mirror of
https://github.com/RayLabsHQ/gitea-mirror.git
synced 2026-11-09 16:02:23 +01:00
Arunavo Ray
b36c7fa180
GHSA-mrhx-c7xc-m3w5 (CVE-2023-54404): before 4.6.6 zod validates every element of an array that is longer than its .max(), so one oversized list can run the process out of memory. The MCP tools' repository id list is the capped array that takes outside input, behind an API key. zod 4.4.3 becomes 4.6.7 and Astro's nested 4.5.4 entry is dropped so it resolves to the same copy; an override keeps both from sliding back. No other package in bun.lock changes. bun.nix regenerated with bun2nix.
143 lines
4.9 KiB
JSON
143 lines
4.9 KiB
JSON
{
|
|
"name": "gitea-mirror",
|
|
"type": "module",
|
|
"version": "3.47.0",
|
|
"engines": {
|
|
"bun": ">=1.2.9"
|
|
},
|
|
"scripts": {
|
|
"setup": "bun install && bun run manage-db init",
|
|
"dev": "bunx --bun astro dev",
|
|
"dev:clean": "bun run cleanup-db && bun run manage-db init && bunx --bun astro dev",
|
|
"build": "bunx --bun astro build",
|
|
"cleanup-db": "rm -f gitea-mirror.db data/gitea-mirror.db",
|
|
"manage-db": "bun scripts/manage-db.ts",
|
|
"init-db": "bun scripts/manage-db.ts init",
|
|
"check-db": "bun scripts/manage-db.ts check",
|
|
"fix-db": "bun scripts/manage-db.ts fix",
|
|
"reset-users": "bun scripts/manage-db.ts reset-users",
|
|
"reset-password": "bun scripts/manage-db.ts reset-password",
|
|
"db:generate": "bun drizzle-kit generate",
|
|
"db:migrate": "bun drizzle-kit migrate",
|
|
"db:push": "bun drizzle-kit push",
|
|
"db:pull": "bun drizzle-kit pull",
|
|
"db:check": "bun drizzle-kit check",
|
|
"db:studio": "bun drizzle-kit studio",
|
|
"startup-recovery": "bun scripts/startup-recovery.ts",
|
|
"startup-recovery-force": "bun scripts/startup-recovery.ts --force",
|
|
"startup-env-config": "bun scripts/startup-env-config.ts",
|
|
"test-recovery": "bun scripts/test-recovery.ts",
|
|
"test-recovery-cleanup": "bun scripts/test-recovery.ts --cleanup",
|
|
"test-shutdown": "bun scripts/test-graceful-shutdown.ts",
|
|
"test-shutdown-cleanup": "bun scripts/test-graceful-shutdown.ts --cleanup",
|
|
"preview": "bunx --bun astro preview",
|
|
"start": "bun scripts/runtime-server.ts",
|
|
"start:fresh": "bun run cleanup-db && bun run manage-db init && bun scripts/runtime-server.ts",
|
|
"test": "bun test",
|
|
"test:migrations": "bun scripts/validate-migrations.ts",
|
|
"test:watch": "bun test --watch",
|
|
"test:coverage": "bun test --coverage",
|
|
"test:e2e": "bash tests/e2e/run-e2e.sh",
|
|
"test:e2e:ci": "bash tests/e2e/run-e2e.sh --ci",
|
|
"test:e2e:keep": "bash tests/e2e/run-e2e.sh --keep",
|
|
"test:e2e:cleanup": "bash tests/e2e/cleanup.sh",
|
|
"astro": "bunx --bun astro"
|
|
},
|
|
"overrides": {
|
|
"@esbuild-kit/esm-loader": "npm:tsx@^4.21.0",
|
|
"@xmldom/xmldom": "^0.8.15",
|
|
"browserslist": "^4.28.7",
|
|
"devalue": "^5.9.2",
|
|
