Security: align deps, catalog and overrides with 26_1

Author: aleksei-semikozov

package.json

@@ -65,58 +65,42 @@
   "pnpm": {
     "overrides": {
       "@devexpress/callsite-record@^4.1.6": "4.1.7",
-      "@hono/node-server@<1.19.10": "^1.19.10",
+      "basic-ftp@<5.2.1": "~5.2.1",
       "@isaacs/brace-expansion@<=5.0.0": "^5.0.1",
       "@modelcontextprotocol/sdk@>=1.10.0 <=1.25.3": "^1.26.0",
-      "@tootallnate/once@<3.0.1": "^3.0.1",
-      "ajv@>=7.0.0-alpha.0 <8.18.0": "^8.18.0",
-      "axios@<=1.13.4": "^1.13.5",
-      "basic-ftp@<5.2.1": "~5.2.1",
-      "bn.js@<4.12.3": "4.12.3",
-      "bn.js@>=5.0.0 <5.2.3": "5.2.3",
-      "brace-expansion@<1.1.13": "1.1.13",
-      "brace-expansion@>=2.0.0 <2.0.3": "2.0.3",
-      "braces@<3.0.3": "^3.0.3",
-      "cookie@<0.7.0": "^0.7.0",
-      "diff@>=4.0.0 <4.0.4": "4.0.4",
-      "diff@>=5.0.0 <5.2.2": "5.2.2",
-      "dompurify@<=3.3.1": "^3.3.2",
-      "express-rate-limit@>=8.2.0 <8.2.2": "^8.2.2",
-      "flatted@<3.4.0": "^3.4.0",
       "form-data@<2.5.4": "2.5.5",
       "form-data@>=4.0.0 <4.0.4": "^4.0.5",
+      "pbkdf2@<=3.1.2": "^3.1.3",
+      "sha.js@<=2.4.11": "^2.4.12",
+      "rollup@< 4.59.0": "^4.59.0",
+      "json5@<1.0.2": "^2.2.3",
+      "axios@<=1.13.4": "^1.13.5",
+      "braces@<3.0.3": "^3.0.3",
+      "semver@<5.7.2": "^5.7.2",
+      "qs": ">=6.14.1",
       "glob@>=10.2.0 <10.5.0": "^10.5.0",
+      "node-forge@<1.4.0": "1.4.0",
+      "vite@>=6.0.0 <6.4.1": "^7.3.2",
+      "vite@>=7.0.0 <=7.3.1": "^7.3.2",
+      "tar@<=7.5.9": "^7.5.10",
+      "underscore@<=1.13.7": "^1.13.8",
       "hono@<4.12.4": "^4.12.4",
-      "immutable@>=4.0.0-rc.1 <4.3.8": "^4.3.8",
+      "@hono/node-server@<1.19.10": "^1.19.10",
+      "express-rate-limit@>=8.2.0 <8.2.2": "^8.2.2",
       "immutable@>=5.0.0 <5.1.5": "^5.1.5",
-      "json5@<1.0.2": "^2.2.3",
-      "lodash.template@<4.18.1": "4.18.1",
-      "lodash@<4.18.1": "4.18.1",
-      "micromatch@<4.0.8": "^4.0.8",
       "minimatch@<3.1.5": "3.1.5",
-      "minimatch@>=10.0.0 < 10.2.4": "10.2.4",
-      "minimatch@>=5.0.0 <5.1.8": "5.1.8",
       "minimatch@>=9.0.0 < 9.0.7": "9.0.9",
-      "node-forge@<1.4.0": "1.4.0",
-      "path-to-regexp@0.1.12": "0.1.13",
-      "path-to-regexp@>=8.0.0 <8.4.0": "8.4.0",
-      "pbkdf2@<=3.1.2": "^3.1.3",
+      "minimatch@>=10.0.0 < 10.2.4": "10.2.4",
       "picomatch@>=2.0.0 <2.3.2": "2.3.2",
       "picomatch@>=4.0.0 <4.0.4": "4.0.4",
-      "qs": ">=6.14.1",
-      "rollup@< 4.59.0": "^4.59.0",
-      "rollup@<2.79.2": "^4.53.3",
-      "semver@<5.7.2": "^5.7.2",
+      "path-to-regexp@0.1.12": "0.1.13",
+      "path-to-regexp@>=8.0.0 <8.4.0": "8.4.0",
       "serialize-javascript@<=7.0.2": "7.0.5",
-      "sha.js@<=2.4.11": "^2.4.12",
-      "socket.io-parser@>=4.0.0 <4.2.6": "^4.2.6",
-      "tar@<=7.5.9": "^7.5.10",
-      "tmp@<=0.2.3": "^0.2.4",
-      "tough-cookie@<4.1.3": "^4.1.3",
-      "underscore@<=1.13.7": "^1.13.8",
+      "flatted@<3.4.0": "^3.4.0",
       "undici@<7.24.0": "^7.24.0",
-      "vite@>=6.0.0 <6.4.1": "^7.3.2",
-      "vite@>=7.0.0 <=7.3.1": "^7.3.2"
+      "socket.io-parser@>=4.0.0 <4.2.6": "^4.2.6",
+      "lodash@<4.18.1": "4.18.1",
+      "lodash.template@<4.18.1": "4.18.1"
     }
   },
   "packageManager": "pnpm@9.15.4"

