chore(deps): Phase 2 majors — nodemailer, archiver, pino, lint-staged

Browse Source

Bumped within-major-jump deps where API surface didn't change:
- nodemailer 6.10.1 → 8.0.7 (closes 1 high DoS in addressparser, 1 mod
  SMTP injection via CRLF in EHLO/HELO transport name, 1 low SMTP
  injection via envelope.size)
- @types/nodemailer 6.4.23 → 8.0.0 (matches runtime)
- archiver 7.0.1 → 8.0.0 (zip lib; no API breaks for our usage)
- pino 9.14.0 → 10.3.1 (logger; same API)
- eslint-config-prettier 9.1.2 → 10.1.8 (eslint v9 compat)
- lint-staged 15.5.2 → 17.0.3 (no config changes needed)

Skipped this batch (defer to a focused PR):
- @hookform/resolvers 3 → 5: changed Resolver<T> typing, broke
  type-checks in interest-form, yacht-form, expense-form. Needs a
  per-form migration to align useForm generics. Reverted to 3.10.0.

Tests: 1185/1185 vitest passing. Type-check clean.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

...

This commit is contained in:

Matt

2026-05-08 16:37:55 +02:00

parent e2b5898efc

commit fdb5beb81a

2 changed files with 94 additions and 406 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

486

pnpm-lock.yaml generated

File diff suppressed because it is too large Load Diff