ReviewOS

craft-native/craft

Dependency Dashboard

#399
Open github-actions opened this 8 days ago ·
github-actions 8 days ago

This issue lists Buddy Bot updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

[!CAUTION] 29 known vulnerabilities affect 4 dependencies in this repository.

SeverityPackageCurrentAdvisoryFixed in
🟠 Highelectron^42.0.1GHSA-9qh4-3jw8-366w41.10.6
🟠 Highelectron^42.0.1GHSA-gr2m-v5gq-v68541.10.6
🟠 Highelectron^42.0.1GHSA-hq2x-r82h-9wj441.10.4
🟠 Highelectron^42.0.1GHSA-j84w-jfhq-vhvj41.10.6
🟠 Highelectron^42.0.1GHSA-jr5w-w6x2-84p945.0.0-beta.6
🟡 Moderateelectron^42.0.1GHSA-2p8c-gr87-267645.0.0-alpha.6
🟡 Moderateelectron^42.0.1GHSA-997q-gvvc-jwmx42.11.3
🟡 Moderateelectron^42.0.1GHSA-fw47-9c62-h3vw45.0.0-alpha.5
🟡 Moderateelectron^42.0.1GHSA-r4w5-6pfg-jxp543.0.0
🟡 Moderateelectron^42.0.1GHSA-x562-297c-g43g45.0.0-alpha.13
⚪ Lowelectron^42.0.1GHSA-3qxv-5xgr-q7w942.11.6
⚪ Lowelectron^42.0.1GHSA-98mx-cjp9-gchm45.0.0-alpha.4
⚪ Lowelectron^42.0.1GHSA-h3v5-h239-pg2942.11.6
🟡 Moderatesvelte^4.0.0GHSA-8266-84wp-wv5c4.2.19
🟡 Moderatesvelte^4.0.0GHSA-crpf-4hrx-3jrp5.51.5
🟡 Moderatesvelte^4.0.0GHSA-f7gr-6p89-r8835.51.5
🟡 Moderatesvelte^4.0.0GHSA-m56q-vw4c-c2cp5.51.5
🟡 Moderatesvelte^4.0.0GHSA-phwv-c562-gvmh5.53.5
🟡 Moderatesvelte^4.0.0GHSA-pr6f-5x2q-rwfp5.55.7
🟡 Moderatesvelte^4.0.0GHSA-rcqx-6q8c-2c425.55.7
🟡 Moderatesvelte`^3.0.0^4.0.0`
🟡 Moderatesvelte`^3.0.0^4.0.0`
🟡 Moderatesvelte`^3.0.0^4.0.0`
🟡 Moderatesvelte`^3.0.0^4.0.0`
🟡 Moderatesvelte`^3.0.0^4.0.0`
🟡 Moderatesvelte`^3.0.0^4.0.0`
🟡 Moderatesvelte`^3.0.0^4.0.0`
🟡 Moderatesvelte`^3.0.0^4.0.0`
⚪ Lowtsup^8.0.0GHSA-3mv9-4h5g-vhg3n/a

