chore(deps): minimatch and rollup package vulnerabilities (#8675)

* fix: package updates

* fix: package upgrades

* fix: minimatch package vulnerabilities

* fix: ajv package vulnerabilities

* fix: lint

* fix: format
This commit is contained in:
sriram veeraghanta 2026-03-03 01:26:29 +05:30 committed by GitHub
parent c5542438a1
commit da870a1513
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
22 changed files with 524 additions and 1730 deletions

View file

@ -13,7 +13,7 @@ RUN corepack enable pnpm
FROM base AS builder FROM base AS builder
RUN pnpm add -g turbo@2.6.3 RUN pnpm add -g turbo@2.8.12
COPY . . COPY . .

View file

@ -4,31 +4,10 @@
* See the LICENSE file for details. * See the LICENSE file for details.
*/ */
import * as Sentry from "@sentry/react-router";
import { startTransition, StrictMode } from "react"; import { startTransition, StrictMode } from "react";
import { hydrateRoot } from "react-dom/client"; import { hydrateRoot } from "react-dom/client";
import { HydratedRouter } from "react-router/dom"; import { HydratedRouter } from "react-router/dom";
Sentry.init({
dsn: process.env.VITE_SENTRY_DSN,
environment: process.env.VITE_SENTRY_ENVIRONMENT,
sendDefaultPii: process.env.VITE_SENTRY_SEND_DEFAULT_PII ? process.env.VITE_SENTRY_SEND_DEFAULT_PII === "1" : false,
release: process.env.VITE_APP_VERSION,
tracesSampleRate: process.env.VITE_SENTRY_TRACES_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_TRACES_SAMPLE_RATE)
: 0.1,
profilesSampleRate: process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE)
: 0.1,
replaysSessionSampleRate: process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE)
: 0.1,
replaysOnErrorSampleRate: process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE)
: 1.0,
integrations: [],
});
startTransition(() => { startTransition(() => {
hydrateRoot( hydrateRoot(
document, document,

View file

@ -7,7 +7,6 @@
import type { ReactNode } from "react"; import type { ReactNode } from "react";
import { Links, Meta, Outlet, Scripts } from "react-router"; import { Links, Meta, Outlet, Scripts } from "react-router";
import type { LinksFunction } from "react-router"; import type { LinksFunction } from "react-router";
import * as Sentry from "@sentry/react-router";
import appleTouchIcon from "@/app/assets/favicon/apple-touch-icon.png?url"; import appleTouchIcon from "@/app/assets/favicon/apple-touch-icon.png?url";
import favicon16 from "@/app/assets/favicon/favicon-16x16.png?url"; import favicon16 from "@/app/assets/favicon/favicon-16x16.png?url";
import favicon32 from "@/app/assets/favicon/favicon-32x32.png?url"; import favicon32 from "@/app/assets/favicon/favicon-32x32.png?url";
@ -90,10 +89,6 @@ export function HydrateFallback() {
} }
export function ErrorBoundary({ error }: Route.ErrorBoundaryProps) { export function ErrorBoundary({ error }: Route.ErrorBoundaryProps) {
if (error) {
Sentry.captureException(error);
}
return ( return (
<div> <div>
<p>Something went wrong.</p> <p>Something went wrong.</p>

View file

@ -11,7 +11,7 @@
"preview": "react-router build && serve -s build/client -l 3001", "preview": "react-router build && serve -s build/client -l 3001",
"start": "serve -s build/client -l 3001", "start": "serve -s build/client -l 3001",
"clean": "rm -rf .turbo && rm -rf .next && rm -rf node_modules && rm -rf dist && rm -rf build", "clean": "rm -rf .turbo && rm -rf .next && rm -rf node_modules && rm -rf dist && rm -rf build",
"check:lint": "oxlint --max-warnings=758 .", "check:lint": "oxlint --max-warnings=759 .",
"check:types": "react-router typegen && tsc --noEmit", "check:types": "react-router typegen && tsc --noEmit",
"check:format": "oxfmt --check .", "check:format": "oxfmt --check .",
"fix:lint": "oxlint --fix .", "fix:lint": "oxlint --fix .",
@ -31,7 +31,6 @@
"@plane/ui": "workspace:*", "@plane/ui": "workspace:*",
"@plane/utils": "workspace:*", "@plane/utils": "workspace:*",
"@react-router/node": "catalog:", "@react-router/node": "catalog:",
"@sentry/react-router": "catalog:",
"@tanstack/react-virtual": "^3.13.12", "@tanstack/react-virtual": "^3.13.12",
"@tanstack/virtual-core": "^3.13.12", "@tanstack/virtual-core": "^3.13.12",
"axios": "catalog:", "axios": "catalog:",

