From 5bbd8c715a2fe31f39827566b0cc029d0903ccef Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 13 Jul 2026 18:57:41 +0000 Subject: [PATCH 1/2] Bump fontdue-js from 3.0.5 to 3.0.6 Bumps fontdue-js from 3.0.5 to 3.0.6. --- updated-dependencies: - dependency-name: fontdue-js dependency-version: 3.0.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- package-lock.json | 32 ++++++++++---------------------- package.json | 2 +- 2 files changed, 11 insertions(+), 23 deletions(-) diff --git a/package-lock.json b/package-lock.json index bffa2f6..05d3dc5 100644 --- a/package-lock.json +++ b/package-lock.json @@ -8,13 +8,13 @@ "dependencies": { "@netlify/functions": "^5.2.0", "@tailwindcss/vite": "^4.1.18", - "@tanstack/react-devtools": "latest", - "@tanstack/react-router": "latest", - "@tanstack/react-router-devtools": "latest", - "@tanstack/react-router-ssr-query": "latest", - "@tanstack/react-start": "latest", + "@tanstack/react-devtools": "*", + "@tanstack/react-router": "*", + "@tanstack/react-router-devtools": "*", + "@tanstack/react-router-ssr-query": "*", + "@tanstack/react-start": "*", "@tanstack/router-plugin": "^1.132.0", - "fontdue-js": "3.0.5", + "fontdue-js": "3.0.6", "lucide-react": "^0.545.0", "react": "^19.2.0", "react-dom": "^19.2.0", @@ -26,7 +26,7 @@ "@graphql-codegen/typescript-operations": "^5.1.0", "@netlify/vite-plugin-tanstack-start": "^1.2.15", "@tailwindcss/typography": "^0.5.16", - "@tanstack/devtools-vite": "latest", + "@tanstack/devtools-vite": "*", "@testing-library/dom": "^10.4.1", "@testing-library/react": "^16.3.0", "@types/node": "^22.10.2", @@ -1856,18 +1856,6 @@ "graphql": "^14.0.0 || ^15.0.0 || ^16.0.0 || ^17.0.0" } }, - "node_modules/@graphql-tools/executor-graphql-ws/node_modules/crossws": { - "version": "0.3.5", - "resolved": "https://registry.npmjs.org/crossws/-/crossws-0.3.5.tgz", - "integrity": "sha512-ojKiDvcmByhwa8YYqbQI/hg7MEU0NC03+pSdEq4ZUnZR9xXpwk7E43SMNGkn+JxJGPFtNvQ48+vV2p+P1ml5PA==", - "dev": true, - "license": "MIT", - "optional": true, - "peer": true, - "dependencies": { - "uncrypto": "^0.1.3" - } - }, "node_modules/@graphql-tools/executor-graphql-ws/node_modules/graphql-ws": { "version": "6.0.8", "resolved": "https://registry.npmjs.org/graphql-ws/-/graphql-ws-6.0.8.tgz", @@ -10272,9 +10260,9 @@ "license": "MIT" }, "node_modules/fontdue-js": { - "version": "3.0.5", - "resolved": "https://registry.npmjs.org/fontdue-js/-/fontdue-js-3.0.5.tgz", - "integrity": "sha512-C8nDesIck7odFV0aCRNHWuDB/Al0dh97y1iaXdtD0nm572HWLYOuaneXJni7IIs8zqB8535A0EoGqZprOGJovw==", + "version": "3.0.6", + "resolved": "https://registry.npmjs.org/fontdue-js/-/fontdue-js-3.0.6.tgz", + "integrity": "sha512-ThSTQ4tue+hxyE9d6TqwQNRGsSKSonixCRQxc2UidQtjOCQMNfAHqFdcXv8yQvUHzw/rmWtHA0b/E+LNWtXpeg==", "license": "MIT", "dependencies": { "@emotion/react": "^11.14.0", diff --git a/package.json b/package.json index 91faf02..83f4113 100644 --- a/package.json +++ b/package.json @@ -24,7 +24,7 @@ "@tanstack/react-router-ssr-query": "latest", "@tanstack/react-start": "latest", "@tanstack/router-plugin": "^1.132.0", - "fontdue-js": "3.0.5", + "fontdue-js": "3.0.6", "lucide-react": "^0.545.0", "react": "^19.2.0", "react-dom": "^19.2.0", From 11d6aeab32134390f117555963687c31c21de715 Mon Sep 17 00:00:00 2001 From: Tom Conroy Date: Mon, 13 Jul 2026 22:12:23 +0200 Subject: [PATCH 2/2] Regenerate package-lock.json with npm 10 Dependabot's npm 11 lockfile omits nested optional-peer entries npm 10 requires (crossws in the h3/nitro chain), so npm ci failed. Regenerated with npm 10.9.2; verified valid under npm 10 and 11. Co-Authored-By: Claude Fable 5 --- package-lock.json | 24 ++++++++++++++++++------ 1 file changed, 18 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index 05d3dc5..561450f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -8,11 +8,11 @@ "dependencies": { "@netlify/functions": "^5.2.0", "@tailwindcss/vite": "^4.1.18", - "@tanstack/react-devtools": "*", - "@tanstack/react-router": "*", - "@tanstack/react-router-devtools": "*", - "@tanstack/react-router-ssr-query": "*", - "@tanstack/react-start": "*", + "@tanstack/react-devtools": "latest", + "@tanstack/react-router": "latest", + "@tanstack/react-router-devtools": "latest", + "@tanstack/react-router-ssr-query": "latest", + "@tanstack/react-start": "latest", "@tanstack/router-plugin": "^1.132.0", "fontdue-js": "3.0.6", "lucide-react": "^0.545.0", @@ -26,7 +26,7 @@ "@graphql-codegen/typescript-operations": "^5.1.0", "@netlify/vite-plugin-tanstack-start": "^1.2.15", "@tailwindcss/typography": "^0.5.16", - "@tanstack/devtools-vite": "*", + "@tanstack/devtools-vite": "latest", "@testing-library/dom": "^10.4.1", "@testing-library/react": "^16.3.0", "@types/node": "^22.10.2", @@ -1856,6 +1856,18 @@ "graphql": "^14.0.0 || ^15.0.0 || ^16.0.0 || ^17.0.0" } }, + "node_modules/@graphql-tools/executor-graphql-ws/node_modules/crossws": { + "version": "0.3.5", + "resolved": "https://registry.npmjs.org/crossws/-/crossws-0.3.5.tgz", + "integrity": "sha512-ojKiDvcmByhwa8YYqbQI/hg7MEU0NC03+pSdEq4ZUnZR9xXpwk7E43SMNGkn+JxJGPFtNvQ48+vV2p+P1ml5PA==", + "dev": true, + "license": "MIT", + "optional": true, + "peer": true, + "dependencies": { + "uncrypto": "^0.1.3" + } + }, "node_modules/@graphql-tools/executor-graphql-ws/node_modules/graphql-ws": { "version": "6.0.8", "resolved": "https://registry.npmjs.org/graphql-ws/-/graphql-ws-6.0.8.tgz",