mirror of
https://github.com/tiennm99/litellm.git
synced 2026-06-17 14:48:44 +00:00
Krish Dholakia
e7714f0ce6
* fix(docker): bump tar/minimatch/pypdf for CVE fixes + harden SBOM patching
- Bump tar 7.5.8→7.5.10, minimatch 10.2.1→10.2.4, pypdf 6.6.2→6.7.3
- Add sed-based SBOM metadata patching with properly indented find/sed
- Add npm package manager cleanup (apk del / apt-get purge) to remove
stale SBOM entries from image scanners
- Scope || true to only apk del via brace grouping { ... || true; }
- Guard npm root -g with non-empty assertion to prevent silent failures
- Scope minimatch sed regex to ^10.x to avoid matching other major versions
Addresses: CVE-2026-27903, CVE-2026-27904, GHSA-qffp-2rhf-9h96, CVE-2026-27888
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix(docker): scope find to /usr/local/lib /usr/lib, drop autoremove
- Replace `find /` with `find /usr/local/lib /usr/lib` to avoid
traversing /proc, /sys, /dev during SBOM metadata patching
- Remove `apt-get autoremove -y` from Debian-based Dockerfiles to
prevent nodejs from being removed as an auto-installed dependency
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
101 lines
2.5 KiB
JSON
101 lines
2.5 KiB
JSON
{
|
|
"name": "my-website",
|
|
"version": "0.0.0",
|
|
"private": true,
|
|
"scripts": {
|
|
"docusaurus": "docusaurus",
|
|
"start": "docusaurus start",
|
|
"build": "docusaurus build",
|
|
"swizzle": "docusaurus swizzle",
|
|
"deploy": "docusaurus deploy",
|
|
"clear": "docusaurus clear",
|
|
"serve": "docusaurus serve",
|
|
"write-translations": "docusaurus write-translations",
|
|
"write-heading-ids": "docusaurus write-heading-ids"
|
|
},
|
|
"dependencies": {
|
|
"@docusaurus/core": "3.8.1",
|
|
"@docusaurus/plugin-google-gtag": "3.8.1",
|
|
"@docusaurus/plugin-ideal-image": "3.8.1",
|
|
"@docusaurus/preset-classic": "3.8.1",
|
|
"@docusaurus/theme-mermaid": "3.8.1",
|
|
"@inkeep/cxkit-docusaurus": "^0.5.89",
|
|
"@mdx-js/react": "^3.0.0",
|
|
"clsx": "^1.2.1",
|
|
"prism-react-renderer": "^1.3.5",
|
|
"react": "^18.0.0 || ^19.0.0",
|
|
"react-dom": "^18.0.0 || ^19.0.0",
|
|
"sharp": "^0.32.6",
|
|
"uuid": "^9.0.1"
|
|
},
|
|
"devDependencies": {
|
|
"@docusaurus/module-type-aliases": "3.8.1",
|
|
"dotenv": "^16.4.5"
|
|
},
|
|
"browserslist": {
|
|
"production": [
|
|
">0.5%",
|
|
"not dead",
|
|
"not op_mini all"
|
|
],
|
|
"development": [
|
|
"last 1 chrome version",
|
|
"last 1 firefox version",
|
|
"last 1 safari version"
|
|
]
|
|
},
|
|
"engines": {
|
|
"node": ">=16.14",
|
|
"npm": ">=8.3.0"
|
|
},
|
|
"resolutions": {
|
|
"webpack-dev-server": ">=5.2.1",
|
|
"form-data": ">=4.0.4",
|
|
"mermaid": ">=11.10.0",
|
|
"gray-matter": "4.0.3",
|
|
"node-forge": ">=1.3.2"
|
|
},
|
|
"overrides": {
|
|
"webpack-dev-server": ">=5.2.1",
|
|
"form-data": ">=4.0.4",
|
|
"mermaid": ">=11.10.0",
|
|
"gray-matter": "4.0.3",
|
|
"glob": ">=11.1.0",
|
|
"tar": ">=7.5.10",
|
|
"minimatch": ">=10.2.4",
|
|
"diff": ">=8.0.3",
|
|
"@isaacs/brace-expansion": ">=5.0.1",
|
|
"serialize-javascript": ">=7.0.3",
|
|
"node-forge": ">=1.3.2",
|
|
"mdast-util-to-hast": ">=13.2.1",
|
|
"lodash-es": ">=4.17.23",
|
|
"schema-utils@3": {
|
|
"ajv": "6.14.0"
|
|
},
|
|
"schema-utils@4": {
|
|
"ajv": "8.18.0"
|
|
},
|
|
"file-loader": {
|
|
"ajv": "6.14.0"
|
|
},
|
|
"null-loader": {
|
|
"ajv": "6.14.0"
|
|
},
|
|
"url-loader": {
|
|
"ajv": "6.14.0"
|
|
},
|
|
"@babel/traverse": ">=7.23.2",
|
|
"ws": ">=7.5.10",
|
|
"http-proxy-middleware": ">=2.0.9",
|
|
"tar-fs": ">=2.1.4",
|
|
"webpack-dev-middleware": ">=5.3.4",
|
|
"braces": ">=3.0.3",
|
|
"axios": ">=0.30.2",
|
|
"webpack": ">=5.94.0",
|
|
"serve-static": ">=1.16.0",
|
|
"path-to-regexp": ">=0.1.12",
|
|
"dompurify": ">=3.3.2",
|
|
"svgo": ">=3.3.3"
|
|
}
|
|
}
|