View file

@ -15,7 +15,7 @@ RUN apk update
RUN apk add --no-cache libc6-compat RUN apk add --no-cache libc6-compat
# Set working directory # Set working directory
WORKDIR /app WORKDIR /app
ARG TURBO_VERSION=2.6.3 ARG TURBO_VERSION=2.8.12
RUN corepack enable pnpm && pnpm add -g turbo@${TURBO_VERSION} RUN corepack enable pnpm && pnpm add -g turbo@${TURBO_VERSION}
COPY . . COPY . .
RUN turbo prune --scope=live --docker RUN turbo prune --scope=live --docker

View file

@ -42,8 +42,6 @@
"@plane/types": "workspace:*", "@plane/types": "workspace:*",
"@react-pdf/renderer": "^4.3.0", "@react-pdf/renderer": "^4.3.0",
"@react-pdf/types": "^2.9.2", "@react-pdf/types": "^2.9.2",
"@sentry/node": "catalog:",
"@sentry/profiling-node": "catalog:",
"@tiptap/core": "catalog:", "@tiptap/core": "catalog:",
"@tiptap/html": "catalog:", "@tiptap/html": "catalog:",
"axios": "catalog:", "axios": "catalog:",

View file

@ -1,21 +0,0 @@
/**
* Copyright (c) 2023-present Plane Software, Inc. and contributors
* SPDX-License-Identifier: AGPL-3.0-only
* See the LICENSE file for details.
*/
import * as Sentry from "@sentry/node";
import { nodeProfilingIntegration } from "@sentry/profiling-node";
export const setupSentry = () => {
if (process.env.SENTRY_DSN) {
Sentry.init({
dsn: process.env.SENTRY_DSN,
integrations: [Sentry.httpIntegration(), Sentry.expressIntegration(), nodeProfilingIntegration()],
tracesSampleRate: process.env.SENTRY_TRACES_SAMPLE_RATE ? parseFloat(process.env.SENTRY_TRACES_SAMPLE_RATE) : 0.5,
environment: process.env.SENTRY_ENVIRONMENT || "development",
release: process.env.APP_VERSION || "v1.0.0",
sendDefaultPii: true,
});
}
};

View file

@ -4,9 +4,6 @@
* See the LICENSE file for details. * See the LICENSE file for details.
*/ */
import { setupSentry } from "./instrument";
setupSentry();
import { logger } from "@plane/logger"; import { logger } from "@plane/logger";
import { AppError } from "@/lib/errors"; import { AppError } from "@/lib/errors";
import { Server } from "./server"; import { Server } from "./server";

View file

@ -13,7 +13,7 @@ RUN corepack enable pnpm
FROM base AS builder FROM base AS builder
RUN pnpm add -g turbo@2.6.3 RUN pnpm add -g turbo@2.8.12
COPY . . COPY . .

