chore: resolve dev dependency audit findings (WealthLedger/frontend#103)

Bump storybook, vite, vitest and @vitest/* to patched versions, pin transitive @vitest/* via overrides, and bump ip-address. npm audit --include=dev now reports 0 vulnerabilities; the security job passes.
2026-10-23 09:31:14 +03:00
parent ed811e88fa
commit e1e9431e20
4 changed files with 284 additions and 196 deletions
@@ -79,8 +79,8 @@
 		"@types/react": "19.3.0",
 		"@types/react-dom": "19.3.0",
 		"@vitejs/plugin-react": "6.1.1",
-		"@vitest/browser-playwright": "5.0.0",
-		"@vitest/coverage-v8": "5.0.0",
+		"@vitest/browser-playwright": "5.0.5",
+		"@vitest/coverage-v8": "5.0.5",
 		"@vitest/eslint-plugin": "1.6.27",
 		"babel-plugin-react-compiler": "1.0.0",
 		"conventional-changelog-conventionalcommits": "10.4.0",
@@ -108,18 +108,21 @@
 		"openapi-typescript": "7.13.0",
 		"playwright": "1.63.0",
 		"release-it": "21.0.2",
-		"storybook": "10.6.0",
+		"storybook": "10.6.3",
 		"typescript": "5.9.3",
 		"typescript-eslint": "8.70.1",
-		"vite": "8.3.0",
+		"vite": "8.3.5",
 		"vite-plugin-pwa": "1.3.0",
-		"vitest": "5.0.0"
+		"vitest": "5.0.5"
 	},
 	"overrides": {
 		"release-it": {
 			"basic-ftp": "6.2.1",
 			"undici": "7.29.1"
-		}
+		},
+		"@vitest/browser": "5.0.5",
+		"@vitest/ui": "5.0.5",
+		"@vitest/mocker": "5.0.5"
 	},
 	"allowScripts": {
 		"esbuild@0.28.2": true,