mirror of
https://github.com/authelia/authelia.git
synced 2026-10-28 09:34:52 +08:00
renovate[bot]
a5da19e41b
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [happy-dom](https://redirect.github.com/capricorn86/happy-dom) | [`20.14.6` → `21.0.1`](https://renovatebot.com/diffs/npm/happy-dom/20.14.6/21.0.1) |  |  | --- ### Release Notes <details> <summary>capricorn86/happy-dom (happy-dom)</summary> ### [`v21.0.1`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v21.0.1) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v21.0.0...v21.0.1) ##### 👷♂️ Patch fixes - Adds alias for enabling CSS and iframe loading to [@​happy-dom/server-renderer](https://redirect.github.com/capricorn86/happy-dom/wiki/Server-Renderer) - By **[@​capricorn86](https://redirect.github.com/capricorn86)** ### [`v21.0.0`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v21.0.0) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v20.14.6...v21.0.0) ##### 💣 Breaking Changes - Disables CSS and IFrame loading by default to prevent [server-side request forgery (SSRF)](https://en.wikipedia.org/wiki/Server-side_request_forgery) - By **[@​capricorn86](https://redirect.github.com/capricorn86)** - An attacker could embed `<iframe>` or `<link rel="stylesheet">` elements in untrusted HTML to make Happy DOM send HTTP requests from the server to attacker-chosen URLs, including internal services. This could allow access to otherwise unreachable endpoints or trigger unintended actions, depending on the application and its network access. - The settings property `disableCSSFileLoading` has been deprecated - Added the new settings properties [enableCSSFileLoading](https://redirect.github.com/capricorn86/happy-dom/wiki/IBrowserSettings#properties) and [enableIframePageLoading](https://redirect.github.com/capricorn86/happy-dom/wiki/IBrowserSettings#properties) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE2NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
95 lines
2.7 KiB
JSON
95 lines
2.7 KiB
JSON
{
|
|
"name": "authelia",
|
|
"version": "4.39.28",
|
|
"private": true,
|
|
"type": "module",
|
|
"engines": {
|
|
"node": ">=22.22.0",
|
|
"pnpm": "12"
|
|
},
|
|
"dependencies": {
|
|
"@base-ui/react": "1.9.0",
|
|
"@simplewebauthn/browser": "14.0.0",
|
|
"axios": "1.20.0",
|
|
"broadcast-channel": "7.4.0",
|
|
"class-variance-authority": "0.7.1",
|
|
"cn": "0.4.0",
|
|
"i18next": "26.4.5",
|
|
"i18next-browser-languagedetector": "8.2.1",
|
|
"i18next-http-backend": "4.0.3",
|
|
"lucide-react": "1.57.0",
|
|
"qrcode.react": "4.2.0",
|
|
"react": "19.3.1",
|
|
"react-dom": "19.3.1",
|
|
"react-i18next": "17.0.16",
|
|
"react-router": "8.4.0",
|
|
"zxcvbn": "4.4.2"
|
|
},
|
|
"scripts": {
|
|
"prepare": "lefthook install",
|
|
"start": "vite --host",
|
|
"build": "vite build",
|
|
"coverage": "VITE_COVERAGE=true vite build",
|
|
"lint": "eslint --format visualstudio --no-warn-ignored --fix",
|
|
"test": "vitest run --coverage",
|
|
"test:watch": "vitest --coverage --ui",
|
|
"test:preview": "vitest-preview",
|
|
"report": "nyc report -r clover -r json -r lcov -r text"
|
|
},
|
|
"eslintConfig": {
|
|
"extends": "react-app"
|
|
},
|
|
"browserslist": {
|
|
"production": [
|
|
">0.2%",
|
|
"not dead",
|
|
"not op_mini all"
|
|
],
|
|
"development": [
|
|
">0.2%",
|
|
"not dead",
|
|
"not op_mini all",
|
|
"last 1 chrome version",
|
|
"last 1 firefox version",
|
|
"last 1 safari version"
|
|
]
|
|
},
|
|
"devDependencies": {
|
|
"@commitlint/cli": "21.2.3",
|
|
"@commitlint/config-conventional": "21.2.3",
|
|
"@eslint-react/eslint-plugin": "5.27.1",
|
|
"@limegrass/eslint-plugin-import-alias": "1.6.1",
|
|
"@tailwindcss/vite": "4.3.3",
|
|
"@testing-library/jest-dom": "7.0.1",
|
|
"@testing-library/react": "16.3.3",
|
|
"@types/react": "19.3.0",
|
|
"@types/react-dom": "19.3.0",
|
|
"@types/zxcvbn": "4.4.5",
|
|
"@typescript-eslint/eslint-plugin": "8.71.2",
|
|
"@typescript-eslint/parser": "8.71.2",
|
|
"@typescript/native": "npm:typescript@7.0.2",
|
|
"@vitejs/plugin-react": "6.1.2",
|
|
"@vitest/coverage-istanbul": "5.0.4",
|
|
"@vitest/ui": "5.0.4",
|
|
"eslint": "10.12.0",
|
|
"eslint-config-prettier": "10.1.8",
|
|
"eslint-formatter-rdjson": "1.0.6",
|
|
"eslint-formatter-visualstudio": "9.0.1",
|
|
"eslint-import-resolver-typescript": "4.4.5",
|
|
"eslint-plugin-import": "2.32.0",
|
|
"eslint-plugin-perfectionist": "5.12.1",
|
|
"eslint-plugin-prettier": "5.5.7",
|
|
"happy-dom": "21.0.1",
|
|
"lefthook": "2.2.2",
|
|
"prettier": "3.9.10",
|
|
"tailwindcss": "4.3.3",
|
|
"typescript": "npm:@typescript/typescript6@6.0.2",
|
|
"vite": "8.3.4",
|
|
"vite-plugin-checker": "0.14.5",
|
|
"vite-plugin-istanbul": "9.0.1",
|
|
"vite-plugin-svgr": "5.2.0",
|
|
"vitest": "5.0.4",
|
|
"vitest-preview": "0.0.3"
|
|
}
|
|
}
|