chore(deps): minimatch and rollup package vulnerabilities (#8675)

* fix: package updates * fix: package upgrades * fix: minimatch package vulnerabilities * fix: ajv package vulnerabilities * fix: lint * fix: format
2026-03-03 01:26:29 +05:30 · 2026-03-03 01:26:29 +05:30 · da870a1513
commit da870a1513
parent c5542438a1
22 changed files with 524 additions and 1730 deletions
--- a/apps/admin/Dockerfile.admin
+++ b/apps/admin/Dockerfile.admin
@ -13,7 +13,7 @@ RUN corepack enable pnpm

 FROM base AS builder

-RUN pnpm add -g turbo@2.6.3
+RUN pnpm add -g turbo@2.8.12

 COPY . .

--- a/apps/admin/app/entry.client.tsx
+++ b/apps/admin/app/entry.client.tsx
@ -4,31 +4,10 @@
 * See the LICENSE file for details.
 */

-import * as Sentry from "@sentry/react-router";
 import { startTransition, StrictMode } from "react";
 import { hydrateRoot } from "react-dom/client";
 import { HydratedRouter } from "react-router/dom";

-Sentry.init({
-  dsn: process.env.VITE_SENTRY_DSN,
-  environment: process.env.VITE_SENTRY_ENVIRONMENT,
-  sendDefaultPii: process.env.VITE_SENTRY_SEND_DEFAULT_PII ? process.env.VITE_SENTRY_SEND_DEFAULT_PII === "1" : false,
-  release: process.env.VITE_APP_VERSION,
-  tracesSampleRate: process.env.VITE_SENTRY_TRACES_SAMPLE_RATE
-    ? parseFloat(process.env.VITE_SENTRY_TRACES_SAMPLE_RATE)
-    : 0.1,
-  profilesSampleRate: process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE
-    ? parseFloat(process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE)
-    : 0.1,
-  replaysSessionSampleRate: process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE
-    ? parseFloat(process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE)
-    : 0.1,
-  replaysOnErrorSampleRate: process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE
-    ? parseFloat(process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE)
-    : 1.0,
-  integrations: [],
-});
-
 startTransition(() => {
  hydrateRoot(
    document,
--- a/apps/admin/app/root.tsx
+++ b/apps/admin/app/root.tsx
@ -7,7 +7,6 @@
 import type { ReactNode } from "react";
 import { Links, Meta, Outlet, Scripts } from "react-router";
 import type { LinksFunction } from "react-router";
-import * as Sentry from "@sentry/react-router";
 import appleTouchIcon from "@/app/assets/favicon/apple-touch-icon.png?url";
 import favicon16 from "@/app/assets/favicon/favicon-16x16.png?url";
 import favicon32 from "@/app/assets/favicon/favicon-32x32.png?url";
@ -90,10 +89,6 @@ export function HydrateFallback() {
 }

