Merge pull request #3275 from evidence-dev/cves-06-02-2026

Cves 06 02 2026

Author: zachstence

.changeset/cuddly-waves-tap.md

@@ -0,0 +1,8 @@
+---
+'@evidence-dev/preprocess': patch
+'@evidence-dev/evidence': patch
+'@evidence-dev/sdk': patch
+'@evidence-dev/core-components': patch
+---
+
+Update packages to resolve CVEs

package.json

@@ -123,7 +123,10 @@
 			"js-yaml@>=3 <3.14.2": "3.14.2",
 			"js-yaml@>=4": ">=4.1.1",
 			"vite@>=5 <5.4.21": "5.4.21",
-			"tmp": ">=0.2.4"
+			"tmp": ">=0.2.4",
+			"qs@<6.14.1": ">=6.14.1",
+			"@parcel/reporter-dev-server@<=2.16.3": ">=2.16.4",
+			"preact@>=10.26.5 <10.28.2": ">=10.28.2"
 		}
 	},
 	"packageManager": "pnpm@8.15.9+sha512.499434c9d8fdd1a2794ebf4552b3b25c0a633abcee5bb15e7b5de90f32f47b513aca98cd5cfd001c31f0db454bc3804edccd578501e4ca293a6816166bbd9f81"

packages/lib/preprocess/package.json

@@ -37,7 +37,7 @@
 		"@types/mock-fs": "^4.13.1",
 		"@types/prismjs": "^1.26.4",
 		"mock-fs": "^5.2.0",
-		"parcel": "^2.16.3",
+		"parcel": "^2.16.4",
 		"typescript": "5.4.2",
 		"vitest": "^2.1.9"
 	},