Claude CodeandClaude Sonnet 5.5 0250b4bab2 fix(deps): patch HIGH/CRITICAL advisories ...

Lockfile-level update of the packages trivy flags on main, all within
their current major:

- next 16.3.1 -> 16.3.3 (CVE-2026-75604, CRITICAL)
- js-yaml 4.3.1 -> 4.3.2 (CVE-2026-84375)
- nodemailer 9.0.5 -> 9.1.1 (GHSA-2x7j-588g-ccc2, GHSA-8m3c-c648-2xjj)
- sharp 0.35.3 -> 0.35.5 (GHSA-rgj7-g3m4-5g8c)
- undici 6.28.0 -> 6.29.0 (CVE-2026-19534)
- brace-expansion -> 1.1.21 / 2.1.7 (CVE-2026-102276, CVE-2026-102278, dev)
- minimatch 9.0.5 -> 9.0.9 (CVE-2026-26996/27903/27904, dev)

next, js-yaml and nodemailer were exact-pinned, so their pins move too.
PINNED_DEPS in the antipattern guard follows nodemailer to 9.1.1; without
it the pinned-dep guard fails.

Remaining: nodemailer GHSA-v53p-9fqp-m79j is only fixed in 10.x (major
bump of a direct dependency, left for a separate reviewed change).

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-09-30 17:17:51 +02:00

..

__tests__

fix(sales-orders): pin the sales_order_items embed FK and teach the embed guard composite keys (#2207)

2026-09-03 12:18:47 +02:00

ambiguous-embed.mjs

fix(sales-orders): pin the sales_order_items embed FK and teach the embed guard composite keys (#2207)

2026-09-03 12:18:47 +02:00

antipatterns-baseline.json

feat(parties): Förslag från bokföringen, confirmed straight into Leverantörer and Kunder (#2206)

2026-09-03 19:49:25 +02:00

client-node-builtin.mjs

perf(bundle): drop the BAS chart and the Node crypto polyfill from the shared client baseline (#1942)

2026-08-26 15:07:49 +02:00

eslint-baseline.json

Fix/fdb fr usrs (#1125)

2026-07-23 16:16:55 +02:00

extension-route-guards.mjs

fix(skattekonto): remove the drift email, its event and the unused drift route (#2149)

2026-09-02 11:28:55 +02:00

format-currency-sek-label.mjs

fix: similar-sweep currency remediation, security hardening and v1 API fixes (#1215)

2026-07-27 03:34:56 +02:00

no-new-antipatterns.mjs

fix(deps): patch HIGH/CRITICAL advisories

2026-09-30 17:17:51 +02:00

no-new-lint-errors.mjs

Bug/gh issues fiz (#1103)

2026-07-21 23:00:15 +02:00

no-new-type-errors.mjs

chore(ci): ratchet TypeScript errors, because npm test does not typecheck (#1980)

2026-08-27 17:53:04 +02:00

raw-reference-fetch.mjs

feat(perf): session-cached reference data layer, server-seeded, with a raw-fetch ratchet (#1932)

2026-08-26 14:14:54 +02:00

typecheck-baseline.json

feat(company): ideell förening as a third legal form, behind a flag (#2072 step 1) (#2423)

2026-09-08 14:47:50 +02:00