Resolve dependency advisories in lockfiles

[0thernet]

Summary

• Org-wide dependency-audit sweep: bumps, overrides, and surgical lockfile rewrites that clear flagged advisories without re-resolving private or GitHub dependencies.
• apps/web/bun.lock: satori -> 0.35.0 (imports fflate 0.7.3)
• apps/web/bun.lock: @shuding/opentype.js/fflate -> 0.7.5 (re-resolved in range)
• bun.lock: ajv 8.17.1 -> 8.20.0 (direct)
• bun.lock: brace-expansion -> 1.1.21 (re-resolved in range)
• bun.lock: @typescript-eslint/typescript-estree/minimatch/brace-expansion -> 5.0.12 (re-resolved in range)
• bun.lock: dompurify -> 3.4.16 (re-resolved in range)
• bun.lock: fast-uri -> 3.1.8 (re-resolved in range)
• bun.lock: @shuding/opentype.js/fflate -> 0.7.5 (re-resolved in range)
• bun.lock: js-yaml -> 4.3.2 (re-resolved in range)
• bun.lock: @ai-sdk/provider-utils/undici -> 7.29.1 (re-resolved in range)
• bun.lock: @tiptap/core -> 3.31.4 (forced; importer ranges exceeded)

Remaining advisories

• ajv -> 8.20.0 blocked by @eslint/eslintrc requires ^6.14.0; eslint requires ^6.14.0
• fflate -> 0.7.5 blocked by posthog-js requires ^0.4.8
• undici -> 7.29.1 blocked by @vercel/blob requires ^6.23.0

Generated with Devin

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
slopcamera	Ready	Preview	Oct 5, 2026 3:31am UTC
slopcamera-api	Ready	Preview	Oct 5, 2026 3:31am UTC