From d965dd5078118bac88d1eca41c1ae569495e14f6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Enes=20Ya=C4=9F=C4=B1z?= Date: Wed, 21 Oct 2026 10:48:47 +0300 Subject: [PATCH] fix(deps): override @modelcontextprotocol/sdk and vite to patched releases Three high advisories published on 2026-10-20 fail the npm audit gate on every branch: GHSA-22jm-h49p-29qw and GHSA-46jr-4wx8-v453 in @modelcontextprotocol/sdk (fixed in 1.32.0) and GHSA-587h-7wmj-h5pm in vite (fixed in 7.3.7). Both are dev-only tools that @angular/cli and @angular/build pin to exact versions, so they are overridden until the Angular packages ship with the patched releases. Co-Authored-By: Claude Opus 5.5 --- src/frontend/package-lock.json | 12 ++++++------ src/frontend/package.json | 4 +++- 2 files changed, 9 insertions(+), 7 deletions(-) diff --git a/src/frontend/package-lock.json b/src/frontend/package-lock.json index 6ffa611..80efbc9 100644 --- a/src/frontend/package-lock.json +++ b/src/frontend/package-lock.json @@ -2258,9 +2258,9 @@ } }, "node_modules/@modelcontextprotocol/sdk": { - "version": "1.31.0", - "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.31.0.tgz", - "integrity": "sha512-UvTMgnNlnIBO/22ob2RcVGDlcvOslQs8T59+FTGdA0L27a39fdGF/EDETNtDVK4DZGpwomlsYpRdA8UXcVL/pw==", + "version": "1.32.1", + "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.32.1.tgz", + "integrity": "sha512-2DdE+SJDtzLEEWzY1ZjY7Q+VcPhcV1KisD3zI4u0XZyktsjHum1mwbMI+JaulUBi2OZk+KJAi2uPXzxichPkdw==", "dev": true, "license": "MIT", "dependencies": { @@ -9310,9 +9310,9 @@ } }, "node_modules/vite": { - "version": "7.3.6", - "resolved": "https://registry.npmjs.org/vite/-/vite-7.3.6.tgz", - "integrity": "sha512-4XP60spRGjSZFf1qYH+dJIkK2znL3zQfl9KkOV9MkkRR/3Dls0dxaBsQPTloEc5BLXWPL9vsOxopxyKoMmDueg==", + "version": "7.3.7", + "resolved": "https://registry.npmjs.org/vite/-/vite-7.3.7.tgz", + "integrity": "sha512-AHEzTORMbi7/7aXp7w7KZ5+DCUdSeLsJz0grY8xHpc9DHdYb0vQu6DqJfm2tOw3gDExNgPgnJTXxM6syYFHaCA==", "dev": true, "license": "MIT", "dependencies": { diff --git a/src/frontend/package.json b/src/frontend/package.json index 16d46bc..3f36720 100644 --- a/src/frontend/package.json +++ b/src/frontend/package.json @@ -56,6 +56,8 @@ "vitest": "^4.1.12" }, "overrides": { - "piscina": "5.3.2" + "@modelcontextprotocol/sdk": "1.32.1", + "piscina": "5.3.2", + "vite": "7.3.7" } }