws>ws": "7.5.10",
-      "braces": "3.0.3",
-      "send": "0.19.0",
-      "pug": "3.0.3",
-      "body-parser": "1.20.3",
-      "path-to-regexp@3.2.0": "3.3.0",
-      "path-to-regexp@0.1.10": "0.1.12",
-      "micromatch@<4.0.8": "4.0.8",
-      "dset@3.1.3": "3.1.4",
-      "nanoid@3.3.7": "3.3.8",
-      "execa@0.10.0": "2.0.0",
-      "@babel/runtime@<7.26.10": "7.26.10",
       "apiconnect-wsdl": "2.0.36",
-      "@xmldom/xmldom": "0.8.10",
-      "brace-expansion@2.0.1": "2.0.2",
-      "brace-expansion@1.1.11": "1.1.12",
-      "form-data@4.0.2": "4.0.4"
+      "cross-spawn": "7.0.6",
+      "execa@0.10.0": "2.0.0",
+      "sha.js@2.4.11": "2.4.12",
+      "vue": "3.5.20"
     },
     "onlyBuiltDependencies": [
       "@apollo/protobufjs",
diff --git a/packages/codemirror-lang-graphql/package.json b/packages/codemirror-lang-graphql/package.json
@@ -25,7 +25,7 @@
     "@lezer/generator": "1.8.0",
     "@rollup/plugin-typescript": "12.1.4",
     "mocha": "11.7.1",
-    "rollup": "4.46.3",
+    "rollup": "4.48.1",
     "typescript": "5.9.2"
   }
 }
diff --git a/packages/hoppscotch-agent/package.json b/packages/hoppscotch-agent/package.json
@@ -17,10 +17,10 @@
     "axios": "1.11.0",
     "fp-ts": "2.16.11",
     "lodash-es": "4.17.21",
-    "vue": "3.5.19"
+    "vue": "3.5.20"
   },
   "devDependencies": {
-    "@iconify-json/lucide": "1.2.63",
+    "@iconify-json/lucide": "1.2.64",
     "@tauri-apps/cli": "^2.0.3",
     "@types/lodash-es": "4.17.12",
     "@types/node": "24.3.0",
diff --git a/packages/hoppscotch-backend/package.json b/packages/hoppscotch-backend/package.json
@@ -76,7 +76,7 @@
   },
   "devDependencies": {
     "@eslint/eslintrc": "3.3.1",
-    "@eslint/js": "9.33.0",
+    "@eslint/js": "9.34.0",
     "@nestjs/cli": "11.0.10",
     "@nestjs/schematics": "11.0.7",
     "@nestjs/testing": "11.1.6",
@@ -86,7 +86,7 @@
     "@types/express": "5.0.3",
     "@types/jest": "30.0.0",
     "@types/node": "24.3.0",
-    "@types/nodemailer": "7.0.0",
+    "@types/nodemailer": "7.0.1",
     "@types/passport-github2": "1.2.9",
     "@types/passport-google-oauth20": "2.0.16",
     "@types/passport-jwt": "4.0.1",
@@ -95,7 +95,7 @@
     "@typescript-eslint/eslint-plugin": "8.40.0",
     "@typescript-eslint/parser": "8.40.0",
     "cross-env": "10.0.0",
-    "eslint": "9.33.0",
+    "eslint": "9.34.0",
     "eslint-config-prettier": "10.1.8",
     "eslint-plugin-prettier": "5.5.4",
     "globals": "16.3.0",
@@ -105,7 +105,7 @@
     "source-map-support": "0.5.21",
     "supertest": "7.1.4",
     "ts-jest": "29.4.1",
-    "ts-loader": "9.5.2",
+    "ts-loader": "9.5.4",
     "ts-node": "10.9.2",
     "tsconfig-paths": "4.2.0",
     "typescript": "5.9.2"
diff --git a/packages/hoppscotch-common/package.json b/packages/hoppscotch-common/package.json
@@ -106,7 +106,7 @@
     "util": "0.12.5",
     "uuid": "11.1.0",
     "verzod": "0.4.0",
-    "vue": "3.5.19",
+    "vue": "3.5.20",
     "vue-i18n": "11.1.11",
     "vue-json-pretty": "2.5.0",
     "vue-pdf-embed": "2.1.3",
@@ -130,7 +130,7 @@
     "@graphql-codegen/typescript-urql-graphcache": "3.1.1",
     "@graphql-codegen/urql-introspection": "3.0.1",
     "@graphql-typed-document-node/core": "3.2.0",
