chore(deps): minor/patch dependency upgrades (v3.3.2)

CHANGELOG.md

@@ -2,6 +2,11 @@
 
 ## Unreleased
 
+## v3.3.2
+
+### Changed
+- Bump minor/patch dependencies and resolve OSV advisories for next, sharp, and source-map-js
+
 ## v3.3.1
 
 ### Changed

osv-scanner.toml

@@ -1,34 +1,2 @@
 # OSV-Scanner configuration
 # https://google.github.io/osv-scanner/configuration/
-
-[[IgnoredVulns]]
-id = "GHSA-39w2-rjm5-chcv"
-reason = "Next.js dev-server MCP endpoint info disclosure; dev-only, pending patch qualification."
-
-[[IgnoredVulns]]
-id = "GHSA-3w37-wq28-93x7"
-reason = "Next.js 16.3.6 advisory pending patch qualification."
-
-[[IgnoredVulns]]
-id = "GHSA-4jqv-mc3x-m676"
-reason = "Next.js 16.3.6 advisory pending patch qualification."
-
-[[IgnoredVulns]]
-id = "GHSA-cjq9-62q9-8jv4"
-reason = "Next.js 16.3.6 advisory pending patch qualification."
-
-[[IgnoredVulns]]
-id = "GHSA-f87g-xv8r-7p7x"
-reason = "Next.js 16.3.6 advisory pending patch qualification."
-
-[[IgnoredVulns]]
-id = "GHSA-mcj8-r9mp-w47p"
-reason = "Next.js 16.3.6 advisory pending patch qualification."
-
-[[IgnoredVulns]]
-id = "GHSA-wq5f-xc86-pv6w"
-reason = "sharp 0.35.4 advisory pending patch qualification."
-
-[[IgnoredVulns]]
-id = "GHSA-68fv-2mgg-jv7q"
-reason = "source-map-js 1.2.1 advisory pending patch qualification."

package.json

@@ -1,6 +1,6 @@
 {
   "name": "pew-monorepo",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "private": true,
   "workspaces": [
     "packages/*"
@@ -28,15 +28,15 @@
     "prepare": "husky"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.5.14",
-    "@playwright/test": "1.63.0",
-    "@types/bun": "1.4.2",
-    "@vitest/coverage-v8": "5.0.1",
+    "@biomejs/biome": "2.5.15",
+    "@playwright/test": "1.64.0",
+    "@types/bun": "1.4.3",
+    "@vitest/coverage-v8": "5.0.4",
     "husky": "^9.1.7",
-    "lint-staged": "17.5.1",
-    "oxc-parser": "0.151.0",
+    "lint-staged": "17.6.0",
+    "oxc-parser": "0.153.0",
     "typescript": "^7.0.2",
-    "vitest": "5.0.1"
+    "vitest": "5.0.4"
   },
   "overrides": {
     "brace-expansion@^2": "2.0.3",
@@ -52,7 +52,8 @@
     "baseline-browser-mapping": "^2.11.0",
     "picomatch": "^4.0.7",
     "postcss": "^8.5.26",
-    "sharp": "^0.35.4",
+    "source-map-js": "^1.2.2",
+    "sharp": "^0.35.5",
     "undici": "7.29.1",
     "yaml": "^2.8.3"
   }

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nocoo/pew",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "description": "The contribution graph for AI-native developers",
   "type": "module",
   "bin": {
@@ -44,6 +44,6 @@
   },
   "devDependencies": {
     "@pew/core": "workspace:*",
-    "@types/node": "26.6.2"
+    "@types/node": "26.6.5"
   }
 }

packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pew/core",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "private": true,
   "type": "module",
   "main": "./dist/index.js",
@@ -13,6 +13,6 @@
   },
   "files": ["dist"],
   "devDependencies": {
-    "@types/node": "26.6.2"
+    "@types/node": "26.6.5"
   }
 }

packages/web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pew/web",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "private": true,
   "scripts": {
     "dev": "next dev --port 7020",
@@ -9,25 +9,25 @@
     "typecheck": "next typegen && tsc --noEmit"
   },
   "dependencies": {
-    "@aws-sdk/client-s3": "3.1139.0",
+    "@aws-sdk/client-s3": "3.1150.0",
     "@nocoo/basalt": "2.2.0",
     "clsx": "^2.1.1",
-    "lucide-react": "1.48.0",
-    "nanoid": "6.0.1",
-    "next": "16.3.8",
+    "lucide-react": "1.55.0",
+    "nanoid": "6.0.2",
+    "next": "16.4.0",
     "next-auth": "^5.0.0-beta.32",
     "react": "^19.3.0",
     "react-dom": "^19.3.0",
     "recharts": "^3.10.1",
-    "sharp": "^0.35.4",
+    "sharp": "^0.35.5",
     "swr": "2.5.1",
     "tailwind-merge": "^3.7.0",
     "tw-animate-css": "^1.4.0"
   },
   "devDependencies": {
     "@pew/core": "workspace:*",
     "@tailwindcss/postcss": "^4.3.3",
-    "@types/node": "26.6.2",
+    "@types/node": "26.6.5",
     "@types/react": "^19.3.0",
     "@types/react-dom": "^19.3.0",
     "@typescript/native-preview": "7.0.0-dev.20260707.2",

packages/worker-read/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@pew/worker-read",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "private": true,
   "scripts": {
     "dev": "wrangler dev",
     "deploy": "wrangler deploy",
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "5.20260924.1",
+    "@cloudflare/workers-types": "5.20261012.1",
     "@pew/core": "workspace:*",
-    "wrangler": "4.138.0"
+    "wrangler": "4.149.0"
   }
 }

packages/worker-read/src/index.ts

@@ -36,7 +36,7 @@ import { syncDynamicPricing } from "./sync/orchestrator";
 // Version
 // ---------------------------------------------------------------------------
 
-export const WORKER_VERSION = "3.3.1";
+export const WORKER_VERSION = "3.3.2";
 
 // ---------------------------------------------------------------------------
 // Boot timestamp (for uptime calculation)

packages/worker/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@pew/worker",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "private": true,
   "scripts": {
     "dev": "wrangler dev",
     "deploy": "wrangler deploy",
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "5.20260924.1",
+    "@cloudflare/workers-types": "5.20261012.1",
     "@pew/core": "workspace:*",
-    "wrangler": "4.138.0"
+    "wrangler": "4.149.0"
   }
 }

packages/worker/src/index.ts

@@ -51,7 +51,7 @@ export type { IngestRecord, IngestRequest, SessionIngestRecord, SessionIngestReq
 // Version (kept in sync with package.json during version bumps)
 // ---------------------------------------------------------------------------
 
-export const WORKER_VERSION = "3.3.1";
+export const WORKER_VERSION = "3.3.2";
 
 // ---------------------------------------------------------------------------
 // Boot timestamp (for uptime calculation)