Skip to content

chore(deps): minimatch and rollup package vulnerabilities #8675

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
sriramveeraghanta merged 6 commits into from
Mar 2, 2026
+525 −1,731
Merged

chore(deps): minimatch and rollup package vulnerabilities #8675

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
70a4a1a
fix: package updates
sriramveeraghanta Mar 2, 2026
fc886c3
fix: package upgrades
sriramveeraghanta Mar 2, 2026
e095419
fix: minimatch package vulnerabilities
sriramveeraghanta Mar 2, 2026
09a46d0
fix: ajv package vulnerabilities
sriramveeraghanta Mar 2, 2026
50971de
fix: lint
sriramveeraghanta Mar 2, 2026
8885101
fix: format
sriramveeraghanta Mar 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion apps/admin/Dockerfile.admin
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ RUN corepack enable pnpm

FROM base AS builder

RUN pnpm add -g turbo@2.6.3
RUN pnpm add -g turbo@2.8.12

COPY . .

Expand Down
21 changes: 0 additions & 21 deletions apps/admin/app/entry.client.tsx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,31 +4,10 @@
* See the LICENSE file for details.
*/

import * as Sentry from "@sentry/react-router";
import { startTransition, StrictMode } from "react";
import { hydrateRoot } from "react-dom/client";
import { HydratedRouter } from "react-router/dom";

Sentry.init({
dsn: process.env.VITE_SENTRY_DSN,
environment: process.env.VITE_SENTRY_ENVIRONMENT,
sendDefaultPii: process.env.VITE_SENTRY_SEND_DEFAULT_PII ? process.env.VITE_SENTRY_SEND_DEFAULT_PII === "1" : false,
release: process.env.VITE_APP_VERSION,
tracesSampleRate: process.env.VITE_SENTRY_TRACES_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_TRACES_SAMPLE_RATE)
: 0.1,
profilesSampleRate: process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE)
: 0.1,
replaysSessionSampleRate: process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE)
: 0.1,
replaysOnErrorSampleRate: process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE)
: 1.0,
integrations: [],
});

startTransition(() => {
hydrateRoot(
document,
Expand Down
5 changes: 0 additions & 5 deletions apps/admin/app/root.tsx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,6 @@
import type { ReactNode } from "react";
import { Links, Meta, Outlet, Scripts } from "react-router";
import type { LinksFunction } from "react-router";
import * as Sentry from "@sentry/react-router";
import appleTouchIcon from "@/app/assets/favicon/apple-touch-icon.png?url";
import favicon16 from "@/app/assets/favicon/favicon-16x16.png?url";
import favicon32 from "@/app/assets/favicon/favicon-32x32.png?url";
Expand Down Expand Up @@ -90,10 +89,6 @@ export function HydrateFallback() {
}

export function ErrorBoundary({ error }: Route.ErrorBoundaryProps) {
if (error) {
Sentry.captureException(error);
}

return (
<div>
<p>Something went wrong.</p>
Expand Down
3 changes: 1 addition & 2 deletions apps/admin/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
"preview": "react-router build && serve -s build/client -l 3001",
"start": "serve -s build/client -l 3001",
"clean": "rm -rf .turbo && rm -rf .next && rm -rf node_modules && rm -rf dist && rm -rf build",
"check:lint": "oxlint --max-warnings=758 .",
"check:lint": "oxlint --max-warnings=759 .",
"check:types": "react-router typegen && tsc --noEmit",
"check:format": "oxfmt --check .",
"fix:lint": "oxlint --fix .",
Expand All @@ -31,7 +31,6 @@
"@plane/ui": "workspace:*",
"@plane/utils": "workspace:*",
"@react-router/node": "catalog:",
"@sentry/react-router": "catalog:",
"@tanstack/react-virtual": "^3.13.12",
"@tanstack/virtual-core": "^3.13.12",
"axios": "catalog:",
Expand Down
2 changes: 1 addition & 1 deletion apps/live/Dockerfile.live
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ RUN apk update
RUN apk add --no-cache libc6-compat
# Set working directory
WORKDIR /app
ARG TURBO_VERSION=2.6.3
ARG TURBO_VERSION=2.8.12
RUN corepack enable pnpm && pnpm add -g turbo@${TURBO_VERSION}
COPY . .
RUN turbo prune --scope=live --docker
Expand Down
2 changes: 0 additions & 2 deletions apps/live/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,8 +42,6 @@
"@plane/types": "workspace:*",
"@react-pdf/renderer": "^4.3.0",
"@react-pdf/types": "^2.9.2",
"@sentry/node": "catalog:",
"@sentry/profiling-node": "catalog:",
"@tiptap/core": "catalog:",
"@tiptap/html": "catalog:",
"axios": "catalog:",
Expand Down
21 changes: 0 additions & 21 deletions apps/live/src/instrument.ts
View file
Open in desktop

This file was deleted.

