From 473729e3b9ddbf850c8d17f1859cc58d3cb86b89 Mon Sep 17 00:00:00 2001 From: Antonis Lilis Date: Mon, 12 Oct 2026 11:16:10 +0200 Subject: [PATCH] build(deps): Bump sharp, shell-quote and smol-toml to patched versions Refresh yarn.lock to resolve Dependabot advisories in three transitive dev/CI-tooling dependencies (none ship in @sentry/react-native): - sharp: 0.35.4 -> 0.35.5 (librsvg CVE-2026-96889) [#702] - shell-quote: 1.10.0 -> 1.12.0 (quote() command injection) [#701] - smol-toml: 1.8.0 -> 1.9.1 (quadratic-time parse DoS) [#699] Lockfile-only; all bumps stay within existing semver ranges. Co-Authored-By: Claude Opus 4.8 --- yarn.lock | 250 +++++++++++++++++++++++++++--------------------------- 1 file changed, 125 insertions(+), 125 deletions(-) diff --git a/yarn.lock b/yarn.lock index 2d6c0218c9..2da9ec73cf 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3217,11 +3217,11 @@ __metadata: languageName: node linkType: hard -"@img/sharp-darwin-arm64@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-darwin-arm64@npm:0.35.4" +"@img/sharp-darwin-arm64@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-darwin-arm64@npm:0.35.5" dependencies: - "@img/sharp-libvips-darwin-arm64": "npm:1.3.3" + "@img/sharp-libvips-darwin-arm64": "npm:1.3.4" dependenciesMeta: "@img/sharp-libvips-darwin-arm64": optional: true @@ -3229,11 +3229,11 @@ __metadata: languageName: node linkType: hard -"@img/sharp-darwin-x64@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-darwin-x64@npm:0.35.4" +"@img/sharp-darwin-x64@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-darwin-x64@npm:0.35.5" dependencies: - "@img/sharp-libvips-darwin-x64": "npm:1.3.3" + "@img/sharp-libvips-darwin-x64": "npm:1.3.4" dependenciesMeta: "@img/sharp-libvips-darwin-x64": optional: true @@ -3241,90 +3241,90 @@ __metadata: languageName: node linkType: hard -"@img/sharp-freebsd-wasm32@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-freebsd-wasm32@npm:0.35.4" +"@img/sharp-freebsd-wasm32@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-freebsd-wasm32@npm:0.35.5" dependencies: - "@img/sharp-wasm32": "npm:0.35.4" + "@img/sharp-wasm32": "npm:0.35.5" conditions: os=freebsd languageName: node linkType: hard -"@img/sharp-libvips-darwin-arm64@npm:1.3.3": - version: 1.3.3 - resolution: "@img/sharp-libvips-darwin-arm64@npm:1.3.3" +"@img/sharp-libvips-darwin-arm64@npm:1.3.4": + version: 1.3.4 + resolution: "@img/sharp-libvips-darwin-arm64@npm:1.3.4" conditions: os=darwin & cpu=arm64 languageName: node linkType: hard -"@img/sharp-libvips-darwin-x64@npm:1.3.3": - version: 1.3.3 - resolution: "@img/sharp-libvips-darwin-x64@npm:1.3.3" +"@img/sharp-libvips-darwin-x64@npm:1.3.4": + version: 1.3.4 + resolution: "@img/sharp-libvips-darwin-x64@npm:1.3.4" conditions: os=darwin & cpu=x64 languageName: node linkType: hard -"@img/sharp-libvips-linux-arm64@npm:1.3.3": - version: 1.3.3 - resolution: "@img/sharp-libvips-linux-arm64@npm:1.3.3" +"@img/sharp-libvips-linux-arm64@npm:1.3.4": + version: 1.3.4 + resolution: "@img/sharp-libvips-linux-arm64@npm:1.3.4" conditions: os=linux & cpu=arm64 & libc=glibc languageName: node linkType: hard -"@img/sharp-libvips-linux-arm@npm:1.3.3": - version: 1.3.3 - resolution: "@img/sharp-libvips-linux-arm@npm:1.3.3" +"@img/sharp-libvips-linux-arm@npm:1.3.4": + version: 1.3.4 + resolution: "@img/sharp-libvips-linux-arm@npm:1.3.4" conditions: os=linux & cpu=arm & libc=glibc languageName: node linkType: hard -"@img/sharp-libvips-linux-ppc64@npm:1.3.3": - version: 1.3.3 - resolution: "@img/sharp-libvips-linux-ppc64@npm:1.3.3" +"@img/sharp-libvips-linux-ppc64@npm:1.3.4": + version: 1.3.4 + resolution: "@img/sharp-libvips-linux-ppc64@npm:1.3.4" conditions: os=linux & cpu=ppc64 & libc=glibc languageName: node linkType: hard -"@img/sharp-libvips-linux-riscv64@npm:1.3.3": - version: 1.3.3 - resolution: "@img/sharp-libvips-linux-riscv64@npm:1.3.3" +"@img/sharp-libvips-linux-riscv64@npm:1.3.4": + version: 1.3.4 + resolution: "@img/sharp-libvips-linux-riscv64@npm:1.3.4" conditions: os=linux & cpu=riscv64 & libc=glibc languageName: node linkType: hard -"@img/sharp-libvips-linux-s390x@npm:1.3.3": - version: 1.3.3 - resolution: "@img/sharp-libvips-linux-s390x@npm:1.3.3" +"@img/sharp-libvips-linux-s390x@npm:1.3.4": + version: 1.3.4 + resolution: "@img/sharp-libvips-linux-s390x@npm:1.3.4" conditions: os=linux & cpu=s390x & libc=glibc languageName: node linkType: hard -"@img/sharp-libvips-linux-x64@npm:1.3.3": - version: 1.3.3 - resolution: "@img/sharp-libvips-linux-x64@npm:1.3.3" +"@img/sharp-libvips-linux-x64@npm:1.3.4": + version: 1.3.4 + resolution: "@img/sharp-libvips-linux-x64@npm:1.3.4" conditions: os=linux & cpu=x64 & libc=glibc languageName: node linkType: hard -"@img/sharp-libvips-linuxmusl-arm64@npm:1.3.3": - version: 1.3.3 - resolution: "@img/sharp-libvips-linuxmusl-arm64@npm:1.3.3" +"@img/sharp-libvips-linuxmusl-arm64@npm:1.3.4": + version: 1.3.4 + resolution: "@img/sharp-libvips-linuxmusl-arm64@npm:1.3.4" conditions: os=linux & cpu=arm64 & libc=musl languageName: node linkType: hard -"@img/sharp-libvips-linuxmusl-x64@npm:1.3.3": - version: 1.3.3 - resolution: "@img/sharp-libvips-linuxmusl-x64@npm:1.3.3" +"@img/sharp-libvips-linuxmusl-x64@npm:1.3.4": + version: 1.3.4 + resolution: "@img/sharp-libvips-linuxmusl-x64@npm:1.3.4" conditions: os=linux & cpu=x64 & libc=musl languageName: node linkType: hard -"@img/sharp-linux-arm64@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-linux-arm64@npm:0.35.4" +"@img/sharp-linux-arm64@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-linux-arm64@npm:0.35.5" dependencies: - "@img/sharp-libvips-linux-arm64": "npm:1.3.3" + "@img/sharp-libvips-linux-arm64": "npm:1.3.4" dependenciesMeta: "@img/sharp-libvips-linux-arm64": optional: true @@ -3332,11 +3332,11 @@ __metadata: languageName: node linkType: hard -"@img/sharp-linux-arm@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-linux-arm@npm:0.35.4" +"@img/sharp-linux-arm@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-linux-arm@npm:0.35.5" dependencies: - "@img/sharp-libvips-linux-arm": "npm:1.3.3" + "@img/sharp-libvips-linux-arm": "npm:1.3.4" dependenciesMeta: "@img/sharp-libvips-linux-arm": optional: true @@ -3344,11 +3344,11 @@ __metadata: languageName: node linkType: hard -"@img/sharp-linux-ppc64@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-linux-ppc64@npm:0.35.4" +"@img/sharp-linux-ppc64@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-linux-ppc64@npm:0.35.5" dependencies: - "@img/sharp-libvips-linux-ppc64": "npm:1.3.3" + "@img/sharp-libvips-linux-ppc64": "npm:1.3.4" dependenciesMeta: "@img/sharp-libvips-linux-ppc64": optional: true @@ -3356,11 +3356,11 @@ __metadata: languageName: node linkType: hard -"@img/sharp-linux-riscv64@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-linux-riscv64@npm:0.35.4" +"@img/sharp-linux-riscv64@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-linux-riscv64@npm:0.35.5" dependencies: - "@img/sharp-libvips-linux-riscv64": "npm:1.3.3" + "@img/sharp-libvips-linux-riscv64": "npm:1.3.4" dependenciesMeta: "@img/sharp-libvips-linux-riscv64": optional: true @@ -3368,11 +3368,11 @@ __metadata: languageName: node linkType: hard -"@img/sharp-linux-s390x@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-linux-s390x@npm:0.35.4" +"@img/sharp-linux-s390x@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-linux-s390x@npm:0.35.5" dependencies: - "@img/sharp-libvips-linux-s390x": "npm:1.3.3" + "@img/sharp-libvips-linux-s390x": "npm:1.3.4" dependenciesMeta: "@img/sharp-libvips-linux-s390x": optional: true @@ -3380,11 +3380,11 @@ __metadata: languageName: node linkType: hard -"@img/sharp-linux-x64@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-linux-x64@npm:0.35.4" +"@img/sharp-linux-x64@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-linux-x64@npm:0.35.5" dependencies: - "@img/sharp-libvips-linux-x64": "npm:1.3.3" + "@img/sharp-libvips-linux-x64": "npm:1.3.4" dependenciesMeta: "@img/sharp-libvips-linux-x64": optional: true @@ -3392,11 +3392,11 @@ __metadata: languageName: node linkType: hard -"@img/sharp-linuxmusl-arm64@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-linuxmusl-arm64@npm:0.35.4" +"@img/sharp-linuxmusl-arm64@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-linuxmusl-arm64@npm:0.35.5" dependencies: - "@img/sharp-libvips-linuxmusl-arm64": "npm:1.3.3" + "@img/sharp-libvips-linuxmusl-arm64": "npm:1.3.4" dependenciesMeta: "@img/sharp-libvips-linuxmusl-arm64": optional: true @@ -3404,11 +3404,11 @@ __metadata: languageName: node linkType: hard -"@img/sharp-linuxmusl-x64@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-linuxmusl-x64@npm:0.35.4" +"@img/sharp-linuxmusl-x64@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-linuxmusl-x64@npm:0.35.5" dependencies: - "@img/sharp-libvips-linuxmusl-x64": "npm:1.3.3" + "@img/sharp-libvips-linuxmusl-x64": "npm:1.3.4" dependenciesMeta: "@img/sharp-libvips-linuxmusl-x64": optional: true @@ -3416,41 +3416,41 @@ __metadata: languageName: node linkType: hard -"@img/sharp-wasm32@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-wasm32@npm:0.35.4" +"@img/sharp-wasm32@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-wasm32@npm:0.35.5" dependencies: "@emnapi/runtime": "npm:^1.11.3" - checksum: 10c0/7f5e394f168eb2f038b8ae4949fb5434085d1db931ede2ae1389479d7a1dbe11e2fc9d58e8e9830bff744ba996256c9e411be1d466dfcbf6e1f4d153b84f25ff + checksum: 10c0/da3f39d733135fde6d8b5009d282e12049f8f6df33ac3e4dc5d98868123842b5c888002ea1647e1824af9b4f9274a28826f35ebf2967b58a7416efd2aeb6299f languageName: node linkType: hard -"@img/sharp-webcontainers-wasm32@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-webcontainers-wasm32@npm:0.35.4" +"@img/sharp-webcontainers-wasm32@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-webcontainers-wasm32@npm:0.35.5" dependencies: - "@img/sharp-wasm32": "npm:0.35.4" + "@img/sharp-wasm32": "npm:0.35.5" conditions: cpu=wasm32 languageName: node linkType: hard -"@img/sharp-win32-arm64@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-win32-arm64@npm:0.35.4" +"@img/sharp-win32-arm64@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-win32-arm64@npm:0.35.5" conditions: os=win32 & cpu=arm64 languageName: node linkType: hard -"@img/sharp-win32-ia32@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-win32-ia32@npm:0.35.4" +"@img/sharp-win32-ia32@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-win32-ia32@npm:0.35.5" conditions: os=win32 & cpu=ia32 languageName: node linkType: hard -"@img/sharp-win32-x64@npm:0.35.4": - version: 0.35.4 - resolution: "@img/sharp-win32-x64@npm:0.35.4" +"@img/sharp-win32-x64@npm:0.35.5": + version: 0.35.5 + resolution: "@img/sharp-win32-x64@npm:0.35.5" conditions: os=win32 & cpu=x64 languageName: node linkType: hard @@ -25095,35 +25095,35 @@ __metadata: linkType: hard "sharp@npm:^0.35.4": - version: 0.35.4 - resolution: "sharp@npm:0.35.4" + version: 0.35.5 + resolution: "sharp@npm:0.35.5" dependencies: "@img/colour": "npm:^1.1.0" - "@img/sharp-darwin-arm64": "npm:0.35.4" - "@img/sharp-darwin-x64": "npm:0.35.4" - "@img/sharp-freebsd-wasm32": "npm:0.35.4" - "@img/sharp-libvips-darwin-arm64": "npm:1.3.3" - "@img/sharp-libvips-darwin-x64": "npm:1.3.3" - "@img/sharp-libvips-linux-arm": "npm:1.3.3" - "@img/sharp-libvips-linux-arm64": "npm:1.3.3" - "@img/sharp-libvips-linux-ppc64": "npm:1.3.3" - "@img/sharp-libvips-linux-riscv64": "npm:1.3.3" - "@img/sharp-libvips-linux-s390x": "npm:1.3.3" - "@img/sharp-libvips-linux-x64": "npm:1.3.3" - "@img/sharp-libvips-linuxmusl-arm64": "npm:1.3.3" - "@img/sharp-libvips-linuxmusl-x64": "npm:1.3.3" - "@img/sharp-linux-arm": "npm:0.35.4" - "@img/sharp-linux-arm64": "npm:0.35.4" - "@img/sharp-linux-ppc64": "npm:0.35.4" - "@img/sharp-linux-riscv64": "npm:0.35.4" - "@img/