From 82fb585091cf22b6392ca7bfced97f06168c717c Mon Sep 17 00:00:00 2001 From: "claude[bot]" Date: Wed, 2 Sep 2026 12:29:11 +0000 Subject: [PATCH 1/3] chore: upgrade browserslist to ^4.28.8 to address CVE-2026-73088, CVE-2026-73089 Refreshes the stale yarn.lock entry for browserslist. The existing ^4.24.0 range already admitted the patched 4.28.7+ releases. Co-Authored-By: Claude Opus 5 (1M context) --- yarn.lock | 59 +++++++++++++++++++++++++++++++++++-------------------- 1 file changed, 38 insertions(+), 21 deletions(-) diff --git a/yarn.lock b/yarn.lock index a063c833f..d86d8debd 100644 --- a/yarn.lock +++ b/yarn.lock @@ -11329,6 +11329,15 @@ __metadata: languageName: node linkType: hard +"baseline-browser-mapping@npm:^2.11.12": + version: 2.11.20 + resolution: "baseline-browser-mapping@npm:2.11.20" + bin: + baseline-browser-mapping: dist/cli.cjs + checksum: 10c0/67588b7edafa4e6c52996ec4b96b6e007312961cefc5a179cb49232f6681a38ba68d4d43990081e9d0e1dcadcbd28f13105ee7dc3e43b267385d0beb14824ecc + languageName: node + linkType: hard + "baseline-browser-mapping@npm:^2.9.19": version: 2.10.13 resolution: "baseline-browser-mapping@npm:2.10.13" @@ -11507,16 +11516,17 @@ __metadata: linkType: hard "browserslist@npm:^4.24.0": - version: 4.24.4 - resolution: "browserslist@npm:4.24.4" - dependencies: - caniuse-lite: "npm:^1.0.30001688" - electron-to-chromium: "npm:^1.5.73" - node-releases: "npm:^2.0.19" - update-browserslist-db: "npm:^1.1.1" + version: 4.28.8 + resolution: "browserslist@npm:4.28.8" + dependencies: + baseline-browser-mapping: "npm:^2.11.12" + caniuse-lite: "npm:^1.0.30001809" + electron-to-chromium: "npm:^1.5.402" + node-releases: "npm:^2.0.53" + update-browserslist-db: "npm:^1.3.0" bin: browserslist: cli.js - checksum: 10c0/db7ebc1733cf471e0b490b4f47e3e2ea2947ce417192c9246644e92c667dd56a71406cc58f62ca7587caf828364892e9952904a02b7aead752bc65b62a37cfe9 + checksum: 10c0/047dd517c8d1f1f56a253d752c3127b8ad01c58e4cbb7e21cb5cd07ebd13e083a2237c3afb13eb60674282c9132bd4534aea2c3ff7c6f7d29be0687a00cbd537 languageName: node linkType: hard @@ -11626,13 +11636,20 @@ __metadata: languageName: node linkType: hard -"caniuse-lite@npm:^1.0.30001579, caniuse-lite@npm:^1.0.30001688": +"caniuse-lite@npm:^1.0.30001579": version: 1.0.30001707 resolution: "caniuse-lite@npm:1.0.30001707" checksum: 10c0/a1beaf84bad4f6617bbc5616d6bc0c9cab73e73f7e9e09b6466af5195b1bc393e0f6f19643d7a1c88bd3f4bfa122d7bea81cf6225ec3ade57d5b1dd3478c1a1b languageName: node linkType: hard +"caniuse-lite@npm:^1.0.30001809": + version: 1.0.30001810 + resolution: "caniuse-lite@npm:1.0.30001810" + checksum: 10c0/d29bc73f33c888025d54c7ff2984372d3b350b15a6a9e174884fb40976175e9177f202e2a72c2d428dddfc032784bc8ba635a31d168fcab9fac65756d7b3d6b4 + languageName: node + linkType: hard + "canvas-confetti@npm:^1.9.4": version: 1.9.4 resolution: "canvas-confetti@npm:1.9.4" @@ -13423,10 +13440,10 @@ __metadata: languageName: node linkType: hard -"electron-to-chromium@npm:^1.5.73": - version: 1.5.123 - resolution: "electron-to-chromium@npm:1.5.123" - checksum: 10c0/ffaa65e9337f5ba0b51d5709795c3d1074e0cae8efda24116561feed6cedd281f523be50339d991c2fc65344e66e65e7308a157ff87047a8bb4e8008412e9eb1 +"electron-to-chromium@npm:^1.5.402": + version: 1.5.420 + resolution: "electron-to-chromium@npm:1.5.420" + checksum: 