Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
54 changes: 54 additions & 0 deletions maintenance/2026-04-07.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,54 @@

# Maintenance

## Reasons of pending

## Logs

### Before
```js
yarn outdated v1.22.22
info Color legend :
"<red>" : Major Update backward-incompatible updates
"<yellow>" : Minor Update backward-compatible features
"<green>" : Patch Update backward-compatible bug fixes
Package Current Wanted Latest Workspace Package Type URL
@rollup/plugin-typescript 12.1.4 12.3.0 12.3.0 @techteamer/timestamp devDependencies https://github.com/rollup/plugins/tree/master/packages/typescript/#readme
@techteamer/cert-utils 1.1.3 1.1.3 2.0.0 @techteamer/timestamp dependencies https://github.com/TechTeamer/cert_utils#readme
@techteamer/timestamp 2.0.1 exotic exotic cjs dependencies file:package/timestamp_service
@techteamer/timestamp 2.0.1 exotic exotic mjs dependencies file:package/timestamp_service
@types/node 20.19.17 20.19.39 25.5.2 @techteamer/timestamp devDependencies https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node
@typescript-eslint/eslint-plugin 7.18.0 7.18.0 8.58.0 @techteamer/timestamp devDependencies https://typescript-eslint.io/packages/eslint-plugin
@typescript-eslint/parser 7.18.0 7.18.0 8.58.0 @techteamer/timestamp devDependencies https://typescript-eslint.io/packages/parser
@vitest/coverage-v8 2.1.9 2.1.9 4.1.2 @techteamer/timestamp devDependencies https://vitest.dev/guide/coverage
eslint 8.57.1 8.57.1 10.2.0 @techteamer/timestamp devDependencies https://eslint.org
nock 13.5.6 13.5.6 14.0.12 @techteamer/timestamp devDependencies https://github.com/nock/nock#readme
prettier 3.6.2 3.8.1 3.8.1 @techteamer/timestamp devDependencies https://prettier.io
proxy-agent 6.5.0 6.5.0 8.0.1 @techteamer/timestamp dependencies https://github.com/TooTallNate/proxy-agents#readme
rollup 4.52.0 4.60.1 4.60.1 @techteamer/timestamp devDependencies https://rollupjs.org/
typescript 5.5.4 5.5.4 6.0.2 @techteamer/timestamp devDependencies https://www.typescriptlang.org/
vitest 2.1.9 2.1.9 4.1.2 @techteamer/timestamp devDependencies https://vitest.dev
Done in 1.54s.
```
### After
```js
yarn outdated v1.22.22
info Color legend :
"<red>" : Major Update backward-incompatible updates
"<yellow>" : Minor Update backward-compatible features
"<green>" : Patch Update backward-compatible bug fixes
Package Current Wanted Latest Workspace Package Type URL
@techteamer/cert-utils 1.1.3 1.1.3 2.0.0 @techteamer/timestamp dependencies https://github.com/TechTeamer/cert_utils#readme
@techteamer/timestamp 2.0.2 exotic exotic cjs dependencies file:package/timestamp_service
@techteamer/timestamp 2.0.2 exotic exotic mjs dependencies file:package/timestamp_service
@types/node 20.19.39 20.19.39 25.5.2 @techteamer/timestamp devDependencies https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node
@typescript-eslint/eslint-plugin 7.18.0 7.18.0 8.58.0 @techteamer/timestamp devDependencies https://typescript-eslint.io/packages/eslint-plugin
@typescript-eslint/parser 7.18.0 7.18.0 8.58.0 @techteamer/timestamp devDependencies https://typescript-eslint.io/packages/parser
@vitest/coverage-v8 2.1.9 2.1.9 4.1.2 @techteamer/timestamp devDependencies https://vitest.dev/guide/coverage
eslint 8.57.1 8.57.1 10.2.0 @techteamer/timestamp devDependencies https://eslint.org
nock 13.5.6 13.5.6 14.0.12 @techteamer/timestamp devDependencies https://github.com/nock/nock#readme
proxy-agent 6.5.0 6.5.0 8.0.1 @techteamer/timestamp dependencies https://github.com/TooTallNate/proxy-agents#readme
typescript 5.5.4 5.5.4 6.0.2 @techteamer/timestamp devDependencies https://www.typescriptlang.org/
vitest 2.1.9 2.1.9 4.1.2 @techteamer/timestamp devDependencies https://vitest.dev
Done in 1.51s.
```
108 changes: 108 additions & 0 deletions security/2026-04-07.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,108 @@

# Security

## Reasons of pending

## Logs

### Before
```js
yarn audit v1.22.22
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate │ bn.js affected by an infinite loop │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ bn.js │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=4.12.3 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @techteamer/timestamp │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @techteamer/timestamp > @techteamer/cert-utils > │
│ │ @techteamer/ocsp > asn1.js > bn.js │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1113442 │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate │ bn.js affected by an infinite loop │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ bn.js │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=4.12.3 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ cjs │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ cjs > @techteamer/timestamp > @techteamer/cert-utils > │
│ │ @techteamer/ocsp > asn1.js > bn.js │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1113442 │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate │ bn.js affected by an infinite loop │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ bn.js │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=4.12.3 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @techteamer/timestamp │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @techteamer/timestamp > @techteamer/cert-utils > │
│ │ @techteamer/ocsp > asn1.js-rfc2560 > asn1.js-rfc5280 > │
│ │ asn1.js > bn.js │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1113442 │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate │ bn.js affected by an infinite loop │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ bn.js │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=4.12.3 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ cjs │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ cjs > @techteamer/timestamp > @techteamer/cert-utils > │
│ │ @techteamer/ocsp > asn1.js-rfc2560 > asn1.js-rfc5280 > │
│ │ asn1.js > bn.js │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1113442 │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ critical │ Basic FTP has Path Traversal Vulnerability in its │
│ │ downloadToDir() method │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ basic-ftp │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.2.0 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @techteamer/timestamp │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @techteamer/timestamp > proxy-agent > pac-proxy-agent > │
│ │ get-uri > basic-ftp │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1113518 │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ critical │ Basic FTP has Path Traversal Vulnerability in its │
│ │ downloadToDir() method │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ basic-ftp │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=5.2.0 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ cjs │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ cjs > @techteamer/timestamp > proxy-agent > pac-proxy-agent │
│ │ > get-uri > basic-ftp │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1113518 │
└───────────────┴──────────────────────────────────────────────────────────────┘
6 vulnerabilities found - Packages audited: 85
Severity: 4 Moderate | 2 Critical
Done in 0.55s.
```
### After
```js
yarn audit v1.22.22
0 vulnerabilities found - Packages audited: 86
Done in 0.45s.
```
Loading
Loading