View file

@ -4,31 +4,10 @@
* See the LICENSE file for details. * See the LICENSE file for details.
*/ */
import * as Sentry from "@sentry/react-router";
import { startTransition, StrictMode } from "react"; import { startTransition, StrictMode } from "react";
import { hydrateRoot } from "react-dom/client"; import { hydrateRoot } from "react-dom/client";
import { HydratedRouter } from "react-router/dom"; import { HydratedRouter } from "react-router/dom";
Sentry.init({
dsn: process.env.VITE_SENTRY_DSN,
environment: process.env.VITE_SENTRY_ENVIRONMENT,
sendDefaultPii: process.env.VITE_SENTRY_SEND_DEFAULT_PII ? process.env.VITE_SENTRY_SEND_DEFAULT_PII === "1" : false,
release: process.env.VITE_APP_VERSION,
tracesSampleRate: process.env.VITE_SENTRY_TRACES_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_TRACES_SAMPLE_RATE)
: 0.1,
profilesSampleRate: process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE)
: 0.1,
replaysSessionSampleRate: process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE)
: 0.1,
replaysOnErrorSampleRate: process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE)
: 1.0,
integrations: [],
});
startTransition(() => { startTransition(() => {
hydrateRoot( hydrateRoot(
document, document,

View file

@ -4,7 +4,6 @@
* See the LICENSE file for details. * See the LICENSE file for details.
*/ */
import * as Sentry from "@sentry/react-router";
import { Links, Meta, Outlet, Scripts } from "react-router"; import { Links, Meta, Outlet, Scripts } from "react-router";
// assets // assets
import appleTouchIcon from "@/app/assets/favicon/apple-touch-icon.png?url"; import appleTouchIcon from "@/app/assets/favicon/apple-touch-icon.png?url";
@ -97,9 +96,5 @@ export function HydrateFallback() {
} }
export function ErrorBoundary({ error }: Route.ErrorBoundaryProps) { export function ErrorBoundary({ error }: Route.ErrorBoundaryProps) {
if (error) {
Sentry.captureException(error);
}
return <ErrorPage />; return <ErrorPage />;
} }

View file

@ -10,7 +10,7 @@
"preview": "react-router build && PORT=3002 react-router-serve ./build/server/index.js", "preview": "react-router build && PORT=3002 react-router-serve ./build/server/index.js",
"start": "PORT=3002 react-router-serve ./build/server/index.js", "start": "PORT=3002 react-router-serve ./build/server/index.js",
"clean": "rm -rf .turbo && rm -rf .next && rm -rf .react-router && rm -rf node_modules && rm -rf dist && rm -rf build", "clean": "rm -rf .turbo && rm -rf .next && rm -rf .react-router && rm -rf node_modules && rm -rf dist && rm -rf build",
"check:lint": "oxlint --max-warnings=675 .", "check:lint": "oxlint --max-warnings=676 .",
"check:types": "react-router typegen && tsc --noEmit", "check:types": "react-router typegen && tsc --noEmit",
"check:format": "oxfmt --check .", "check:format": "oxfmt --check .",
"fix:lint": "oxlint --fix .", "fix:lint": "oxlint --fix .",
@ -33,7 +33,6 @@
"@popperjs/core": "^2.11.8", "@popperjs/core": "^2.11.8",
"@react-router/node": "catalog:", "@react-router/node": "catalog:",
"@react-router/serve": "catalog:", "@react-router/serve": "catalog:",
"@sentry/react-router": "catalog:",
"axios": "catalog:", "axios": "catalog:",
"clsx": "^2.0.0", "clsx": "^2.0.0",
"date-fns": "^4.1.0", "date-fns": "^4.1.0",

View file

@ -14,7 +14,7 @@ RUN apk add --no-cache libc6-compat
# Set working directory # Set working directory
WORKDIR /app WORKDIR /app
ARG TURBO_VERSION=2.6.3 ARG TURBO_VERSION=2.8.12
RUN corepack enable pnpm && pnpm add -g turbo@${TURBO_VERSION} RUN corepack enable pnpm && pnpm add -g turbo@${TURBO_VERSION}
COPY . . COPY . .

