sriram veeraghanta 31853ab2b8 chore: resolve dependabot security alerts (pnpm + pip) (#9549) ...

Python (apps/api):
- cryptography 48.0.1 -> 50.0.0 (PKCS#7 Bleichenbacher oracle, high)

npm (pnpm-workspace.yaml catalog/overrides + lockfile):
- react-router 7.15.1 -> 7.18.1, @react-router/dev -> 7.17.0,
  @react-router/node/serve -> 7.18.1 (DoS, open redirect, XSS, constructor injection)
- sharp ^0.34.3 -> ^0.35.3 (libvips CVEs, high)
- fast-uri -> 3.1.5 via override (host confusion, high)
- js-yaml -> 4.3.0 via override (quadratic CPU DoS, high)
- linkify-it -> 5.0.2 via override (mailto validator DoS, high)
- postcss 8.5.15 -> 8.5.25 (source map path traversal, high/medium)
- undici -> 7.29.0 via override (info disclosure, CRLF/cookie injection)
- sanitize-html 2.17.0 -> 2.17.5 (URI scheme validation bypass, medium)
- valibot -> 1.4.2 via override (flatten() throw, medium)
- body-parser -> 1.20.6 via override (limit bypass DoS, low)

2026-08-05 00:48:59 +05:30

..

admin

chore: update package version

2026-08-04 20:11:48 +05:30

api

chore: resolve dependabot security alerts (pnpm + pip) (#9549)

2026-08-05 00:48:59 +05:30

live

chore: update package version

2026-08-04 20:11:48 +05:30

proxy

fix: security vulnerabilities for plane docker images (#9140)

2026-05-26 14:25:01 +05:30

space

chore: update package version

2026-08-04 20:11:48 +05:30

web

fix(web): guard unguarded data derefs causing work-item and layout crashes (#9546)

2026-08-05 00:21:19 +05:30