sharp-linux-s390x": "npm:0.35.4" - "@img/sharp-linux-x64": "npm:0.35.4" - "@img/sharp-linuxmusl-arm64": "npm:0.35.4" - "@img/sharp-linuxmusl-x64": "npm:0.35.4" - "@img/sharp-webcontainers-wasm32": "npm:0.35.4" - "@img/sharp-win32-arm64": "npm:0.35.4" - "@img/sharp-win32-ia32": "npm:0.35.4" - "@img/sharp-win32-x64": "npm:0.35.4" + "@img/sharp-darwin-arm64": "npm:0.35.5" + "@img/sharp-darwin-x64": "npm:0.35.5" + "@img/sharp-freebsd-wasm32": "npm:0.35.5" + "@img/sharp-libvips-darwin-arm64": "npm:1.3.4" + "@img/sharp-libvips-darwin-x64": "npm:1.3.4" + "@img/sharp-libvips-linux-arm": "npm:1.3.4" + "@img/sharp-libvips-linux-arm64": "npm:1.3.4" + "@img/sharp-libvips-linux-ppc64": "npm:1.3.4" + "@img/sharp-libvips-linux-riscv64": "npm:1.3.4" + "@img/sharp-libvips-linux-s390x": "npm:1.3.4" + "@img/sharp-libvips-linux-x64": "npm:1.3.4" + "@img/sharp-libvips-linuxmusl-arm64": "npm:1.3.4" + "@img/sharp-libvips-linuxmusl-x64": "npm:1.3.4" + "@img/sharp-linux-arm": "npm:0.35.5" + "@img/sharp-linux-arm64": "npm:0.35.5" + "@img/sharp-linux-ppc64": "npm:0.35.5" + "@img/sharp-linux-riscv64": "npm:0.35.5" + "@img/sharp-linux-s390x": "npm:0.35.5" + "@img/sharp-linux-x64": "npm:0.35.5" + "@img/sharp-linuxmusl-arm64": "npm:0.35.5" + "@img/sharp-linuxmusl-x64": "npm:0.35.5" + "@img/sharp-webcontainers-wasm32": "npm:0.35.5" + "@img/sharp-win32-arm64": "npm:0.35.5" + "@img/sharp-win32-ia32": "npm:0.35.5" + "@img/sharp-win32-x64": "npm:0.35.5" detect-libc: "npm:^2.1.2" semver: "npm:^7.8.5" dependenciesMeta: @@ -25180,7 +25180,7 @@ __metadata: peerDependenciesMeta: "@types/node": optional: true - checksum: 10c0/dbcc0909200cbff98e82805c86085b94afbd45f373897a04b21e52e9bbc1671dc64970350dd3cb6b2d0970f3444be7100d728005dc6620e39b599269ed7e15eb + checksum: 10c0/73d61270979fdb89a14d523c071662f1f557814dac62faa5491ca975e0e2b0007665456941b90356a9a511b2fba8920d9088aa7f91b4786554e12852f94a82b0 languageName: node linkType: hard @@ -25201,9 +25201,9 @@ __metadata: linkType: hard "shell-quote@npm:^1.10.0": - version: 1.10.0 - resolution: "shell-quote@npm:1.10.0" - checksum: 10c0/46ee59bfd972ce6a45500c44ed130dff2d0a7d6fbac9841e59d548518cad8060a06393c9a5dcbc0cede294ad80b2a2cd8c904679e09265f53efc0a0879f30961 + version: 1.12.0 + resolution: "shell-quote@npm:1.12.0" + checksum: 10c0/1605a4ed6a758bf13de7cb8197a4184d8015f7a4dbdcd6cd4a717d5b30b3ae7666300cc4ae7f3155cf80ace9739e9e82061ee5aa1a648f53f5fab31a220816d0 languageName: node linkType: hard @@ -25370,9 +25370,9 @@ __metadata: linkType: hard "smol-toml@npm:^1.7.1": - version: 1.8.0 - resolution: "smol-toml@npm:1.8.0" - checksum: 10c0/4e01dbfb7c7af142176b037ebedaccccafb8229cc873feaa47c184ee31073d86e30b4b1b0fe9a5a6d083ed3ce21615eda9e81d1f5d779ad8b2e2e9459b900aea + version: 1.9.1 + resolution: "smol-toml@npm:1.9.1" + checksum: 10c0/8acccf7bbc063f29405f58f5014ab39bf4eb9d7f0e000e5e3f140f7d4d6ead5696681a7c15260d1f2910213012c0af43b31a05bf94f704b0bdf39989fba08c02 languageName: node linkType: hard