"fast-uri": "^3.1.5",
|
|
"fast-xml-builder": "^1.1.7",
|
|
"js-yaml": "^4.3.2",
|
|
"smol-toml": "^1.9.0",
|
|
"kysely": "^0.28.17",
|
|
"lodash": "^4.18.1",
|
|
"picomatch": "^4.0.4",
|
|
"sharp": "^0.35.5",
|
|
"svgo": "^4.1.0",
|
|
"source-map-js": "^1.2.2",
|
|
"http-cache-semantics": "^4.3.0",
|
|
"vite": "~8.1.6",
|
|
"zod": "^4.6.7"
|
|
},
|
|
"dependencies": {
|
|
"@astrojs/mdx": "^7.0.3",
|
|
"@astrojs/node": "^11.1.6",
|
|
"@astrojs/react": "^6.0.1",
|
|
"@better-auth/api-key": "1.7.2",
|
|
"@better-auth/oauth-provider": "1.7.2",
|
|
"@better-auth/sso": "1.7.2",
|
|
"@octokit/plugin-throttling": "^11.0.3",
|
|
"@octokit/rest": "^22.0.1",
|
|
"@radix-ui/react-accordion": "^1.2.16",
|
|
"@radix-ui/react-avatar": "^1.2.2",
|
|
"@radix-ui/react-checkbox": "^1.3.7",
|
|
"@radix-ui/react-collapsible": "^1.1.16",
|
|
"@radix-ui/react-dialog": "^1.1.19",
|
|
"@radix-ui/react-dropdown-menu": "^2.1.20",
|
|
"@radix-ui/react-hover-card": "^1.1.19",
|
|
"@radix-ui/react-label": "^2.1.11",
|
|
"@radix-ui/react-popover": "^1.1.19",
|
|
"@radix-ui/react-progress": "^1.1.12",
|
|
"@radix-ui/react-radio-group": "^1.4.3",
|
|
"@radix-ui/react-scroll-area": "^1.2.14",
|
|
"@radix-ui/react-select": "^2.3.3",
|
|
"@radix-ui/react-separator": "^1.1.11",
|
|
"@radix-ui/react-slot": "^1.3.0",
|
|
"@radix-ui/react-switch": "^1.3.3",
|
|
"@radix-ui/react-tabs": "^1.1.17",
|
|
"@radix-ui/react-tooltip": "^1.2.12",
|
|
"@tailwindcss/vite": "^4.3.3",
|
|
"@tanstack/react-table": "^8.21.3",
|
|
"@tanstack/react-virtual": "^3.14.6",
|
|
"@types/canvas-confetti": "^1.9.0",
|
|
"@types/react": "^19.2.17",
|
|
"@types/react-dom": "^19.2.3",
|
|
"astro": "^7.3.5",
|
|
"bcryptjs": "^3.0.3",
|
|
"better-auth": "1.7.2",
|
|
"buffer": "^6.0.3",
|
|
"canvas-confetti": "^1.9.4",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"cmdk": "^1.1.1",
|
|
"dotenv": "^17.4.2",
|
|
"drizzle-orm": "^0.45.2",
|
|
"fuse.js": "^7.5.0",
|
|
"jsonwebtoken": "^9.0.3",
|
|
"lucide-react": "^1.24.0",
|
|
"nanoid": "^6.0.0",
|
|
"next-themes": "^0.4.6",
|
|
"react": "^19.2.7",
|
|
"react-dom": "^19.2.7",
|
|
"react-icons": "^5.7.0",
|
|
"sonner": "^2.0.7",
|
|
"tailwind-merge": "^3.6.0",
|
|
"tailwindcss": "^4.3.3",
|
|
"tw-animate-css": "^1.4.0",
|
|
"uuid": "^14.0.1",
|
|
"vaul": "^1.1.2",
|
|
"zod": "^4.6.7"
|
|
},
|
|
"devDependencies": {
|
|
"@astrojs/check": "^0.9.9",
|
|
"@playwright/test": "^1.61.1",
|
|
"@testing-library/jest-dom": "^6.9.1",
|
|
"@testing-library/react": "^16.3.2",
|
|
"@types/bcryptjs": "^3.0.0",
|
|
"@types/bun": "^1.3.14",
|
|
"@types/jsonwebtoken": "^9.0.10",
|
|
"@types/node": "^26.1.1",
|
|
"@types/uuid": "^11.0.0",
|
|
"@vitejs/plugin-react": "^6.0.3",
|
|
"drizzle-kit": "^0.31.10",
|
|
"jsdom": "^29.1.1",
|
|
"tsx": "^4.23.1",
|
|
"typescript": "^7.0.2",
|
|
"vitest": "^4.1.10"
|
|
},
|
|
"packageManager": "bun@1.3.10"
|
|
}
|