Update packages & resolve vulns #1626

New Issue

MrUnknownDE · 2026-04-05T19:37:59+02:00

MrUnknownDE commented

2026-04-05 19:37:59 +02:00

Originally created by @grokdesigns on 4/8/2025

Community Contribution License Agreement

By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.

Description

Updated packages to resolve security findings.

Current dev branch: 13 vulnerabilities (11 moderate, 1 high, 1 critical)
Fork: 4 moderate severity vulnerabilities. I believe these are mostly due to upstream drizzle-kit dependencies.

I've tested as much as I can. I set up a new standalone server and everything appeared to work and I set up a new instance with newt and had no issues adding nodes and sending traffic. Tested sending email, etc. Could definitely use some more testing due to code changes required by updated packages.

How to test?

*Originally created by @grokdesigns on 4/8/2025* ## Community Contribution License Agreement By creating this pull request, I grant the project maintainers an unlimited, perpetual license to use, modify, and redistribute these contributions under any terms they choose, including both the AGPLv3 and the Fossorial Commercial license terms. I represent that I have the right to grant this license for all contributed content. ## Description Updated packages to resolve security findings. Current dev branch: 13 vulnerabilities (11 moderate, 1 high, 1 critical) Fork: 4 moderate severity vulnerabilities. I believe these are mostly due to upstream drizzle-kit dependencies. I've tested as much as I can. I set up a new standalone server and everything appeared to work and I set up a new instance with newt and had no issues adding nodes and sending traffic. Tested sending email, etc. Could definitely use some more testing due to code changes required by updated packages. ## How to test?

MrUnknownDE closed this issue

2026-04-05 19:37:59 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1626