3 changes: 0 additions & 3 deletions apps/live/src/start.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,9 +4,6 @@
* See the LICENSE file for details.
*/

import { setupSentry } from "./instrument";
setupSentry();

import { logger } from "@plane/logger";
import { AppError } from "@/lib/errors";
import { Server } from "./server";
Expand Down
2 changes: 1 addition & 1 deletion apps/space/Dockerfile.space
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ RUN corepack enable pnpm

FROM base AS builder

RUN pnpm add -g turbo@2.6.3
RUN pnpm add -g turbo@2.8.12

COPY . .

Expand Down
21 changes: 0 additions & 21 deletions apps/space/app/entry.client.tsx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,31 +4,10 @@
* See the LICENSE file for details.
*/

import * as Sentry from "@sentry/react-router";
import { startTransition, StrictMode } from "react";
import { hydrateRoot } from "react-dom/client";
import { HydratedRouter } from "react-router/dom";

Sentry.init({
dsn: process.env.VITE_SENTRY_DSN,
environment: process.env.VITE_SENTRY_ENVIRONMENT,
sendDefaultPii: process.env.VITE_SENTRY_SEND_DEFAULT_PII ? process.env.VITE_SENTRY_SEND_DEFAULT_PII === "1" : false,
release: process.env.VITE_APP_VERSION,
tracesSampleRate: process.env.VITE_SENTRY_TRACES_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_TRACES_SAMPLE_RATE)
: 0.1,
profilesSampleRate: process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE)
: 0.1,
replaysSessionSampleRate: process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE)
: 0.1,
replaysOnErrorSampleRate: process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE)
: 1.0,
integrations: [],
});

startTransition(() => {
hydrateRoot(
document,
Expand Down
5 changes: 0 additions & 5 deletions apps/space/app/root.tsx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,6 @@
* See the LICENSE file for details.
*/

import * as Sentry from "@sentry/react-router";
import { Links, Meta, Outlet, Scripts } from "react-router";
// assets
import appleTouchIcon from "@/app/assets/favicon/apple-touch-icon.png?url";
Expand Down Expand Up @@ -97,9 +96,5 @@ export function HydrateFallback() {
}

export function ErrorBoundary({ error }: Route.ErrorBoundaryProps) {
if (error) {
Sentry.captureException(error);
}

return <ErrorPage />;
}
3 changes: 1 addition & 2 deletions apps/space/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
"preview": "react-router build && PORT=3002 react-router-serve ./build/server/index.js",
"start": "PORT=3002 react-router-serve ./build/server/index.js",
"clean": "rm -rf .turbo && rm -rf .next && rm -rf .react-router && rm -rf node_modules && rm -rf dist && rm -rf build",
"check:lint": "oxlint --max-warnings=675 .",
"check:lint": "oxlint --max-warnings=676 .",
Copy link
Contributor

@coderabbitai coderabbitai bot Mar 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Avoid raising lint-warning budget to absorb new warnings

Bumping --max-warnings from 675 to 676 weakens the lint gate and can hide a regression. Please keep the previous threshold and fix the newly introduced warning instead.

Suggested change 
-    "check:lint": "oxlint --max-warnings=676 .",
+    "check:lint": "oxlint --max-warnings=675 .",
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
"check:lint": "oxlint --max-warnings=676 .",
"check:lint": "oxlint --max-warnings=675 .",
🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@apps/space/package.json` at line 13, The lint script's threshold was
increased in the "check:lint" npm script (the "check:lint" entry in
package.json) which weakens the lint gate; revert the "--max-warnings=676"
change back to the original "--max-warnings=675" in the "check:lint" script and
then locate and fix the newly introduced lint warning(s) reported by oxlint (run
the restored script locally to see the failing rule and amend the code to
satisfy the linter instead of raising the threshold).

"check:types": "react-router typegen && tsc --noEmit",
"check:format": "oxfmt --check .",
"fix:lint": "oxlint --fix .",
Expand All @@ -33,7 +33,6 @@
"@popperjs/core": "^2.11.8",
"@react-router/node": "catalog:",
"@react-router/serve": "catalog:",
"@sentry/react-router": "catalog:",
"axios": "catalog:",
"clsx": "^2.0.0",
"date-fns": "^4.1.0",
Expand Down
2 changes: 1 addition & 1 deletion apps/web/Dockerfile.web
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ RUN apk add --no-cache libc6-compat
# Set working directory
WORKDIR /app

ARG TURBO_VERSION=2.6.3
ARG TURBO_VERSION=2.8.12
RUN corepack enable pnpm && pnpm add -g turbo@${TURBO_VERSION}
COPY . .

