From 858d8fe964e482e017c745ca95a818329baf6348 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 6 Dec 2025 15:24:41 +0000 Subject: [PATCH] Bump js-yaml from 4.1.0 to 4.1.1 in /web Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- web/pnpm-lock.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml index f11492c..59f3659 100644 --- a/web/pnpm-lock.yaml +++ b/web/pnpm-lock.yaml @@ -29,6 +29,9 @@ importers: '@radix-ui/react-slot': specifier: ^1.2.3 version: 1.2.3(@types/react@19.1.13)(react@19.1.1) + '@tanstack/query-core': + specifier: ^5.89.0 + version: 5.89.0 '@tanstack/react-query': specifier: ^5.89.0 version: 5.89.0(react@19.1.1) @@ -1846,6 +1849,7 @@ packages: next@15.4.7: resolution: {integrity: sha512-OcqRugwF7n7mC8OSYjvsZhhG1AYSvulor1EIUsIkbbEbf1qoE5EbH36Swj8WhF4cHqmDgkiam3z1c1W0J1Wifg==} engines: {node: ^18.18.0 || ^19.8.0 || >= 20.0.0} + deprecated: This version has a security vulnerability. Please upgrade to a patched version. See https://nextjs.org/blog/CVE-2025-66478 for more details. hasBin: true peerDependencies: '@opentelemetry/api': ^1.1.0