2fe8c93edb
Override esbuild >=0.25.0 to fix CVE in dev server that allows cross-origin requests. The vulnerable 0.18.20 was pulled in transitively via drizzle-kit → @esbuild-kit. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
24 lines
473 B
YAML
24 lines
473 B
YAML
packages:
|
|
- "apps/*"
|
|
- "packages/*"
|
|
|
|
catalog:
|
|
react: ^19.1.0
|
|
react-dom: ^19.1.0
|
|
react-router: ^7.6.1
|
|
"@react-router/dev": ^7.6.1
|
|
"@react-router/node": ^7.6.1
|
|
"@react-router/serve": ^7.6.1
|
|
"@types/react": ^19.1.4
|
|
"@types/react-dom": ^19.1.5
|
|
tailwindcss: ^4.1.7
|
|
"@tailwindcss/vite": ^4.1.7
|
|
typescript: ^5.8.3
|
|
vite: ^6.0.0
|
|
drizzle-orm: ^0.44.0
|
|
drizzle-kit: ^0.31.0
|
|
drizzle-postgis: ^1.1.0
|
|
postgres: ^3.4.0
|
|
|
|
overrides:
|
|
esbuild: ">=0.25.0"
|