View file

@ -4,31 +4,10 @@
* See the LICENSE file for details. * See the LICENSE file for details.
*/ */
import * as Sentry from "@sentry/react-router";
import { startTransition, StrictMode } from "react"; import { startTransition, StrictMode } from "react";
import { hydrateRoot } from "react-dom/client"; import { hydrateRoot } from "react-dom/client";
import { HydratedRouter } from "react-router/dom"; import { HydratedRouter } from "react-router/dom";
Sentry.init({
dsn: process.env.VITE_SENTRY_DSN,
environment: process.env.VITE_SENTRY_ENVIRONMENT,
sendDefaultPii: process.env.VITE_SENTRY_SEND_DEFAULT_PII ? process.env.VITE_SENTRY_SEND_DEFAULT_PII === "1" : false,
release: process.env.VITE_APP_VERSION,
tracesSampleRate: process.env.VITE_SENTRY_TRACES_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_TRACES_SAMPLE_RATE)
: 0.1,
profilesSampleRate: process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE)
: 0.1,
replaysSessionSampleRate: process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE)
: 0.1,
replaysOnErrorSampleRate: process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE)
: 1.0,
integrations: [],
});
startTransition(() => { startTransition(() => {
hydrateRoot( hydrateRoot(
document, document,

View file

@ -5,7 +5,6 @@
*/ */
import type { ReactNode } from "react"; import type { ReactNode } from "react";
import * as Sentry from "@sentry/react-router";
import Script from "next/script"; import Script from "next/script";
import { Links, Meta, Outlet, Scripts } from "react-router"; import { Links, Meta, Outlet, Scripts } from "react-router";
import type { LinksFunction } from "react-router"; import type { LinksFunction } from "react-router";
@ -147,9 +146,5 @@ export function HydrateFallback() {
} }
export function ErrorBoundary({ error }: Route.ErrorBoundaryProps) { export function ErrorBoundary({ error }: Route.ErrorBoundaryProps) {
if (error) {
Sentry.captureException(error);
}
return <CustomErrorComponent error={error} />; return <CustomErrorComponent error={error} />;
} }

View file

@ -39,7 +39,6 @@
"@popperjs/core": "^2.11.8", "@popperjs/core": "^2.11.8",
"@react-pdf/renderer": "^3.4.5", "@react-pdf/renderer": "^3.4.5",
"@react-router/node": "catalog:", "@react-router/node": "catalog:",
"@sentry/react-router": "catalog:",
"@tanstack/react-table": "^8.21.3", "@tanstack/react-table": "^8.21.3",
"axios": "catalog:", "axios": "catalog:",
"clsx": "^2.0.0", "clsx": "^2.0.0",

View file

@ -1,10 +1,10 @@
{ {
"name": "plane", "name": "plane",
"description": "Open-source project management that unlocks customer value",
"repository": "https://github.com/makeplane/plane.git",
"version": "1.2.0", "version": "1.2.0",
"license": "AGPL-3.0",
"private": true, "private": true,
"description": "Open-source project management that unlocks customer value",
"license": "AGPL-3.0",
"repository": "https://github.com/makeplane/plane.git",
"scripts": { "scripts": {
"build": "turbo run build", "build": "turbo run build",
"dev": "turbo run dev --concurrency=18", "dev": "turbo run dev --concurrency=18",
@ -24,7 +24,7 @@
"lint-staged": "16.2.7", "lint-staged": "16.2.7",
"oxfmt": "0.35.0", "oxfmt": "0.35.0",
"oxlint": "1.51.0", "oxlint": "1.51.0",
"turbo": "2.6.3" "turbo": "2.8.12"
}, },
"lint-staged": { "lint-staged": {
"*.{js,jsx,ts,tsx,cjs,mjs,cts,mts,json,css,md}": [ "*.{js,jsx,ts,tsx,cjs,mjs,cts,mts,json,css,md}": [
@ -34,6 +34,10 @@
"pnpm exec oxlint --fix --deny-warnings" "pnpm exec oxlint --fix --deny-warnings"
] ]
}, },
"engines": {
"node": ">=22.18.0"
},
"packageManager": "pnpm@10.30.2+sha512.36cdc707e7b7940a988c9c1ecf88d084f8514b5c3f085f53a2e244c2921d3b2545bc20dd4ebe1fc245feec463bb298aecea7a63ed1f7680b877dc6379d8d0cb4",
"pnpm": { "pnpm": {
"overrides": { "overrides": {
"express": "catalog:", "express": "catalog:",
@ -58,18 +62,20 @@
"webpack": "5.104.1", "webpack": "5.104.1",
"lodash-es": "catalog:", "lodash-es": "catalog:",
"@isaacs/brace-expansion": "5.0.1", "@isaacs/brace-expansion": "5.0.1",
"lodash": "4.17.23" "lodash": "4.17.23",
"markdown-it": "14.1.1",
"rollup": "4.59.0",
"minimatch@3": "3.1.4",
"minimatch@10": "10.2.3",
"serialize-javascript": "7.0.3",
"ajv@6": "6.14.0",
"ajv@8": "8.18.0"
}, },
"onlyBuiltDependencies": [ "onlyBuiltDependencies": [
"@sentry/cli",
"turbo" "turbo"
], ],
"ignoredBuiltDependencies": [ "ignoredBuiltDependencies": [
"sharp" "sharp"
] ]
},
"packageManager": "pnpm@10.24.0+sha512.01ff8ae71b4419903b65c60fb2dc9d34cf8bb6e06d03bde112ef38f7a34d6904c424ba66bea5cdcf12890230bf39f9580473140ed9c946fef328b6e5238a345a",
"engines": {
"node": ">=22.18.0"
} }
} }