 export function ErrorBoundary({ error }: Route.ErrorBoundaryProps) {
-  if (error) {
-    Sentry.captureException(error);
-  }
-
  return (
    <div>
      <p>Something went wrong.</p>
--- a/apps/admin/package.json
+++ b/apps/admin/package.json
@ -11,7 +11,7 @@
    "preview": "react-router build && serve -s build/client -l 3001",
    "start": "serve -s build/client -l 3001",
    "clean": "rm -rf .turbo && rm -rf .next && rm -rf node_modules && rm -rf dist && rm -rf build",
-    "check:lint": "oxlint --max-warnings=758 .",
+    "check:lint": "oxlint --max-warnings=759 .",
    "check:types": "react-router typegen && tsc --noEmit",
    "check:format": "oxfmt --check .",
    "fix:lint": "oxlint --fix .",
@ -31,7 +31,6 @@
    "@plane/ui": "workspace:*",
    "@plane/utils": "workspace:*",
    "@react-router/node": "catalog:",
-    "@sentry/react-router": "catalog:",
    "@tanstack/react-virtual": "^3.13.12",
    "@tanstack/virtual-core": "^3.13.12",
    "axios": "catalog:",
--- a/apps/live/Dockerfile.live
+++ b/apps/live/Dockerfile.live
@ -15,7 +15,7 @@ RUN apk update
 RUN apk add --no-cache libc6-compat
 # Set working directory
 WORKDIR /app
-ARG TURBO_VERSION=2.6.3
+ARG TURBO_VERSION=2.8.12
 RUN corepack enable pnpm && pnpm add -g turbo@${TURBO_VERSION}
 COPY . .
 RUN turbo prune --scope=live --docker
--- a/apps/live/package.json
+++ b/apps/live/package.json
@ -42,8 +42,6 @@
    "@plane/types": "workspace:*",
    "@react-pdf/renderer": "^4.3.0",
    "@react-pdf/types": "^2.9.2",
-    "@sentry/node": "catalog:",
-    "@sentry/profiling-node": "catalog:",
    "@tiptap/core": "catalog:",
    "@tiptap/html": "catalog:",
    "axios": "catalog:",
--- a/apps/live/src/instrument.ts
+++ b/apps/live/src/instrument.ts
@ -1,21 +0,0 @@
-/**
- * Copyright (c) 2023-present Plane Software, Inc. and contributors
- * SPDX-License-Identifier: AGPL-3.0-only
- * See the LICENSE file for details.
- */
-
-import * as Sentry from "@sentry/node";
-import { nodeProfilingIntegration } from "@sentry/profiling-node";
-
-export const setupSentry = () => {
-  if (process.env.SENTRY_DSN) {
-    Sentry.init({
-      dsn: process.env.SENTRY_DSN,
-      integrations: [Sentry.httpIntegration(), Sentry.expressIntegration(), nodeProfilingIntegration()],
-      tracesSampleRate: process.env.SENTRY_TRACES_SAMPLE_RATE ? parseFloat(process.env.SENTRY_TRACES_SAMPLE_RATE) : 0.5,
-      environment: process.env.SENTRY_ENVIRONMENT || "development",
-      release: process.env.APP_VERSION || "v1.0.0",
-      sendDefaultPii: true,
-    });
-  }
-};
--- a/apps/live/src/start.ts
+++ b/apps/live/src/start.ts
@ -4,9 +4,6 @@
 * See the LICENSE file for details.
 */

-import { setupSentry } from "./instrument";
-setupSentry();
-
 import { logger } from "@plane/logger";
 import { AppError } from "@/lib/errors";
 import { Server } from "./server";
--- a/apps/space/Dockerfile.space
+++ b/apps/space/Dockerfile.space
@ -13,7 +13,7 @@ RUN corepack enable pnpm

 FROM base AS builder

-RUN pnpm add -g turbo@2.6.3
+RUN pnpm add -g turbo@2.8.12

 COPY . .

--- a/apps/space/app/entry.client.tsx
+++ b/apps/space/app/entry.client.tsx
@ -4,31 +4,10 @@
 * See the LICENSE file for details.
 */

-import * as Sentry from "@sentry/react-router";
 import { startTransition, StrictMode } from "react";
 import { hydrateRoot } from "react-dom/client";
 import { HydratedRouter } from "react-router/dom";

-Sentry.init({
-  dsn: process.env.VITE_SENTRY_DSN,
-  environment: process.env.VITE_SENTRY_ENVIRONMENT,
-  sendDefaultPii: process.env.VITE_SENTRY_SEND_DEFAULT_PII ? process.env.VITE_SENTRY_SEND_DEFAULT_PII === "1" : false,
-  release: process.env.VITE_APP_VERSION,
-  tracesSampleRate: process.env.VITE_SENTRY_TRACES_SAMPLE_RATE
-    ? parseFloat(process.env.VITE_SENTRY_TRACES_SAMPLE_RATE)
-    : 0.1,
-  profilesSampleRate: process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE
-    ? parseFloat(process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE)
-    : 0.1,
-  replaysSessionSampleRate: process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE
-    ? parseFloat(process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE)
-    : 0.1,
-  replaysOnErrorSampleRate: process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE
-    ? parseFloat(process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE)
-    : 1.0,
-  integrations: [],
-});
-
 startTransition(() => {
  hydrateRoot(
    document,
--- a/apps/space/app/root.tsx
+++ b/apps/space/app/root.tsx
@ -4,7 +4,6 @@
 * See the LICENSE file for details.
 */

