admin/c0py
3
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(deps): patch HIGH advisories in postcss (CVE-2026-45623, CVE-2026-73646)
CI (SIAX Cloud) / sonar (push) Skipped
Details
CI (SIAX Cloud) / sonar (pull_request) Skipped
Details
CI (SIAX Cloud) / security (push) Successful in 23s
Details
CI (SIAX Cloud) / security (pull_request) Successful in 16s
Details
CI (SIAX Cloud) / contracts (pull_request) Successful in 21s
Details
CI (SIAX Cloud) / contracts (push) Successful in 1m5s
Details
CI (SIAX Cloud) / quality (push) Successful in 1m26s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 1m22s
Details

Browse Source 
next@15.5.x hard-pins postcss 8.4.31, so a plain lockfile update cannot
reach the fix. Add a pnpm override (postcss@<8.5.18 -> 8.5.28, same major,
already resolved for vite) so the whole tree uses one patched postcss.

Lockfile diff is limited to dropping postcss 8.4.31 and repointing next.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
Claude Code
2026-09-30 12:06:29 +02:00
co-authored by Claude Sonnet 5.5
parent 15cf3eef2e
commit 1258903289
2 changed files with 3 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
package.json
+1 -1
View File
@@ -1 +1 @@
{"name":"c0py","version":"0.1.0","private":true,"description":"C0PY — canonical SIAX web product capture, digital twin, reconstruction and verification engine.","type":"module","scripts":{"build":"pnpm -r build","typecheck":"pnpm -r typecheck","test":"pnpm -r test","lint":"eslint .","validate:architecture":"node scripts/validate-canonical-architecture.mjs","dev:api":"pnpm --filter @siax/c0py-api dev","dev:web":"pnpm --filter @siax/c0py-web dev","start:api":"pnpm --filter @siax/c0py-api start"},"devDependencies":{"typescript":"^5.7.2","@types/node":"^24.0.0","@eslint/js":"^9.18.0","eslint":"^9.18.0","eslint-config-prettier":"^10.0.0","prettier":"^3.4.2","typescript-eslint":"^8.20.0"},"engines":{"node":">=20.17.0"},"pnpm":{"overrides":{"nanoid@<5.1.16":"5.1.16"}},"packageManager":"pnpm@9.15.9"}
{"name":"c0py","version":"0.1.0","private":true,"description":"C0PY — canonical SIAX web product capture, digital twin, reconstruction and verification engine.","type":"module","scripts":{"build":"pnpm -r build","typecheck":"pnpm -r typecheck","test":"pnpm -r test","lint":"eslint .","validate:architecture":"node scripts/validate-canonical-architecture.mjs","dev:api":"pnpm --filter @siax/c0py-api dev","dev:web":"pnpm --filter @siax/c0py-web dev","start:api":"pnpm --filter @siax/c0py-api start"},"devDependencies":{"typescript":"^5.7.2","@types/node":"^24.0.0","@eslint/js":"^9.18.0","eslint":"^9.18.0","eslint-config-prettier":"^10.0.0","prettier":"^3.4.2","typescript-eslint":"^8.20.0"},"engines":{"node":">=20.17.0"},"pnpm":{"overrides":{"nanoid@<5.1.16":"5.1.16","postcss@<8.5.18":"8.5.28"}},"packageManager":"pnpm@9.15.9"}
pnpm-lock.yaml
Generated
+2 -11
View File
@@ -6,6 +6,7 @@ settings:
overrides:
nanoid@<5.1.16: 5.1.16
postcss@<8.5.18: 8.5.28
importers:
@@ -1307,10 +1308,6 @@ packages:
engines: {node: '>=20'}
hasBin: true
postcss@8.4.31:
resolution: {integrity: sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ==}
engines: {node: ^10 || ^12 || >=14}
postcss@8.5.28:
resolution: {integrity: sha512-RRuzqDtt5Y9h3quz5hWhK+TPnsmVs6WwSU6LkJMeY4HstUEDuYTG8UJSdawMRzmzAtV+KEoG8N3Qg2qLy5vM/A==}
engines: {node: ^10 || ^12 || >=14}
@@ -2579,7 +2576,7 @@ snapshots:
'@next/env': 15.5.25
'@swc/helpers': 0.5.15
caniuse-lite: 1.0.30001810
postcss: 8.4.31
postcss: 8.5.28
react: 19.3.0
react-dom: 19.3.0(react@19.3.0)
styled-jsx: 5.1.6(react@19.3.0)
@@ -2690,12 +2687,6 @@ snapshots:
playwright-core@1.63.0: {}
postcss@8.4.31:
dependencies:
nanoid: 5.1.16
picocolors: 1.1.1
source-map-js: 1.2.1
postcss@8.5.28:
dependencies:
nanoid: 5.1.16