packages/devextreme/package.json

@@ -67,12 +67,12 @@
     "unplugin": "^3.0.0"
   },
   "devDependencies": {
-    "@babel/core": "7.23.9",
+    "@babel/core": "7.29.0",
     "@babel/eslint-parser": "catalog:",
-    "@babel/parser": "7.23.9",
-    "@babel/plugin-transform-modules-commonjs": "7.23.3",
-    "@babel/plugin-transform-runtime": "7.23.3",
-    "@babel/preset-env": "7.23.9",
+    "@babel/parser": "7.29.0",
+    "@babel/plugin-transform-modules-commonjs": "7.28.6",
+    "@babel/plugin-transform-runtime": "7.29.0",
+    "@babel/preset-env": "7.29.0",
     "@devextreme-generator/angular": "3.0.12",
     "@devextreme-generator/build-helpers": "3.0.12",
     "@devextreme-generator/core": "3.0.12",
@@ -86,8 +86,8 @@
     "@stylistic/eslint-plugin": "catalog:",
     "@testcafe-community/axe": "3.5.0",
     "@testing-library/dom": "10.4.1",
-    "@testing-library/jest-dom": "^6.6.3",
-    "@testing-library/user-event": "^14.5.2",
+    "@testing-library/jest-dom": "6.9.1",
+    "@testing-library/user-event": "14.6.1",
     "@types/enzyme": "3.10.19",
     "@types/jquery": "catalog:",
     "@types/react": "16.14.69",
@@ -105,28 +105,28 @@
     "clean-css": "5.3.3",
     "cross-env": "7.0.3",
     "cssom": "0.5.0",
-    "csstype": "3.1.3",
+    "csstype": "3.2.3",
     "del": "2.2.2",
     "devextreme-aspnet-data": "5.0.0",
     "devextreme-cldr-data": "1.0.3",
-    "devextreme-exceljs-fork": "4.4.7",
+    "devextreme-exceljs-fork": "catalog:",
     "devextreme-screenshot-comparer": "2.0.17",
     "enzyme": "3.11.0",
     "enzyme-adapter-react-16": "1.15.8",
     "eslint": "catalog:",
     "eslint-config-airbnb-base": "15.0.0",
     "eslint-config-airbnb-typescript": "catalog:",
-    "eslint-config-devextreme": "1.1.6",
+    "eslint-config-devextreme": "catalog:",
     "eslint-migration-utils": "workspace:*",
     "eslint-plugin-i18n": "catalog:",
     "eslint-plugin-import": "catalog:",
-    "eslint-plugin-jest": "28.14.0",
+    "eslint-plugin-jest": "29.15.0",
     "eslint-plugin-jest-formatting": "3.1.0",
-    "eslint-plugin-jsx-a11y": "6.8.0",
-    "eslint-plugin-n": "^17.0.0",
+    "eslint-plugin-jsx-a11y": "catalog:",
+    "eslint-plugin-n": "17.24.0",
     "eslint-plugin-no-only-tests": "catalog:",
     "eslint-plugin-qunit": "catalog:",
-    "eslint-plugin-react": "7.33.2",
+    "eslint-plugin-react": "7.37.5",
     "eslint-plugin-rulesdir": "0.2.2",
     "eslint-plugin-simple-import-sort": "10.0.0",
     "eslint-plugin-spellcheck": "0.0.20",
@@ -160,7 +160,7 @@
     "gulp-remote-src": "0.4.4",
     "gulp-rename": "1.4.0",
     "gulp-replace": "0.6.1",
-    "gulp-sass": "5.1.0",
+    "gulp-sass": "6.0.1",
     "gulp-shell": "0.8.0",
     "gulp-tap": "1.0.1",
     "gulp-template": "5.0.0",
@@ -174,7 +174,7 @@
     "jest-environment-node": "29.7.0",
     "jquery": "catalog:",
     "jquery.tmpl": "0.0.2",
-    "jspdf": "4.0.0",
+    "jspdf": "4.2.1",
     "jspdf-autotable": "3.8.4",
     "knockout": "3.5.2",
     "lazypipe": "1.0.2",
@@ -192,7 +192,7 @@
     "react-dom": "16.14.0",
     "react-test-renderer": "16.14.0",
     "recast": "0.23.11",
-    "sass-embedded": "1.59.2",
+    "sass-embedded": "1.93.3",
     "shelljs": "0.8.5",
     "sinon": "18.0.1",
     "staged-git-files": "1.3.0",
@@ -212,10 +212,11 @@
     "uuid": "9.0.1",
     "vinyl": "2.2.1",
     "vinyl-named": "1.1.0",
-    "webpack": "5.103.0",
+    "webpack": "5.105.4",
     "webpack-stream": "7.0.0",
-    "yaml": "2.5.0",
-    "yargs": "17.7.2"
+    "yaml": "2.8.3",
+    "yargs": "17.7.2",
+    "npm-run-all2": "5.0.2"
   },
   "scripts": {
     "clean": "gulp clean",