-    "@iconify-json/lucide": "1.2.63",
+    "@iconify-json/lucide": "1.2.64",
     "@intlify/unplugin-vue-i18n": "6.0.8",
     "@relmify/jest-fp-ts": "2.1.1",
     "@rushstack/eslint-patch": "1.12.0",
@@ -147,9 +147,9 @@
     "@typescript-eslint/eslint-plugin": "8.40.0",
     "@typescript-eslint/parser": "8.40.0",
     "@vitejs/plugin-vue": "5.1.4",
-    "@vue/compiler-sfc": "3.5.19",
+    "@vue/compiler-sfc": "3.5.20",
     "@vue/eslint-config-typescript": "13.0.0",
-    "@vue/runtime-core": "3.5.19",
+    "@vue/runtime-core": "3.5.20",
     "autoprefixer": "10.4.21",
     "cross-env": "10.0.0",
     "dotenv": "17.2.1",
@@ -164,14 +164,14 @@
     "prettier": "3.6.2",
     "prettier-plugin-tailwindcss": "0.6.14",
     "rollup-plugin-polyfill-node": "0.13.0",
-    "sass": "1.90.0",
+    "sass": "1.91.0",
     "tailwindcss": "3.4.16",
     "typescript": "5.9.2",
     "unplugin-fonts": "1.4.0",
     "unplugin-icons": "22.2.0",
     "unplugin-vue-components": "29.0.0",
     "vite": "6.3.5",
-    "vite-plugin-checker": "0.10.2",
+    "vite-plugin-checker": "0.10.3",
     "vite-plugin-fonts": "0.7.0",
     "vite-plugin-html-config": "2.0.2",
     "vite-plugin-pages": "0.33.1",
diff --git a/packages/hoppscotch-data/package.json b/packages/hoppscotch-data/package.json
@@ -43,7 +43,7 @@
   "dependencies": {
     "fp-ts": "2.16.11",
     "io-ts": "2.2.22",
-    "jose": "6.0.12",
+    "jose": "6.0.13",
     "lodash": "4.17.21",
     "parser-ts": "0.7.0",
     "uuid": "11.1.0",
diff --git a/packages/hoppscotch-desktop/package.json b/packages/hoppscotch-desktop/package.json
@@ -35,13 +35,13 @@
     "@vueuse/core": "13.7.0",
     "fp-ts": "2.16.11",
     "rxjs": "7.8.2",
-    "vue": "3.5.19",
+    "vue": "3.5.20",
     "vue-router": "4.5.1",
     "vue-tippy": "6.7.1",
     "zod": "3.25.32"
   },
   "devDependencies": {
-    "@iconify-json/lucide": "1.2.63",
+    "@iconify-json/lucide": "1.2.64",
     "@rushstack/eslint-patch": "1.12.0",
     "@tauri-apps/cli": "^2",
     "@typescript-eslint/eslint-plugin": "8.40.0",
@@ -53,7 +53,7 @@
     "eslint-plugin-prettier": "5.5.4",
     "eslint-plugin-vue": "10.4.0",
     "postcss": "8.5.6",
-    "sass": "1.90.0",
+    "sass": "1.91.0",
     "tailwindcss": "3.4.16",
     "typescript": "5.9.2",
     "unplugin-icons": "22.2.0",
diff --git a/packages/hoppscotch-desktop/plugin-workspace/tauri-plugin-appload/package.json b/packages/hoppscotch-desktop/plugin-workspace/tauri-plugin-appload/package.json
@@ -26,8 +26,8 @@
   },
   "devDependencies": {
     "@rollup/plugin-typescript": "^11.1.6",
-    "rollup": "^4.9.6",
-    "typescript": "5.9.2",
-    "tslib": "^2.6.2"
+    "rollup": "^4.48.1",
+    "tslib": "^2.6.2",
+    "typescript": "5.9.2"
   }
 }
diff --git a/packages/hoppscotch-desktop/plugin-workspace/tauri-plugin-relay/package.json b/packages/hoppscotch-desktop/plugin-workspace/tauri-plugin-relay/package.json
@@ -26,8 +26,8 @@
   },
   "devDependencies": {
     "@rollup/plugin-typescript": "^11.1.6",
-    "rollup": "^4.9.6",
-    "typescript": "5.9.2",
-    "tslib": "^2.6.2"
+    "rollup": "^4.48.1",
+    "tslib": "^2.6.2",
+    "typescript": "5.9.2"
   }
 }
diff --git a/packages/hoppscotch-selfhost-desktop/package.json b/packages/hoppscotch-selfhost-desktop/package.json
