ManishMadan2882 7d1aafebce fix(react-widget): resolve npm audit advisories in shipped dependency tree ...

Lockfile-only update; package.json is unchanged.

extensions/react-widget is published as the npm package `docsgpt` and as an
HTML embed, so its production dependency tree reaches every consumer. That
tree carried 5 advisories (2 high, 2 moderate, 1 low), 7 across the full tree.

  dompurify        3.4.0  -> 3.4.13  (moderate, XSS)
  js-yaml          4.1.1  -> 4.3.1   (high, quadratic-complexity DoS)
  linkify-it       5.0.0  -> 5.0.2   (high)
  markdown-it     14.1.0  -> 14.3.0  (moderate)
  svgo             4.0.1  -> 4.0.2   (high, dev)
  brace-expansion  1.1.12 -> 1.1.18  (high, CVE-2026-13149; nested copies)
  @babel/core      7.29.0 -> 7.29.7  (low)

npm audit goes 7 -> 0 (production tree 5 -> 0). Verified locally: clean
npm ci, `npm run build` (embed) and `npm run build:react` (library) both
build, npm run lint and tsc --noEmit pass.

2026-08-11 03:27:51 +05:30

..

chatwoot

fix: chatwoot

2026-04-03 18:04:49 +01:00

react-widget

fix(react-widget): resolve npm audit advisories in shipped dependency tree

2026-08-11 03:27:51 +05:30