10c0/0c4a4932991cefc9aa655cbb00b3b693680709df9e4eb2fc1a51cab851b735a2be9510c345b5ed6cad571e58e6d27867731607741df82de9535a7eb041fceda2 languageName: node linkType: hard @@ -18526,10 +18543,10 @@ __metadata: languageName: node linkType: hard -"node-releases@npm:^2.0.19": - version: 2.0.19 - resolution: "node-releases@npm:2.0.19" - checksum: 10c0/52a0dbd25ccf545892670d1551690fe0facb6a471e15f2cfa1b20142a5b255b3aa254af5f59d6ecb69c2bec7390bc643c43aa63b13bf5e64b6075952e716b1aa +"node-releases@npm:^2.0.53": + version: 2.0.54 + resolution: "node-releases@npm:2.0.54" + checksum: 10c0/196b54ab06fd03b742816b6ca8185c69af42735b283083036e2579682c430b8f9ff89046891fe8c625557e5885793a2032d28070100bb2e57e6d6586b2f483c1 languageName: node linkType: hard @@ -23073,9 +23090,9 @@ __metadata: languageName: node linkType: hard -"update-browserslist-db@npm:^1.1.1": - version: 1.1.3 - resolution: "update-browserslist-db@npm:1.1.3" +"update-browserslist-db@npm:^1.3.0": + version: 1.3.2 + resolution: "update-browserslist-db@npm:1.3.2" dependencies: escalade: "npm:^3.2.0" picocolors: "npm:^1.1.1" @@ -23083,7 +23100,7 @@ __metadata: browserslist: ">= 4.21.0" bin: update-browserslist-db: cli.js - checksum: 10c0/682e8ecbf9de474a626f6462aa85927936cdd256fe584c6df2508b0df9f7362c44c957e9970df55dfe44d3623807d26316ea2c7d26b80bb76a16c56c37233c32 + checksum: 10c0/837b4ea8c4934228c5c2a922ea747a54b0ec9d1c408d2fbc9220a9b98327c04109776e6ea1206fa056ea61ed8534863af472d9f2cfce569d35f04e98c95db739 languageName: node linkType: hard From d85441ee8b52fd18b6b7f7099ba57208b6124289 Mon Sep 17 00:00:00 2001 From: "claude[bot]" Date: Wed, 2 Sep 2026 12:29:39 +0000 Subject: [PATCH 2/3] chore: add CHANGELOG entry for browserslist upgrade Co-Authored-By: Claude Opus 5 (1M context) --- CHANGELOG.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1f20fd50c..62c52fc2d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,6 +10,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Added - Added a live repository indexing job runtime to the syncing badge. [#1623](https://github.com/sourcebot-dev/sourcebot/pull/1623) +### Fixed +- Upgraded `browserslist` to `^4.28.8`. [#1624](https://github.com/sourcebot-dev/sourcebot/pull/1624) + ## [5.1.10] - 2026-08-27 ### Fixed From 262a3d58e6be39a5a0bd9bcb9efc8f2f43cc0b34 Mon Sep 17 00:00:00 2001 From: Jack Minnetian <270441393+BlueBottleLatte@users.noreply.github.com> Date: Thu, 3 Sep 2026 20:34:54 -0700 Subject: [PATCH 3/3] chore: dedupe caniuse-lite --- yarn.lock | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-) diff --git a/yarn.lock b/yarn.lock index d86d8debd..72e868b30 100644 --- a/yarn.lock +++ b/yarn.lock @@ -11636,14 +11636,7 @@ __metadata: languageName: node linkType: hard -"caniuse-lite@npm:^1.0.30001579": - version: 1.0.30001707 - resolution: "caniuse-lite@npm:1.0.30001707" - checksum: 10c0/a1beaf84bad4f6617bbc5616d6bc0c9cab73e73f7e9e09b6466af5195b1bc393e0f6f19643d7a1c88bd3f4bfa122d7bea81cf6225ec3ade57d5b1dd3478c1a1b - languageName: node - linkType: hard - -"caniuse-lite@npm:^1.0.30001809": +"caniuse-lite@npm:^1.0.30001579, caniuse-lite@npm:^1.0.30001809": version: 1.0.30001810 resolution: "caniuse-lite@npm:1.0.30001810" checksum: 10c0/d29bc73f33c888025d54c7ff2984372d3b350b15a6a9e174884fb40976175e9177f202e2a72c2d428dddfc032784bc8ba635a31d168fcab9fac65756d7b3d6b4