@@ -37,7 +37,7 @@
     "tauri-plugin-store-api": "0.0.0",
     "util": "0.12.5",
     "verzod": "0.3.0",
-    "vue": "3.3.9",
+    "vue": "3.5.20",
     "workbox-window": "6.6.0",
     "zod": "3.25.32"
   },
@@ -50,7 +50,7 @@
     "@graphql-codegen/typescript-urql-graphcache": "2.4.5",
     "@graphql-codegen/urql-introspection": "2.2.1",
     "@graphql-typed-document-node/core": "3.2.0",
-    "@iconify-json/lucide": "1.1.144",
+    "@iconify-json/lucide": "1.2.64",
     "@intlify/unplugin-vue-i18n": "6.0.4",
     "@rushstack/eslint-patch": "1.3.3",
     "@types/lodash-es": "4.17.10",
diff --git a/packages/hoppscotch-selfhost-web/package.json b/packages/hoppscotch-selfhost-web/package.json
@@ -45,7 +45,7 @@
     "stream-browserify": "3.0.0",
     "util": "0.12.5",
     "verzod": "0.4.0",
-    "vue": "3.5.19",
+    "vue": "3.5.20",
     "workbox-window": "7.3.0",
     "zod": "3.25.32"
   },
@@ -58,7 +58,7 @@
     "@graphql-codegen/typescript-urql-graphcache": "3.1.1",
     "@graphql-codegen/urql-introspection": "3.0.1",
     "@graphql-typed-document-node/core": "3.2.0",
-    "@iconify-json/lucide": "1.2.63",
+    "@iconify-json/lucide": "1.2.64",
     "@intlify/unplugin-vue-i18n": "6.0.8",
     "@rushstack/eslint-patch": "1.12.0",
     "@typescript-eslint/eslint-plugin": "8.40.0",
diff --git a/packages/hoppscotch-sh-admin/package.json b/packages/hoppscotch-sh-admin/package.json
@@ -39,7 +39,7 @@
     "ts-node-dev": "2.0.0",
     "unplugin-icons": "22.2.0",
     "unplugin-vue-components": "29.0.0",
-    "vue": "3.5.19",
+    "vue": "3.5.20",
     "vue-i18n": "11.1.11",
     "vue-router": "4.5.1",
     "vue-tippy": "6.7.1"
@@ -53,18 +53,18 @@
     "@graphql-codegen/typescript-document-nodes": "4.0.16",
     "@graphql-codegen/typescript-operations": "4.6.1",
     "@graphql-codegen/urql-introspection": "3.0.1",
-    "@iconify-json/lucide": "1.2.63",
+    "@iconify-json/lucide": "1.2.64",
     "@import-meta-env/cli": "0.7.3",
     "@import-meta-env/unplugin": "0.6.2",
     "@types/lodash-es": "4.17.12",
     "@vitejs/plugin-vue": "5.1.4",
-    "@vue/compiler-sfc": "3.5.19",
+    "@vue/compiler-sfc": "3.5.20",
     "autoprefixer": "10.4.21",
     "dotenv": "17.2.1",
     "graphql-tag": "2.12.6",
     "hoppscotch-backend": "workspace:^",
     "npm-run-all": "4.1.5",
-    "sass": "1.90.0",
+    "sass": "1.91.0",
     "ts-node": "10.9.2",
     "typescript": "5.9.2",
     "unplugin-fonts": "1.4.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

Original file line number	Diff line number	Diff line change
`@@ -25,7 +25,7 @@`
`25`	`25`	`"@lezer/generator": "1.8.0",`
`26`	`26`	`"@rollup/plugin-typescript": "12.1.4",`
`27`	`27`	`"mocha": "11.7.1",`
`28`		`- "rollup": "4.46.3",`
	`28`	`+ "rollup": "4.48.1",`
`29`	`29`	`"typescript": "5.9.2"`
`30`	`30`	`}`
`31`	`31`	`}`
Original file line number	Diff line number	Diff line change
`@@ -26,8 +26,8 @@`
`26`	`26`	`},`
`27`	`27`	`"devDependencies": {`
`28`	`28`	`"@rollup/plugin-typescript": "^11.1.6",`
`29`		`- "rollup": "^4.9.6",`
`30`		`- "typescript": "5.9.2",`
`31`		`- "tslib": "^2.6.2"`
	`29`	`+ "rollup": "^4.48.1",`
	`30`	`+ "tslib": "^2.6.2",`
	`31`	`+ "typescript": "5.9.2"`
`32`	`32`	`}`
`33`	`33`	`}`