Detected dependencies

npm
package.json
package.json
package.json
  • @types/react ^18.2.0
  • react ^18.2.0
  • tsup ^8.0.0
  • typescript 7.1.0-dev.20261011.1
  • react >=16.8.0
package.json
  • svelte ^4.0.0
  • tsup ^8.0.0
  • typescript 7.1.0-dev.20261011.1
  • svelte ^3.0.0 || ^4.0.0
package.json
package.json
  • craft-native workspace:*
  • @types/bun latest
package.json
  • @stacksjs/clapp ^0.2.0
  • @types/bun ^1.2.0
  • @types/node ^22.0.0
  • better-dx ^0.2.38
package.json
  • vue ^3.5.43
  • tsup ^8.0.0
  • typescript 7.1.0-dev.20261011.1
  • vue ^3.0.0
package.json
  • @types/bun ^1.2.0
  • ts-maps ^0.3.9
  • very-happy-dom ^0.1.4
package.json
  • @stacksjs/clapp ^0.2.0
  • @types/bun latest
package.json
  • mitata ^1.0.10
  • @types/bun latest
package.json
  • electrobun latest
package.json
  • electron ^42.0.1
package.json
  • @stacksjs/buddy 0.72.56
  • @stacksjs/bumpx ^0.2.27
  • @stacksjs/bunpress ^0.2.13
  • @stacksjs/env ^0.72.50
  • better-dx ^0.2.38
  • buddy-bot ^0.9.17
  • playwright 1.64.1
package.json
  • craft-native workspace:*
  • typescript ^5.0.0
package.json
  • craft-native workspace:*
  • typescript ^5.3.0
package.json
  • craft-native workspace:*
  • typescript ^5.0.0
package.json
  • craft-native workspace:*
  • typescript ^5.3.0
package.json
  • craft-native workspace:*
  • typescript ^5.3.0
package.json
  • craft-native workspace:*
  • typescript ^5.3.0
package.json
  • craft-native workspace:*
  • typescript ^5.0.0
package.json
  • craft-native workspace:*
  • typescript ^5.0.0
package.json
  • craft-native workspace:*
  • typescript ^5.0.0
package.json
  • craft-native workspace:*
  • typescript ^5.3.0
package.json
  • craft-native workspace:*
  • @craft-native/ts-maps workspace:*
  • @types/bun ^1.2.0
package.json
  • craft-native workspace:*
  • typescript ^5.0.0
package.json
  • craft-native workspace:*
  • typescript ^5.3.0
package.json
  • craft-native workspace:*
  • typescript ^5.3.0
github-actions
.github/workflows/windows-source-provenance.yml
  • actions/checkout v6
  • pantry-pm/pantry/packages/action d160044a6fe4ad7e8463828f80dfbc55bcdc07d9
.github/workflows/menubar-native.yml
  • actions/checkout v6
  • pantry-pm/pantry/packages/action 3de609e1a7e305393b3d94e2848d859b39c5b5de
  • actions/cache v5
.github/workflows/media-cache.yml
  • actions/checkout v6
  • oven-sh/setup-bun v2
  • actions/upload-artifact v7
  • actions/setup-java v6
  • android-actions/setup-android v4
  • gradle/actions/setup-gradle v4
  • reactivecircus/android-emulator-runner v2
.github/workflows/benchmarks.yml
  • actions/checkout v6
  • pantry-pm/pantry/packages/action e62755c21d946ed0f8dc8e4af39f6ea5f084537a
  • actions/cache v5
  • oven-sh/setup-bun v2
  • actions/cache/restore v4
  • actions/cache/save v4
  • actions/github-script v7
  • actions/upload-artifact v4
.github/workflows/ci.yml
  • actions/checkout v6
  • oven-sh/setup-bun v2
  • actions/upload-artifact v4
  • pantry-pm/pantry/packages/action 3de609e1a7e305393b3d94e2848d859b39c5b5de
  • actions/cache v5
  • actions/cache/restore v5
  • actions/cache/save v5
  • actions/setup-java v6
  • android-actions/setup-android v4
  • gradle/actions/setup-gradle v6
.github/workflows/release.yml
  • actions/checkout v6
  • oven-sh/setup-bun v2
  • pantry-pm/pantry/packages/action 3de609e1a7e305393b3d94e2848d859b39c5b5de
  • pantry-pm/pantry/packages/action ba9c66fc12af6bca2dd50dcad421f4a824531bcc
  • actions/download-artifact d3f86a106a0bac45b974a628896c90dbdf5c8093
  • actions/upload-artifact v4
  • actions/setup-node v6
.github/workflows/mobile-e2e.yml
  • actions/checkout v6
  • pantry-pm/pantry/packages/action 3de609e1a7e305393b3d94e2848d859b39c5b5de
  • oven-sh/setup-bun v2
  • actions/upload-artifact v4
  • actions/cache v5
  • actions/setup-java v6
  • android-actions/setup-android v4
  • gradle/actions/setup-gradle v6
  • reactivecircus/android-emulator-runner v2
.github/workflows/windows-managed-git.yml
  • actions/checkout v6
  • pantry-pm/pantry/packages/action 3de609e1a7e305393b3d94e2848d859b39c5b5de
  • actions/upload-artifact v4
.github/workflows/binary-size.yml
  • actions/checkout v6
  • pantry-pm/pantry/packages/action e62755c21d946ed0f8dc8e4af39f6ea5f084537a
  • actions/cache v5
  • actions/github-script v7
  • actions/upload-artifact v4
.github/workflows/native-lifecycle.yml
  • actions/checkout v6
  • oven-sh/setup-bun v2
  • actions/upload-artifact v4
.github/workflows/native-cache-diagnostic.yml
  • actions/checkout v6
  • pantry-pm/pantry/packages/action 3a37ec776aa9e37e17bd8e3aea2d457cdbd02c36
  • actions/cache/restore v5
  • actions/upload-artifact v4
.github/workflows/buddy-bot.yml
  • actions/checkout v6
  • oven-sh/setup-bun v2
  • shivammathur/setup-php v2
.github/workflows/sbom.yml
  • actions/checkout v6
  • oven-sh/setup-bun v2
  • actions/upload-artifact v4
  • anchore/sbom-action v0
  • actions/download-artifact d3f86a106a0bac45b974a628896c90dbdf5c8093
dependency-files
deps.yaml
  • bun.sh @1.4.3
  • ziglang.org @0.18.0-dev.146+35accc06e
packages/zig/test/fixtures/graphics-package-consumer/build.zig.zon
packages/zig/test/fixtures/vulkan-surface-consumer/build.zig.zon
packages/zig/build.zig.zon
  • zig_js unknown
pantry.lock
  • bun.sh 1.4.3
  • ziglang.org 0.18.0-dev.146_35accc06e
  • Check this box to trigger a request for Buddy Bot to run again on this repository

Sign in to comment on this issue.