-import * as Sentry from "@sentry/react-router";
 import { Links, Meta, Outlet, Scripts } from "react-router";
 // assets
 import appleTouchIcon from "@/app/assets/favicon/apple-touch-icon.png?url";
@ -97,9 +96,5 @@ export function HydrateFallback() {
 }

 export function ErrorBoundary({ error }: Route.ErrorBoundaryProps) {
-  if (error) {
-    Sentry.captureException(error);
-  }
-
  return <ErrorPage />;
 }
--- a/apps/space/package.json
+++ b/apps/space/package.json
@ -10,7 +10,7 @@
    "preview": "react-router build && PORT=3002 react-router-serve ./build/server/index.js",
    "start": "PORT=3002 react-router-serve ./build/server/index.js",
    "clean": "rm -rf .turbo && rm -rf .next && rm -rf .react-router && rm -rf node_modules && rm -rf dist && rm -rf build",
-    "check:lint": "oxlint --max-warnings=675 .",
+    "check:lint": "oxlint --max-warnings=676 .",
    "check:types": "react-router typegen && tsc --noEmit",
    "check:format": "oxfmt --check .",
    "fix:lint": "oxlint --fix .",
@ -33,7 +33,6 @@
    "@popperjs/core": "^2.11.8",
    "@react-router/node": "catalog:",
    "@react-router/serve": "catalog:",
-    "@sentry/react-router": "catalog:",
    "axios": "catalog:",
    "clsx": "^2.0.0",
    "date-fns": "^4.1.0",
--- a/apps/web/Dockerfile.web
+++ b/apps/web/Dockerfile.web
@ -14,7 +14,7 @@ RUN apk add --no-cache libc6-compat
 # Set working directory
 WORKDIR /app

-ARG TURBO_VERSION=2.6.3
+ARG TURBO_VERSION=2.8.12
 RUN corepack enable pnpm && pnpm add -g turbo@${TURBO_VERSION}
 COPY . .

--- a/apps/web/app/entry.client.tsx
+++ b/apps/web/app/entry.client.tsx
@ -4,31 +4,10 @@
 * See the LICENSE file for details.
 */

-import * as Sentry from "@sentry/react-router";
 import { startTransition, StrictMode } from "react";
 import { hydrateRoot } from "react-dom/client";
 import { HydratedRouter } from "react-router/dom";

-Sentry.init({
-  dsn: process.env.VITE_SENTRY_DSN,
-  environment: process.env.VITE_SENTRY_ENVIRONMENT,
-  sendDefaultPii: process.env.VITE_SENTRY_SEND_DEFAULT_PII ? process.env.VITE_SENTRY_SEND_DEFAULT_PII === "1" : false,
-  release: process.env.VITE_APP_VERSION,
-  tracesSampleRate: process.env.VITE_SENTRY_TRACES_SAMPLE_RATE
-    ? parseFloat(process.env.VITE_SENTRY_TRACES_SAMPLE_RATE)
-    : 0.1,
-  profilesSampleRate: process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE
-    ? parseFloat(process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE)
-    : 0.1,
-  replaysSessionSampleRate: process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE
-    ? parseFloat(process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE)
-    : 0.1,
-  replaysOnErrorSampleRate: process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE
-    ? parseFloat(process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE)
-    : 1.0,
-  integrations: [],
-});
-
 startTransition(() => {
  hydrateRoot(
    document,
--- a/apps/web/app/root.tsx
+++ b/apps/web/app/root.tsx
@ -5,7 +5,6 @@
 */

 import type { ReactNode } from "react";
-import * as Sentry from "@sentry/react-router";
 import Script from "next/script";
 import { Links, Meta, Outlet, Scripts } from "react-router";
 import type { LinksFunction } from "react-router";
@ -147,9 +146,5 @@ export function HydrateFallback() {
 }

