mirror of
https://github.com/ever-co/ever-gauzy.git
synced 2026-10-02 01:54:50 +08:00
Max every dependency within its current major, applied consistently across all package.json files (root, apps, packages, plugins, bundled */src). Supersedes the open Dependabot PRs #9628/#9633/#9638/#9646/#9656/#9657/#9666/#9677/#9685/#9688/ #9703/#9704/#9708/#9712/#9713. Backend: @nestjs/* -> 11.1.26 (+ satellites to latest in-major), @mikro-orm/* -> 6.6.14 (fixes CVE-2026-34220, supersedes #9704), typeorm -> 0.3.30, pg -> 8.21.0, pg-query-stream -> 4.15.0, axios -> 1.18.0, ws -> 8.21.0, joi -> 17.13.4, nodemailer -> 8.0.11, uuid -> 14.0.0, follow-redirects pinned ^1.16.0 via resolutions. Frontend/build: lodash-es -> 4.18.1, dompurify -> 3.4.10, simple-git -> 3.36.0, esbuild -> 0.28.1. Deferred to dedicated migration PRs (breaking majors): typeorm 1.0, @mikro-orm 7, the @opentelemetry 0.57->0.21x constellation (#9692/#9693 can't merge piecemeal), electron 39 (desktop, version-coupled in build scripts), joi 18. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>