mirror of
https://github.com/Dokploy/dokploy.git
synced 2026-09-12 11:40:27 +05:00
19589694ea
- tar >=7.5.19 (GHSA-23hp-3jrh-7fpw): decompression DoS, pinned via pnpm override within 7.x (transitive via @mapbox/node-pre-gyp) - protobufjs >=7.5.5 (GHSA-xq3m-2v4x-88gg): arbitrary code execution, pinned via pnpm override within 7.x (transitive via @grpc/proto-loader, @opentelemetry/otlp-transformer) - shell-quote ^1.8.4 (GHSA-w7jw-789q-3m8p): quote() didn't escape newlines in object .op values (direct dep, used for docker/ssh command building) - vitest ^4.1.0 (GHSA-5xrq-8626-4rwp): arbitrary file read/execute via UI server (devDependency) - github.com/gofiber/fiber/v2 v2.52.11 (GHSA-68rr-p4fp-j59v): insecure UUIDv4 fallback on crypto/rand failure (apps/monitoring) - next (GHSA-f82v-jwr5-mffw): authorization bypass in middleware, was a transitive dep of react-email in the standalone packages/server/src/emails lockfile; regenerating against the current react-email version (6.9.3) drops next.js entirely, since it no longer uses it for the preview server Verified: typecheck (server + app) clean, full vitest suite (947 passed / 5 env-conditional skips, 0 failures), go build/vet/test clean for apps/monitoring.
83 lines
2.0 KiB
JSON
83 lines
2.0 KiB
JSON
{
|
|
"name": "dokploy",
|
|
"private": true,
|
|
"workspaces": [
|
|
"apps/*",
|
|
"packages/*"
|
|
],
|
|
"scripts": {
|
|
"dokploy:setup": "pnpm --filter=dokploy run setup",
|
|
"dokploy:dev": "pnpm --filter=dokploy run dev",
|
|
"dokploy:build": "pnpm --filter=dokploy run build",
|
|
"dokploy:start": "pnpm --filter=dokploy run start",
|
|
"test": "pnpm --filter=dokploy run test",
|
|
"server:script": "pnpm --filter=server run switch:dev",
|
|
"server:dev": "pnpm --filter=server run dev",
|
|
"server:build": "pnpm --filter=server run build",
|
|
"docker:build:canary": "./apps/dokploy/docker/build.sh canary",
|
|
"typecheck": "pnpm -r run typecheck",
|
|
"build": "pnpm -r run build",
|
|
"format-and-lint": "biome check .",
|
|
"check": "biome check --write --no-errors-on-unmatched --files-ignore-unknown=true",
|
|
"format-and-lint:fix": "biome check . --write",
|
|
"generate:openapi": "pnpm --filter=dokploy run generate:openapi"
|
|
},
|
|
"devDependencies": {
|
|
"@biomejs/biome": "2.5.7",
|
|
"@types/node": "^24.4.0",
|
|
"dotenv": "16.4.5",
|
|
"esbuild": "0.20.2",
|
|
"lint-staged": "^15.5.2",
|
|
"tsx": "4.22.4"
|
|
},
|
|
"packageManager": "pnpm@10.22.0",
|
|
"engines": {
|
|
"node": "^24.4.0",
|
|
"pnpm": ">=9.12.0"
|
|
},
|
|
"lint-staged": {
|
|
"*": [
|
|
"biome check --write --no-errors-on-unmatched --files-ignore-unknown=true"
|
|
]
|
|
},
|
|
"resolutions": {
|
|
"@types/react": "18.3.5",
|
|
"@types/react-dom": "18.3.0"
|
|
},
|
|
"pnpm": {
|
|
"overrides": {
|
|
"esbuild": "0.20.2",
|
|
"better-call": "1.3.7",
|
|
"@better-fetch/fetch": "1.3.1",
|
|
"tar": ">=7.5.19 <8.0.0",
|
|
"protobufjs": ">=7.5.5 <8.0.0"
|
|
},
|
|
"peerDependencyRules": {
|
|
"ignoreMissing": [
|
|
"prisma",
|
|
"@prisma/client",
|
|
"@prisma/engines",
|
|
"@electric-sql/pglite",
|
|
"typescript",
|
|
"drizzle-kit"
|
|
]
|
|
},
|
|
"onlyBuiltDependencies": [
|
|
"@scarf/scarf",
|
|
"@tree-sitter-grammars/tree-sitter-yaml",
|
|
"bcrypt",
|
|
"better-sqlite3",
|
|
"core-js-pure",
|
|
"cpu-features",
|
|
"esbuild",
|
|
"msgpackr-extract",
|
|
"node-pty",
|
|
"protobufjs",
|
|
"sharp",
|
|
"ssh2",
|
|
"tree-sitter",
|
|
"tree-sitter-json"
|
|
]
|
|
}
|
|
}
|