 export function ErrorBoundary({ error }: Route.ErrorBoundaryProps) {
-  if (error) {
-    Sentry.captureException(error);
-  }
-
  return <CustomErrorComponent error={error} />;
 }
--- a/apps/web/package.json
+++ b/apps/web/package.json
@ -39,7 +39,6 @@
    "@popperjs/core": "^2.11.8",
    "@react-pdf/renderer": "^3.4.5",
    "@react-router/node": "catalog:",
-    "@sentry/react-router": "catalog:",
    "@tanstack/react-table": "^8.21.3",
    "axios": "catalog:",
    "clsx": "^2.0.0",
--- a/package.json
+++ b/package.json
@ -1,10 +1,10 @@
 {
  "name": "plane",
-  "description": "Open-source project management that unlocks customer value",
-  "repository": "https://github.com/makeplane/plane.git",
  "version": "1.2.0",
-  "license": "AGPL-3.0",
  "private": true,
+  "description": "Open-source project management that unlocks customer value",
+  "license": "AGPL-3.0",
+  "repository": "https://github.com/makeplane/plane.git",
  "scripts": {
    "build": "turbo run build",
    "dev": "turbo run dev --concurrency=18",
@ -24,7 +24,7 @@
    "lint-staged": "16.2.7",
    "oxfmt": "0.35.0",
    "oxlint": "1.51.0",
-    "turbo": "2.6.3"
+    "turbo": "2.8.12"
  },
  "lint-staged": {
    "*.{js,jsx,ts,tsx,cjs,mjs,cts,mts,json,css,md}": [
@ -34,6 +34,10 @@
      "pnpm exec oxlint --fix --deny-warnings"
    ]
  },
+  "engines": {
+    "node": ">=22.18.0"
+  },
+  "packageManager": "pnpm@10.30.2+sha512.36cdc707e7b7940a988c9c1ecf88d084f8514b5c3f085f53a2e244c2921d3b2545bc20dd4ebe1fc245feec463bb298aecea7a63ed1f7680b877dc6379d8d0cb4",
  "pnpm": {
    "overrides": {
      "express": "catalog:",
@ -58,18 +62,20 @@
      "webpack": "5.104.1",
      "lodash-es": "catalog:",
      "@isaacs/brace-expansion": "5.0.1",
-      "lodash": "4.17.23"
+      "lodash": "4.17.23",
+      "markdown-it": "14.1.1",
+      "rollup": "4.59.0",
+      "minimatch@3": "3.1.4",
+      "minimatch@10": "10.2.3",
+      "serialize-javascript": "7.0.3",
+      "ajv@6": "6.14.0",
+      "ajv@8": "8.18.0"
    },
    "onlyBuiltDependencies": [
-      "@sentry/cli",
      "turbo"
    ],
    "ignoredBuiltDependencies": [
      "sharp"
    ]
-  },
-  "packageManager": "pnpm@10.24.0+sha512.01ff8ae71b4419903b65c60fb2dc9d34cf8bb6e06d03bde112ef38f7a34d6904c424ba66bea5cdcf12890230bf39f9580473140ed9c946fef328b6e5238a345a",
-  "engines": {
-    "node": ">=22.18.0"
  }
 }
--- a/packages/propel/package.json
+++ b/packages/propel/package.json
@ -89,7 +89,7 @@
    "@storybook/react-vite": "9.1.10",
    "@types/react": "catalog:",
    "@types/react-dom": "catalog:",
-    "storybook": "9.1.17",
+    "storybook": "9.1.19",
    "tsdown": "catalog:",
    "typescript": "catalog:"
  }
--- a/packages/ui/package.json
+++ b/packages/ui/package.json
@ -73,7 +73,7 @@
    "autoprefixer": "^10.4.19",
    "postcss-cli": "^11.0.0",
    "postcss-nested": "^6.0.1",
-    "storybook": "9.1.17",
+    "storybook": "9.1.19",
    "tsdown": "catalog:",
    "typescript": "catalog:"
  },
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@ -10,12 +10,9 @@ catalog:
  "@atlaskit/pragmatic-drag-and-drop": 1.7.4
  "@bprogress/core": ^1.3.4
  "@dotenvx/dotenvx": 1.51.1
-  "@react-router/dev": 7.9.5
-  "@react-router/node": 7.9.5
-  "@react-router/serve": 7.9.5
-  "@sentry/node": 10.27.0
-  "@sentry/profiling-node": 10.27.0
-  "@sentry/react-router": 10.27.0
+  "@react-router/dev": 7.13.1
+  "@react-router/node": 7.13.1
+  "@react-router/serve": 7.13.1
  "@tiptap/core": ^2.22.3
  "@tiptap/html": ^2.22.3
  "@types/lodash-es": 4.17.12
@ -36,7 +33,7 @@ catalog:
  tsdown: 0.16.0
  typescript: 5.8.3
  uuid: 13.0.0
-  vite: 7.1.11
+  vite: 7.3.1

 onlyBuiltDependencies:
 - turbo
--- a/turbo.json
+++ b/turbo.json
@ -1,5 +1,5 @@
 {
-  "$schema": "https://turborepo.com/schema.json",
+  "$schema": "https://v2-8-12.turborepo.dev/schema.json",
  "globalDependencies": [".npmrc", ".oxfmtrc.json", ".oxlintrc.json"],
  "globalEnv": [
    "APP_VERSION",