From cd55902bebb1b4798bd230054d2a782d349aa119 Mon Sep 17 00:00:00 2001 From: arlo Date: Wed, 4 Nov 2026 15:48:12 +0800 Subject: [PATCH] fix(deps): drop `@types/splitpanes` to remove vue 2 `@types/splitpanes` depends on vue 2, which carries an unpatched ReDoS advisory. splitpanes 4 ships its own types, so the package is redundant. --- packages/rolldown/package.json | 1 - packages/vite/package.json | 1 - pnpm-lock.yaml | 38 +--------------------------------- pnpm-workspace.yaml | 1 - 4 files changed, 1 insertion(+), 40 deletions(-) diff --git a/packages/rolldown/package.json b/packages/rolldown/package.json index 6aba0ae1..4c689f29 100644 --- a/packages/rolldown/package.json +++ b/packages/rolldown/package.json @@ -42,7 +42,6 @@ }, "devDependencies": { "@floating-ui/dom": "catalog:frontend", - "@types/splitpanes": "catalog:types", "@unocss/nuxt": "catalog:build", "@vitejs/devtools-ui": "workspace:*", "@vueuse/components": "catalog:frontend", diff --git a/packages/vite/package.json b/packages/vite/package.json index cbd6158e..4393148e 100644 --- a/packages/vite/package.json +++ b/packages/vite/package.json @@ -47,7 +47,6 @@ "@floating-ui/dom": "catalog:frontend", "@types/d3-hierarchy": "catalog:types", "@types/envinfo": "catalog:types", - "@types/splitpanes": "catalog:types", "@unocss/nuxt": "catalog:build", "@vitejs/devtools-ui": "workspace:*", "@vueuse/components": "catalog:frontend", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 0bfde49a..15b32a58 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -531,15 +531,11 @@ catalogs: '@types/react-dom': specifier: ^19.3.0 version: 19.3.0 - '@types/splitpanes': - specifier: ^2.2.6 - version: 2.2.6 '@types/ws': specifier: ^8.18.2 version: 8.18.2 overrides: - compression: ^1.8.2 '@humanwhocodes/momoa': 3.3.10 '@nuxt/devtools': ^4.1.0 '@nuxt/kit': 4.6.4 @@ -547,6 +543,7 @@ overrides: '@rolldown/debug': ^1.2.16 cac: ^7.1.0 chokidar: ^6.0.0 + compression: ^1.8.2 devframe: ^1.3.2 '@devframes/agentic': ^1.3.2 '@devframes/hub': ^1.3.2 @@ -1203,9 +1200,6 @@ importers: '@floating-ui/dom': specifier: catalog:frontend version: 1.8.0 - '@types/splitpanes': - specifier: catalog:types - version: 2.2.6 '@unocss/nuxt': specifier: catalog:build version: 66.12.0(@devframes/agentic@1.3.2)(@nuxt/schema@4.6.4)(@oxc-project/types@0.153.0)(cac@7.1.0)(confbox@0.3.2)(dotenv@17.4.2)(esbuild@0.28.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.4.5)(mlly@1.8.2)(oxc-parser@0.153.0)(rolldown@1.2.16)(rollup@4.67.4)(srvx@1.0.8)(unplugin@3.3.0(esbuild@0.28.2)(rolldown@1.2.16)(rollup@4.67.4)(vite@8.3.5)(webpack@5.111.0(cssnano@9.9.0(postcss@8.5.32))(csso@5.0.5)(esbuild@0.28.2)(lightningcss@1.33.0)(postcss@8.5.32)(svgo@4.1.0)))(vite@8.3.5)(webpack@5.111.0(cssnano@9.9.0(postcss@8.5.32))(csso@5.0.5)(esbuild@0.28.2)(lightningcss@1.33.0)(postcss@8.5.32)(svgo@4.1.0)) @@ -1345,9 +1339,6 @@ importers: '@types/envinfo': specifier: catalog:types version: 7.8.4 - '@types/splitpanes': - specifier: catalog:types - version: 2.2.6 '@unocss/nuxt': specifier: catalog:build version: 66.12.0(@devframes/agentic@1.3.2)(@nuxt/schema@4.6.4)(@oxc-project/types@0.153.0)(cac@7.1.0)(confbox@0.3.2)(dotenv@17.4.2)(esbuild@0.28.