From db766286d7ccaba51ade071a564bc4cf070cba4a Mon Sep 17 00:00:00 2001 From: Marek Dano Date: Mon, 19 Oct 2026 11:51:26 +0100 Subject: [PATCH] chore(deps): apply npm audit fix and fix ForgotPassword rate-limit test Bump shadcn 4.21.4 -> 4.22.1 (with @shadcn/registry 0.2.0), concurrently 10.0.5 -> 10.0.6 and shell-quote 1.9.0 -> 1.12.0 via npm audit fix, and align the lockfile version with package.json (0.2.3). The braces advisory GHSA-vfj7-8cjw-p6xm (7 high-severity findings, all reached transitively through shadcn) has no patched release upstream and is intentionally left as is. Also update the ForgotPassword rate-limit test: since #191 the input uses the shared Field, which omits aria-invalid when there is no field-level error. Assert its absence instead of aria-invalid="false". Signed-off-by: Marek Dano --- package-lock.json | 145 +++++++++--------------------- src/pages/ForgotPassword.test.tsx | 2 +- 2 files changed, 43 insertions(+), 104 deletions(-) diff --git a/package-lock.json b/package-lock.json index c47373fb..6843f09a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "mcp-context-forge-ui", - "version": "0.2.2", + "version": "0.2.3", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "mcp-context-forge-ui", - "version": "0.2.2", + "version": "0.2.3", "dependencies": { "@floating-ui/react-dom": "^2.1.8", "@fontsource-variable/inter": "^5.2.8", @@ -1598,9 +1598,6 @@ "arm64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -1615,9 +1612,6 @@ "arm64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -1632,9 +1626,6 @@ "x64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -1649,9 +1640,6 @@ "x64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -2009,9 +1997,6 @@ "x64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -3979,9 +3964,6 @@ "arm" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -3996,9 +3978,6 @@ "arm" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -4013,9 +3992,6 @@ "arm64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -4030,9 +4006,6 @@ "arm64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -4047,9 +4020,6 @@ "loong64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -4064,9 +4034,6 @@ "loong64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -4081,9 +4048,6 @@ "ppc64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -4098,9 +4062,6 @@ "ppc64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -4115,9 +4076,6 @@ "riscv64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -4132,9 +4090,6 @@ "riscv64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -4149,9 +4104,6 @@ "s390x" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -4166,9 +4118,6 @@ "x64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -4183,9 +4132,6 @@ "x64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -4451,9 +4397,9 @@ "license": "MIT" }, "node_modules/@shadcn/registry": { - "version": "0.1.3", - "resolved": "https://registry.npmjs.org/@shadcn/registry/-/registry-0.1.3.tgz", - "integrity": "sha512-82/OmKAVM9pChDHFVAsDP9PcimPGSKZGdbcdwdGGGcSI69ImpN4ZnqsfZ4hkOFEMal92t3y9djYJHMjO4PcVZA==", + "version": "0.2.0", + "resolved": "https://registry.npmjs.org/@shadcn/registry/-/registry-0.2.0.tgz", + "integrity": "sha512-m3TeqU/+av2kgOLfESHkWzsmhuQuY4NXZd5Y1Rd4lzy4IX3JJ5+k2mYfkq6OT8oMuk2W4GQPAkO7+CC7KlpSbw==", "license": "MIT", "dependencies": { "@babel/core": "^7.28.0", @@ -4477,8 +4423,8 @@ "stringify-object": "^5.0.0", "tsconfig-paths": "^4.2.0", "type-fest": "^4.41.0", - "undici": "^7.29.0", - "zod": "^3.24.1" + "undici": "^7.29.1", + "zod": "^4.2.0" }, "engines": { "node": ">=20.18.1" @@ -4496,6 +4442,15 @@ "url": "https://github.com/sponsors/sindresorhus" } }, + "node_modules/@shadcn/registry/node_modules/zod": { + "version": "4.6.7", + "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.7.tgz", + "integrity": "sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg==", + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/colinhacks" + } + }, "node_modules/@sindresorhus/merge-streams": { "version": "4.0.0", "resolved": "https://registry.npmjs.org/@sindresorhus/merge-streams/-/merge-streams-4.0.0.tgz", @@ -4653,9 +4608,6 @@ "arm64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -4673,9 +4625,6 @@ "arm64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -4693,9 +4642,6 @@ "x64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -4713,9 +4659,6 @@ "x64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -6476,15 +6419,15 @@ "license": "MIT" }, "node_modules/concurrently": { - "version": "10.0.5", - "resolved": "https://registry.npmjs.org/concurrently/-/concurrently-10.0.5.tgz", - "integrity": "sha512-JaP/CoftUrCcAFW/g//RbgEGwlelnEae6cfBLgH6ZdO6s8jPkn6p9SB9u6pdVxYXoiSnFqseOlHfrEfF82TVOg==", + "version": "10.0.6", + "resolved": "https://registry.npmjs.org/concurrently/-/concurrently-10.0.6.tgz", + "integrity": "sha512-qgICXXFp2/3nAebRLmxcINKEXM1mLK3ij/y31P02VTs/KIkddIeC05n73DxOXsXMB9LFSqNU1/na3lDlOhcbIw==", "dev": true, "license": "MIT", "dependencies": { "chalk": "5.6.2", "rxjs": "7.8.2", - "shell-quote": "1.9.0", + "shell-quote": "1.12.0", "supports-color": "10.2.2", "tree-kill": "1.2.2", "yargs": "18.0.0" @@ -9880,9 +9823,6 @@ "arm64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MPL-2.0", "optional": true, "os": [ @@ -9904,9 +9844,6 @@ "arm64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MPL-2.0", "optional": true, "os": [ @@ -9928,9 +9865,6 @@ "x64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MPL-2.0", "optional": true, "os": [ @@ -9952,9 +9886,6 @@ "x64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MPL-2.0", "optional": true, "os": [ @@ -12348,9 +12279,9 @@ "license": "ISC" }, "node_modules/shadcn": { - "version": "4.21.4", - "resolved": "https://registry.npmjs.org/shadcn/-/shadcn-4.21.4.tgz", - "integrity": "sha512-YYfn/hsHbRH2mGwnKBx9tk+DjTQH+RUMS5iCxjKzwzuJ5uoHPqLOFUCJSeX0sXfrcBSfgQaXiOLGKNLjlIQxxw==", + "version": "4.22.1", + "resolved": "https://registry.npmjs.org/shadcn/-/shadcn-4.22.1.tgz", + "integrity": "sha512-LbB4Lro+b0qSVki/tgL5edtKylEnXe1ppxMJC12d7NHPgaT+eSgJGMQULwP72V7X9tbiUq7xfx3VDAfB7jdGoA==", "license": "MIT", "dependencies": { "@babel/core": "^7.28.0", @@ -12358,10 +12289,10 @@ "@babel/plugin-transform-typescript": "^7.28.0", "@babel/preset-typescript": "^7.27.1", "@dotenvx/dotenvx": "^1.48.4", - "@modelcontextprotocol/sdk": "^1.26.0", - "@shadcn/registry": "0.1.3", + "@modelcontextprotocol/sdk": "^1.32.0", + "@shadcn/registry": "0.2.0", "@types/validate-npm-package-name": "^4.0.2", - "browserslist": "^4.26.2", + "browserslist": "^4.29.3", "cn": "^0.2.4", "commander": "^14.0.0", "dedent": "^1.6.0", @@ -12372,20 +12303,19 @@ "fs-extra": "^11.3.1", "fuzzysort": "^3.1.0", "kleur": "^4.1.5", - "open": "^11.0.0", + "open": "^11.0.4", "ora": "^8.2.0", "postcss": "^8.5.23", - "postcss-selector-parser": "^7.1.3", + "postcss-selector-parser": "^7.1.6", "prompts": "^2.4.2", "recast": "^0.23.11", "socks": "^2.8.8", "stringify-object": "^5.0.0", "ts-morph": "^26.0.0", "tsconfig-paths": "^4.2.0", - "undici": "^7.29.0", + "undici": "^7.29.1", "validate-npm-package-name": "^7.0.1", - "zod": "^3.24.1", - "zod-to-json-schema": "^3.24.6" + "zod": "^4.2.0" }, "bin": { "shadcn": "dist/index.js" @@ -12403,6 +12333,15 @@ "node": ">=20" } }, + "node_modules/shadcn/node_modules/zod": { + "version": "4.6.7", + "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.7.tgz", + "integrity": "sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg==", + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/colinhacks" + } + }, "node_modules/shebang-command": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz", @@ -12425,9 +12364,9 @@ } }, "node_modules/shell-quote": { - "version": "1.9.0", - "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.9.0.tgz", - "integrity": "sha512-Iov+JwFv/2HcTpcwNMKd8+IWNb8tboQJNQTkAY/LLVK7gGH9jy+LGkVqPxfekHl+yMmiqXszdGWXgkfml7hjqA==", + "version": "1.12.0", + "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.12.0.tgz", + "integrity": "sha512-PcByqNyT/38F2kDNi006HAMRJaULuBzq/FOsw3qdZvX/GA9W/jamDaRskgHjubHiftXK5sIFxLNkvrXUwcof6Q==", "dev": true, "license": "MIT", "engines": { diff --git a/src/pages/ForgotPassword.test.tsx b/src/pages/ForgotPassword.test.tsx index 3a36cd88..28246263 100644 --- a/src/pages/ForgotPassword.test.tsx +++ b/src/pages/ForgotPassword.test.tsx @@ -66,7 +66,7 @@ describe("ForgotPassword", () => { expect(await screen.findByRole("alert")).toHaveTextContent( "Too many requests. Please try again later.", ); - expect(input).toHaveAttribute("aria-invalid", "false"); + expect(input).not.toHaveAttribute("aria-invalid"); }); it("validates email before calling API", async () => {