View file

@ -89,7 +89,7 @@
"@storybook/react-vite": "9.1.10", "@storybook/react-vite": "9.1.10",
"@types/react": "catalog:", "@types/react": "catalog:",
"@types/react-dom": "catalog:", "@types/react-dom": "catalog:",
"storybook": "9.1.17", "storybook": "9.1.19",
"tsdown": "catalog:", "tsdown": "catalog:",
"typescript": "catalog:" "typescript": "catalog:"
} }

View file

@ -73,7 +73,7 @@
"autoprefixer": "^10.4.19", "autoprefixer": "^10.4.19",
"postcss-cli": "^11.0.0", "postcss-cli": "^11.0.0",
"postcss-nested": "^6.0.1", "postcss-nested": "^6.0.1",
"storybook": "9.1.17", "storybook": "9.1.19",
"tsdown": "catalog:", "tsdown": "catalog:",
"typescript": "catalog:" "typescript": "catalog:"
}, },

2092
pnpm-lock.yaml generated

File diff suppressed because it is too large Load diff

View file

@ -10,12 +10,9 @@ catalog:
"@atlaskit/pragmatic-drag-and-drop": 1.7.4 "@atlaskit/pragmatic-drag-and-drop": 1.7.4
"@bprogress/core": ^1.3.4 "@bprogress/core": ^1.3.4
"@dotenvx/dotenvx": 1.51.1 "@dotenvx/dotenvx": 1.51.1
"@react-router/dev": 7.9.5 "@react-router/dev": 7.13.1
"@react-router/node": 7.9.5 "@react-router/node": 7.13.1
"@react-router/serve": 7.9.5 "@react-router/serve": 7.13.1
"@sentry/node": 10.27.0
"@sentry/profiling-node": 10.27.0
"@sentry/react-router": 10.27.0
"@tiptap/core": ^2.22.3 "@tiptap/core": ^2.22.3
"@tiptap/html": ^2.22.3 "@tiptap/html": ^2.22.3
"@types/lodash-es": 4.17.12 "@types/lodash-es": 4.17.12
@ -36,7 +33,7 @@ catalog:
tsdown: 0.16.0 tsdown: 0.16.0
typescript: 5.8.3 typescript: 5.8.3
uuid: 13.0.0 uuid: 13.0.0
vite: 7.1.11 vite: 7.3.1
onlyBuiltDependencies: onlyBuiltDependencies:
- turbo - turbo

View file

@ -1,5 +1,5 @@
{ {
"$schema": "https://turborepo.com/schema.json", "$schema": "https://v2-8-12.turborepo.dev/schema.json",
"globalDependencies": [".npmrc", ".oxfmtrc.json", ".oxlintrc.json"], "globalDependencies": [".npmrc", ".oxfmtrc.json", ".oxlintrc.json"],
"globalEnv": [ "globalEnv": [
"APP_VERSION", "APP_VERSION",