Fix npm security alerts and drop useless overrides

Regenerate the stale package-lock and pin patched versions for the
Dependabot-flagged packages (@vitest/browser, form-data, undici,
brace-expansion, js-yaml, esbuild, dompurify, @babel/core, vite,
@opentelemetry/core via posthog-js). Remove the harmful langsmith
override (it forced the vulnerable 0.5.x line) and the zero-effect
lodash-es override.

Signed-off-by: Sacha Al Himdani <sacha@probo.com>
This commit is contained in:
Sacha Al Himdani
2026-06-23 11:14:46 +02:00
parent 55fa392217
commit 6e86c4ba89
3 changed files with 2188 additions and 6048 deletions

View File

@@ -27,6 +27,7 @@
"@eslint/js": "^10.0.1",
"@probo/eslint-plugin-relay-types": "^1.0.0",
"@stylistic/eslint-plugin": "^5.10.0",
"eslint-import-resolver-typescript": "^4.4.5",
"eslint-plugin-import-x": "^4.16.2",
"eslint-plugin-react-hooks": "^7.1.1",
"eslint-plugin-react": "^7.37.5",