Merge pull request #289 from cipherstash/fix/cip-2732-2734-2736-security-patches

tobyhede · web-flow · commit 0bf25baae56e · 2026-02-17T14:26:10.000+11:00
fix(deps): patch security vulnerabilities (CIP-2732, CIP-2734, CIP-2736)
diff --git a/package.json b/package.json
@@ -55,7 +55,9 @@
       "js-yaml": "3.14.2",
       "test-exclude": "^7.0.1",
       "glob": ">=11.1.0",
-      "qs": ">=6.14.1"
+      "qs": ">=6.14.1",
+      "@isaacs/brace-expansion": ">=5.0.1",
+      "fast-xml-parser": ">=5.3.4"
     },
     "peerDependencyRules": {
       "ignoreMissing": [
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
@@ -12,5 +12,5 @@ catalogs:
 
   security:
     '@clerk/nextjs': 6.31.2
-    next: 15.5.9
+    next: 15.5.10
     vite: 6.4.1
