Matt fdb5beb81a chore(deps): Phase 2 majors — nodemailer, archiver, pino, lint-staged ...

Bumped within-major-jump deps where API surface didn't change:
- nodemailer 6.10.1 → 8.0.7 (closes 1 high DoS in addressparser, 1 mod
  SMTP injection via CRLF in EHLO/HELO transport name, 1 low SMTP
  injection via envelope.size)
- @types/nodemailer 6.4.23 → 8.0.0 (matches runtime)
- archiver 7.0.1 → 8.0.0 (zip lib; no API breaks for our usage)
- pino 9.14.0 → 10.3.1 (logger; same API)
- eslint-config-prettier 9.1.2 → 10.1.8 (eslint v9 compat)
- lint-staged 15.5.2 → 17.0.3 (no config changes needed)

Skipped this batch (defer to a focused PR):
- @hookform/resolvers 3 → 5: changed Resolver<T> typing, broke
  type-checks in interest-form, yacht-form, expense-form. Needs a
  per-form migration to align useForm generics. Reverted to 3.10.0.

Tests: 1185/1185 vitest passing. Type-check clean.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-08 16:37:55 +02:00

4.5 KiB

Raw Blame History

View Raw