fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

This commit is contained in:
Sameh Khamis committed 2026-09-10 23:08:26 -07:00
1 parent a458d27067
commit f94bdb1d77
33 files changed
+403 -1315

No files matched your search

+8
View File
@@ -2642,3 +2642,11 @@ Replay transport uses one Play/Pause toggle plus Cancel. During ascent only the
## Maintenance Rule
When runtime behavior or architecture changes, update this file in the same change set as code updates.
## Dependency security baseline
The lockfile uses DOMPurify 3.4.15, protobufjs 8.8.0, PostCSS 8.5.28, and
nanoid 3.3.19. Cesium remains on 1.138.0. Browser QA uses Puppeteer 25.10.0;
image-processing tools use Sharp 0.35.4. QA scripts await Puppeteer's asynchronous
executable-path lookup before testing or passing the path to Chrome. Supported Node versions remain
24.14.x and 26.x. Use `npm ci` to reproduce the checked-in dependency tree.