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.4.5)(mlly@1.8.2)(oxc-parser@0.153.0)(rolldown@1.2.16)(rollup@4.67.4)(srvx@1.0.8)(unplugin@3.3.0(esbuild@0.28.2)(rolldown@1.2.16)(rollup@4.67.4)(vite@8.3.5)(webpack@5.111.0(cssnano@9.9.0(postcss@8.5.32))(csso@5.0.5)(esbuild@0.28.2)(lightningcss@1.33.0)(postcss@8.5.32)(svgo@4.1.0)))(vite@8.3.5)(webpack@5.111.0(cssnano@9.9.0(postcss@8.5.32))(csso@5.0.5)(esbuild@0.28.2)(lightningcss@1.33.0)(postcss@8.5.32)(svgo@4.1.0)) @@ -4544,9 +4535,6 @@ packages: '@types/resolve@1.20.2': resolution: {integrity: sha512-60BCwRFOZCQhDncwQdxxeOEEkbc5dIMccYLwbxsS4TUNeVECQ/pBJ0j09mrHOl/JJvpRPGwO9SvE4nR2Nb/a4Q==} - '@types/splitpanes@2.2.6': - resolution: {integrity: sha512-3dV5sO1Ht74iER4jJU03mreL3f+Q2h47ZqXS6Sfbqc6hkCvsDrX1GA0NbYWRdNvZemPyTDzUoApWKeoGbALwkQ==} - '@types/trusted-types@2.0.7': resolution: {integrity: sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==} @@ -5173,9 +5161,6 @@ packages: '@vue/compiler-dom@3.5.44': resolution: {integrity: sha512-W5AoBFWdw1lQAKiHowkfgFKFab82oSRT6sGsPfw/q1GRjsy/ZJFLHGhJyBRIFN9APLTUduDH9U2JAiPOIyKuYg==} - '@vue/compiler-sfc@2.7.16': - resolution: {integrity: sha512-KWhJ9k5nXuNtygPU7+t1rX6baZeqOYLEforUPjgNDBnLicfHCoi48H87Q8XyLZOrNNsmhuwKqtpDQWjEFe6Ekg==} - '@vue/compiler-sfc@3.5.42': resolution: {integrity: sha512-fkCAFB4okcAANGMThboWnScp/gzWjU0ZSkVnjTIiplmMDq2uq0tIB3j+xVu4rhv5rvOgBySCysudmbMd6xRRqw==} @@ -10211,10 +10196,6 @@ packages: peerDependencies: vue: ^3.3.0 - vue@2.7.16: - resolution: {integrity: sha512-4gCtFXaAA3zYZdTp5s4Hl2sozuySsgz4jy1EnpBHNfpMa9dK1ZCG7viqBPCwXtmgc8nHqUsAu3G4gtmXkkY3Sw==} - deprecated: Vue 2 has reached EOL and is no longer actively maintained. See https://v2.vuejs.org/eol/ for more details. - vue@3.5.44: resolution: {integrity: sha512-dvvmaOCG7lAMkJTPqPwWeGMsPS6DIsFsfZDUgBp9V6mHf9b3+/wyVwYR4Es+WV6uJC0FKRxp81Obcq0ZwUcGFQ==} peerDependencies: @@ -13760,10 +13741,6 @@ snapshots: '@types/resolve@1.20.2': {} - '@types/splitpanes@2.2.6': - dependencies: - vue: 2.7.16 - '@types/trusted-types@2.0.7': optional: true @@ -15005,14 +14982,6 @@ snapshots: '@vue/compiler-core': 3.5.44 '@vue/shared': 3.5.44 - '@vue/compiler-sfc@2.7.16': - dependencies: - '@babel/parser': 7.29.8 - postcss: 8.5.28 - source-map: 0.6.1 - optionalDependencies: - prettier: 2.8.8 - '@vue/compiler-sfc@3.5.42': dependencies: '@babel/parser': 7.29.8 @@ -21247,11 +21216,6 @@ snapshots: dependencies: vue: 3.5.44(typescript@6.0.3) - vue@2.7.16: - dependencies: - '@vue/compiler-sfc': 2.7.16 - csstype: 3.2.3 - vue@3.5.44(typescript@6.0.3): dependencies: '@vue/compiler-dom': 3.5.44 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 09ad2d4f..a777dd13 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -241,5 +241,4 @@ catalogs: '@types/prompts': ^2.4.9 '@types/react': ^19.3.0 '@types/react-dom': ^19.3.0 - '@types/splitpanes': ^2.2.6 '@types/ws': ^8.18.2