Expand Down
21 changes: 0 additions & 21 deletions apps/web/app/entry.client.tsx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,31 +4,10 @@
* See the LICENSE file for details.
*/

import * as Sentry from "@sentry/react-router";
import { startTransition, StrictMode } from "react";
import { hydrateRoot } from "react-dom/client";
import { HydratedRouter } from "react-router/dom";

Sentry.init({
dsn: process.env.VITE_SENTRY_DSN,
environment: process.env.VITE_SENTRY_ENVIRONMENT,
sendDefaultPii: process.env.VITE_SENTRY_SEND_DEFAULT_PII ? process.env.VITE_SENTRY_SEND_DEFAULT_PII === "1" : false,
release: process.env.VITE_APP_VERSION,
tracesSampleRate: process.env.VITE_SENTRY_TRACES_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_TRACES_SAMPLE_RATE)
: 0.1,
profilesSampleRate: process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_PROFILES_SAMPLE_RATE)
: 0.1,
replaysSessionSampleRate: process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_REPLAYS_SESSION_SAMPLE_RATE)
: 0.1,
replaysOnErrorSampleRate: process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE
? parseFloat(process.env.VITE_SENTRY_REPLAYS_ON_ERROR_SAMPLE_RATE)
: 1.0,
integrations: [],
});

startTransition(() => {
hydrateRoot(
document,
Expand Down
5 changes: 0 additions & 5 deletions apps/web/app/root.tsx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,6 @@
*/

import type { ReactNode } from "react";
import * as Sentry from "@sentry/react-router";
import Script from "next/script";
import { Links, Meta, Outlet, Scripts } from "react-router";
import type { LinksFunction } from "react-router";
Expand Down Expand Up @@ -147,9 +146,5 @@ export function HydrateFallback() {
}

export function ErrorBoundary({ error }: Route.ErrorBoundaryProps) {
if (error) {
Sentry.captureException(error);
}

return <CustomErrorComponent error={error} />;
}
1 change: 0 additions & 1 deletion apps/web/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,6 @@
"@popperjs/core": "^2.11.8",
"@react-pdf/renderer": "^3.4.5",
"@react-router/node": "catalog:",
"@sentry/react-router": "catalog:",
"@tanstack/react-table": "^8.21.3",
"axios": "catalog:",
"clsx": "^2.0.0",
Expand Down
26 changes: 16 additions & 10 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,10 @@
{
"name": "plane",
"description": "Open-source project management that unlocks customer value",
"repository": "https://github.com/makeplane/plane.git",
"version": "1.2.0",
"license": "AGPL-3.0",
"private": true,
"description": "Open-source project management that unlocks customer value",
"license": "AGPL-3.0",
"repository": "https://github.com/makeplane/plane.git",
"scripts": {
"build": "turbo run build",
"dev": "turbo run dev --concurrency=18",
Expand All @@ -24,7 +24,7 @@
"lint-staged": "16.2.7",
"oxfmt": "0.35.0",
"oxlint": "1.51.0",
"turbo": "2.6.3"
"turbo": "2.8.12"
},
"lint-staged": {
"*.{js,jsx,ts,tsx,cjs,mjs,cts,mts,json,css,md}": [
Expand All @@ -34,6 +34,10 @@
"pnpm exec oxlint --fix --deny-warnings"
]
},
"engines": {
"node": ">=22.18.0"
},
"packageManager": "pnpm@10.30.2+sha512.36cdc707e7b7940a988c9c1ecf88d084f8514b5c3f085f53a2e244c2921d3b2545bc20dd4ebe1fc245feec463bb298aecea7a63ed1f7680b877dc6379d8d0cb4",
"pnpm": {
"overrides": {
"express": "catalog:",
Expand All @@ -58,18 +62,20 @@
"webpack": "5.104.1",
"lodash-es": "catalog:",
"@isaacs/brace-expansion": "5.0.1",
"lodash": "4.17.23"
"lodash": "4.17.23",
"markdown-it": "14.1.1",
"rollup": "4.59.0",
"minimatch@3": "3.1.4",
"minimatch@10": "10.2.3",
"serialize-javascript": "7.0.3",
"ajv@6": "6.14.0",
"ajv@8": "8.18.0"
},
"onlyBuiltDependencies": [
"@sentry/cli",
"turbo"
],
"ignoredBuiltDependencies": [
"sharp"
]
},
"packageManager": "pnpm@10.24.0+sha512.01ff8ae71b4419903b65c60fb2dc9d34cf8bb6e06d03bde112ef38f7a34d6904c424ba66bea5cdcf12890230bf39f9580473140ed9c946fef328b6e5238a345a",
"engines": {
"node": ">=22.18.0"
}
}
2 changes: 1 addition & 1 deletion packages/propel/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -89,7 +89,7 @@
"@storybook/react-vite": "9.1.10",
"@types/react": "catalog:",
"@types/react-dom": "catalog:",
"storybook": "9.1.17",
"storybook": "9.1.19",
"tsdown": "catalog:",
"typescript": "catalog:"
}
Expand Down
2 changes: 1 addition & 1 deletion packages/ui/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -73,7 +73,7 @@
"autoprefixer": "^10.4.19",
"postcss-cli": "^11.0.0",
"postcss-nested": "^6.0.1",
"storybook": "9.1.17",
"storybook": "9.1.19",
"tsdown": "catalog:",
"typescript": "catalog:"
},
Expand Down
Loading
Loading