Lucie Germain
4024a3822c
[Security upgrade] bump fast-xml-parser to 5.7.0 ( #33916 )
...
GitOrigin-RevId: cef87a7ce71a5d3742082a2af08a554265c9fbde
2026-06-10 08:06:59 +00:00
Lucie Germain and Claude Sonnet 4.6
d52b5ae141
[Security upgrade] bump brace-expansion to 5.0.6 ( #33915 )
...
* Bump brace-expansion to 5.0.6 in linked-url-proxy
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
* drop unnecessary brace-expansion resolution; ^5.0.5 already permits 5.0.6
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
---------
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
GitOrigin-RevId: 837dcd88e5e0a6181d3ac2fe4f512a6ec1904002
2026-06-03 08:05:41 +00:00
5e47353ad4
[Security upgrade] Pin @babel/plugin-transform-modules-systemjs to 7.29.4 via resolutions (GHSA-fv7c-fp4j-7gwp) ( #33650 )
...
* Pin @babel/plugin-transform-modules-systemjs to 7.29.4 via resolutions (GHSA-fv7c-fp4j-7gwp)
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
* Fix missing comma in package.json resolutions
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
---------
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
Co-authored-by: Jakob Ackermann <jakob.ackermann@overleaf.com >
GitOrigin-RevId: d6f3e72234d64fd0afb8676b8652cc03b0cddbe0
2026-05-28 08:07:54 +00:00
Lucie Germain and Claude Sonnet 4.6
a4e7d90cf1
[Security upgrade] pin js-cookie to 3.0.7 ( #33960 )
...
* pin js-cookie to 3.0.7 in root yarn.lock
* drop unnecessary js-cookie resolution; ^3.0.5 already permits 3.0.7
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
---------
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
GitOrigin-RevId: e7803a04aa76daea574e6b1e67b3d6c42134945e
2026-05-28 08:07:49 +00:00
Lucie Germain and Claude Sonnet 4.6
ae00bcbeca
[Security Upgrade]: pin @xmldom/xmldom to 0.8.13 ( #33373 )
...
Adds a resolution in root package.json to force all consumers to
@xmldom/xmldom@0.8.13, fixing GHSA-wh4c-j3r5-mjhp, GHSA-j759-j44w-7fr8,
GHSA-x6wf-f3px-wcqx, GHSA-f6ww-3ggp-fr8h, and GHSA-2v35-w6hq-6mfw.
The vulnerable 0.7.13 entry in yarn.lock is replaced by 0.8.13
(minimum safe version across all five advisories).
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
GitOrigin-RevId: e1a301e3a1d637894284f35238ca0e8c23534276
2026-05-25 08:05:19 +00:00
Lucie Germain
6fa708982b
Pin argparse/underscore to 1.13.8 via yarn resolution ( #33364 )
...
Fixes GHSA-cf4h-3jhx-xvhq (critical, arbitrary code execution) and
GHSA-qpx9-hpmf-5gmw (high, DoS via _.flatten/_.isEqual).
Vulnerable underscore@1.7.0 came from js-yaml@2.1.3 → argparse@0.1.16.
All other instances were already ≥1.13.8.
GitOrigin-RevId: b2ab4bc2682e19709694b7dd686134a439ade90c
2026-05-22 08:06:48 +00:00
Lucie Germain and Claude Opus 4.7
2f08f6f6eb
Bump mongoose to 8.22.1 (GHSA-wpg9-53fq-2r8h) ( #33648 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
GitOrigin-RevId: f092e8d914ea5825e285fe4741bb42dd2c5d5fa3
2026-05-20 08:07:05 +00:00
Lucie Germain
ed0fb0110a
Merge pull request #33083 from overleaf/lg-npm-audit-fix-quay-logging
...
Run npm audit fix --force in quay-logging
GitOrigin-RevId: 6dbca8519ce0e3077f29bec17127c00086545500
2026-04-28 08:52:27 +00:00
Lucie Germain
a8861b2583
Merge pull request #32528 from overleaf/lg-fix-randomised-test-debuggability
...
[overleaf-editor-core] Log failing inputs in randomised tests
GitOrigin-RevId: 0bc86e9e30935428208fc01c2a4a45f3b19ee837
2026-03-31 08:07:48 +00:00
Lucie Germain
bf1f34bca6
Merge pull request #32197 from overleaf/lg-project-number-buildscripts
...
Replace project name with project number for --pipeline-owner in buildscripts
GitOrigin-RevId: c021447091b388ee3a26e59e7163d53bcd1c8e81
2026-03-18 09:07:27 +00:00
Lucie Germain
96a071dd04
Merge pull request #30262 from overleaf/lg-locales-readme-remove-onesky
...
Remove OneSky from Locales readme
GitOrigin-RevId: b0bf685497537465227d17956f61636dc9866ba4
2025-12-11 09:06:09 +00:00
Lucie Germain
f53a13ae1e
Merge pull request #26604 from overleaf/mf-resync-recurly-state-single-subscription
...
Add script to sync recurlyStatus.state for a single subscriptionId
GitOrigin-RevId: 69af89a44b4043d92853862baee65d8b7f84b88f
2025-06-25 08:05:29 +00:00
Lucie Germain
ee4c8b5fe2
Merge pull request #22630 from overleaf/td-ds-nav-system-messages
...
Add system messages to DS nav version of project dashboard
GitOrigin-RevId: 85830d58242300a40148190f8a18204666a3065c
2024-12-20 09:05:25 +00:00
Lucie Germain
f42ccd67f7
Merge pull request #22364 from overleaf/lg-server-ce-new-issue-note
...
New note about creating an issue in Server CE repo
GitOrigin-RevId: c004914eff95e594c5b4ba9e165caddb4deb526b
2024-12-11 09:05:00 +00:00
Lucie Germain
71a6353dfc
Merge pull request #13265 from overleaf/ab-more-fr-translations
...
[web] French translations batch
GitOrigin-RevId: 28bdacada29615398c9b1d69004f5fa78b589614
2024-07-15 09:05:20 +00:00
Lucie Germain