From af8e43bbc2336ef7768899d734e9809110fc1664 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dafydd=20Ll=C5=B7r=20Pearson?= Date: Tue, 6 Jan 2026 09:41:46 +0000 Subject: [PATCH] chore: CVE-2025-68428 --- package.json | 2 +- pnpm-lock.yaml | 64 ++++++++++++++++++++++++++++++++++++-------------- 2 files changed, 47 insertions(+), 19 deletions(-) diff --git a/package.json b/package.json index 9520fce..c5e2a11 100644 --- a/package.json +++ b/package.json @@ -32,7 +32,7 @@ "accessible-autocomplete": "^3.0.1", "file-saver": "^2.0.5", "govuk-frontend": "^5.11.0", - "jspdf": "^3.0.2", + "jspdf": "^4.0.0", "lit": "^3.0.1", "ol": "^10.6.1", "ol-ext": "^4.0.33", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 8fa41bc..b94a762 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -27,8 +27,8 @@ dependencies: specifier: ^5.11.0 version: 5.11.0 jspdf: - specifier: ^3.0.2 - version: 3.0.2 + specifier: ^4.0.0 + version: 4.0.0 lit: specifier: ^3.0.1 version: 3.0.1 @@ -69,7 +69,7 @@ devDependencies: version: 22.0.3 '@types/ol-ext': specifier: npm:@siedlerchr/types-ol-ext@^3.6.3 - version: /@siedlerchr/types-ol-ext@3.6.3(jspdf@3.0.2) + version: /@siedlerchr/types-ol-ext@3.6.3(jspdf@4.0.0) '@types/proj4': specifier: ^2.5.6 version: 2.5.6 @@ -1142,6 +1142,11 @@ packages: /@babel/runtime@7.28.3: resolution: {integrity: sha512-9uIQ10o0WGdpP6GDhXcdOJPJuDgFtIDtN/9+ArJQ2NAfAmiuhTQdzkaTGR33v43GYS2UrSA0eX2pPPHoFVvpxA==} engines: {node: '>=6.9.0'} + dev: true + + /@babel/runtime@7.28.4: + resolution: {integrity: sha512-Q/N6JNWvIvPnLDvjlE1OUBLPQHH6l3CltCEsHIujp45zQUSSh8K+gHnaEX45yAT1nyngnINhvWtzN+Nb9D8RAQ==} + engines: {node: '>=6.9.0'} /@babel/standalone@7.28.3: resolution: {integrity: sha512-VHmaaU23OkxShTtkwXlte7/uHDK8v55J9YLMqlucjnYujeB9YgrYCHU6LREqUegTVq+/KlLgjoUu8lbeI3XQPA==} @@ -1932,12 +1937,12 @@ packages: dev: true optional: true - /@siedlerchr/types-ol-ext@3.6.3(jspdf@3.0.2): + /@siedlerchr/types-ol-ext@3.6.3(jspdf@4.0.0): resolution: {integrity: sha512-CBDpg1/j4boiLv7b9o0MnaKgUwPkezc5WCnlaEkhP68J3vDtrDbtUp1GUgX/9Gsncu83+SrvPi0T2+gFlOAS8w==} peerDependencies: jspdf: ^3.0.1 dependencies: - jspdf: 3.0.2 + jspdf: 4.0.0 dev: true /@sinclair/typebox@0.27.8: @@ -2929,7 +2934,7 @@ packages: engines: {node: '>=10.0.0'} requiresBuild: true dependencies: - '@babel/runtime': 7.28.3 + '@babel/runtime': 7.28.4 '@types/raf': 3.4.3 core-js: 3.45.1 raf: 3.4.1 @@ -3491,6 +3496,18 @@ packages: ms: 2.1.3 dev: true + /debug@4.4.3: + resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==} + engines: {node: '>=6.0'} + peerDependencies: + supports-color: '*' + peerDependenciesMeta: + supports-color: + optional: true + dependencies: + ms: 2.1.3 + dev: true + /decode-uri-component@0.2.2: resolution: {integrity: sha512-FqUYQ+8o158GyGTrMFJms9qh3CqTKvAqgqsTnkLI8sKu0028orqBhxNMFkFen0zGyg6epACD32pjVk58ngIErQ==} engines: {node: '>=0.10'} @@ -4594,6 +4611,17 @@ packages: toidentifier: 1.0.1 dev: true + /http-errors@2.0.1: + resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==} + engines: {node: '>= 0.8'} + dependencies: + depd: 2.0.0 + inherits: 2.0.4 + setprototypeof: 1.2.0 + statuses: 2.0.2 + toidentifier: 1.0.1 + dev: true + /http-parser-js@0.5.10: resolution: {integrity: sha512-Pysuw9XpUq5dVc/2SMHpuTY01RFl8fttgcyunjL7eEMhGM3cI4eOmiCycJDVCo/7O7ClfQD3SaI6ftDzqOXYMA==} dev: true @@ -4979,10 +5007,10 @@ packages: graceful-fs: 4.2.11 dev: true - /jspdf@3.0.2: - resolution: {integrity: sha512-G0fQDJ5fAm6UW78HG6lNXyq09l0PrA1rpNY5i+ly17Zb1fMMFSmS+3lw4cnrAPGyouv2Y0ylujbY2Ieq3DSlKA==} + /jspdf@4.0.0: + resolution: {integrity: sha512-w12U97Z6edKd2tXDn3LzTLg7C7QLJlx0BPfM3ecjK2BckUl9/81vZ+r5gK4/3KQdhAcEZhENUxRhtgYBj75MqQ==} dependencies: - '@babel/runtime': 7.28.3 + '@babel/runtime': 7.28.4 fast-png: 6.4.0 fflate: 0.8.2 optionalDependencies: @@ -5095,7 +5123,7 @@ packages: object-assign: 4.1.1 opn: 6.0.0 proxy-middleware: 0.15.0 - send: 1.2.0 + send: 1.2.1 serve-index: 1.9.1 transitivePeerDependencies: - supports-color @@ -5308,9 +5336,9 @@ packages: mime-db: 1.52.0 dev: true - /mime-types@3.0.1: - resolution: {integrity: sha512-xRc4oEhT6eaBpU1XF7AjpOFD+xQmXNB5OVKwp4tqCuBpHLS/ZbBDrc07mYTDqVMg6PfxUjjNp85O6Cd2Z/5HWA==} - engines: {node: '>= 0.6'} + /mime-types@3.0.2: + resolution: {integrity: sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==} + engines: {node: '>=18'} dependencies: mime-db: 1.54.0 dev: true @@ -6679,17 +6707,17 @@ packages: - supports-color dev: true - /send@1.2.0: - resolution: {integrity: sha512-uaW0WwXKpL9blXE2o0bRhoL2EGXIrZxQ2ZQ4mgcfoBxdFmQold+qWsD2jLrfZ0trjKL6vOw0j//eAwcALFjKSw==} + /send@1.2.1: + resolution: {integrity: sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==} engines: {node: '>= 18'} dependencies: - debug: 4.4.1 + debug: 4.4.3 encodeurl: 2.0.0 escape-html: 1.0.3 etag: 1.8.1 fresh: 2.0.0 - http-errors: 2.0.0 - mime-types: 3.0.1 + http-errors: 2.0.1 + mime-types: 3.0.2 ms: 2.1.3 on-finished: 2.4.1 range-parser: 1.2.1