deps: update security dependencies (#17330)

* deps: update security dependencies * deps: update some major dependencies * attempt to fix tsconfig * attempt to fix tsconfig * attempt to fix tsconfig * fix build
2026-05-15 22:05:45 +02:00 · 2026-04-22 11:46:45 +09:00
parent 351fe2f70a
commit bda98ba1d9
23 changed files with 957 additions and 1069 deletions
--- a/packages/backend/package.json
+++ b/packages/backend/package.json
@@ -53,28 +53,28 @@
 		"utf-8-validate": "6.0.6"
 	},
 	"dependencies": {
-		"@aws-sdk/client-s3": "3.1027.0",
-		"@aws-sdk/lib-storage": "3.1027.0",
+		"@aws-sdk/client-s3": "3.1030.0",
+		"@aws-sdk/lib-storage": "3.1030.0",
 		"@discordapp/twemoji": "16.0.1",
 		"@fastify/accepts": "5.0.4",
 		"@fastify/cors": "11.2.0",
 		"@fastify/express": "4.0.5",
 		"@fastify/http-proxy": "11.4.4",
-		"@fastify/multipart": "9.4.0",
-		"@fastify/static": "9.1.0",
+		"@fastify/multipart": "10.0.0",
+		"@fastify/static": "9.1.3",
 		"@kitajs/html": "4.2.13",
 		"@misskey-dev/sharp-read-bmp": "1.2.0",
 		"@misskey-dev/summaly": "5.2.5",
 		"@napi-rs/canvas": "0.1.97",
-		"@nestjs/common": "11.1.18",
-		"@nestjs/core": "11.1.18",
-		"@nestjs/testing": "11.1.18",
-		"@oxc-project/runtime": "0.124.0",
+		"@nestjs/common": "11.1.19",
+		"@nestjs/core": "11.1.19",
+		"@nestjs/testing": "11.1.19",
+		"@oxc-project/runtime": "0.125.0",
 		"@peertube/http-signature": "1.7.0",
-		"@sentry/node": "10.47.0",
-		"@sentry/profiling-node": "10.47.0",
+		"@sentry/node": "10.48.0",
+		"@sentry/profiling-node": "10.48.0",
 		"@simplewebauthn/server": "13.3.0",
-		"@sinonjs/fake-timers": "15.3.0",
+		"@sinonjs/fake-timers": "15.3.2",
 		"@smithy/node-http-handler": "4.5.2",
 		"@twemoji/parser": "16.0.0",
 		"accepts": "1.3.8",
@@ -84,7 +84,7 @@
 		"bcryptjs": "3.0.3",
 		"blurhash": "2.0.5",
 		"body-parser": "2.2.2",
-		"bullmq": "5.73.2",
+		"bullmq": "5.73.5",
 		"cacheable-lookup": "7.0.0",
 		"chalk": "5.6.2",
 		"chalk-template": "1.1.2",
@@ -96,7 +96,7 @@
 		"fastify": "5.8.5",
 		"fastify-raw-body": "5.0.0",
 		"feed": "5.2.0",
-		"file-type": "21.3.4",
+		"file-type": "22.0.1",
 		"fluent-ffmpeg": "2.1.3",
 		"form-data": "4.0.5",
 		"got": "14.6.6",
@@ -138,7 +138,7 @@
 		"rename": "1.0.4",
 		"rss-parser": "3.13.0",
 		"rxjs": "7.8.2",
-		"sanitize-html": "2.17.2",
+		"sanitize-html": "2.17.3",
 		"secure-json-parse": "4.1.0",
 		"semver": "7.7.4",
 		"sharp": "0.33.5",
@@ -158,9 +158,9 @@
 	},
 	"devDependencies": {
 		"@kitajs/ts-html-plugin": "4.1.4",
-		"@nestjs/platform-express": "11.1.18",
+		"@nestjs/platform-express": "11.1.19",
 		"@rollup/plugin-esm-shim": "0.1.8",
-		"@sentry/vue": "10.47.0",
+		"@sentry/vue": "10.48.0",
 		"@simplewebauthn/types": "12.0.0",
 		"@types/accepts": "1.3.7",
 		"@types/archiver": "7.0.0",
@@ -174,7 +174,7 @@
 		"@types/mime-types": "3.0.1",
 		"@types/ms": "2.1.0",
 		"@types/node": "24.12.2",
-		"@types/nodemailer": "7.0.11",
+		"@types/nodemailer": "8.0.0",
 		"@types/oauth2orize": "1.11.5",
 		"@types/oauth2orize-pkce": "0.1.2",
 		"@types/pg": "8.20.0",
@@ -192,8 +192,8 @@
 		"@types/vary": "1.1.3",
 		"@types/web-push": "3.6.4",
 		"@types/ws": "8.18.1",
-		"@typescript-eslint/eslint-plugin": "8.58.1",
-		"@typescript-eslint/parser": "8.58.1",
+		"@typescript-eslint/eslint-plugin": "8.58.2",
+		"@typescript-eslint/parser": "8.58.2",
 		"@vitest/coverage-v8": "4.1.4",
 		"aws-sdk-client-mock": "4.1.0",
 		"cbor": "10.0.12",
@@ -208,6 +208,6 @@
 		"supertest": "7.2.2",
 		"vite": "8.0.8",
 		"vitest": "4.1.4",
-		"vitest-mock-extended": "3.1.1"
+		"vitest-mock-extended": "4.0.0"
 	}
 }
--- a/packages/backend/rolldown.config.ts
+++ b/packages/backend/rolldown.config.ts
@@ -74,6 +74,7 @@ export default defineConfig((args) => {
 		're2',
 		'ipaddr.js',
 		'oauth2orize',
+		'file-type',
 	];

 	if (isE2E) {
--- a/packages/frontend-builder/package.json
+++ b/packages/frontend-builder/package.json
@@ -12,8 +12,8 @@
 	"devDependencies": {
 		"@types/estree": "1.0.8",
 		"@types/node": "24.12.2",
-		"@typescript-eslint/eslint-plugin": "8.58.1",
-		"@typescript-eslint/parser": "8.58.1",
+		"@typescript-eslint/eslint-plugin": "8.58.2",
+		"@typescript-eslint/parser": "8.58.2",
 		"rollup": "4.60.1"
 	},
 	"dependencies": {
--- a/packages/frontend-embed/package.json
+++ b/packages/frontend-embed/package.json
@@ -14,7 +14,7 @@
 		"@rollup/plugin-json": "6.1.0",
 		"@rollup/pluginutils": "5.3.0",
 		"@twemoji/parser": "16.0.0",
-		"@vitejs/plugin-vue": "6.0.5",
+		"@vitejs/plugin-vue": "6.0.6",
 		"buraha": "0.0.1",
 		"estree-walker": "3.0.3",
 		"frontend-shared": "workspace:*",
@@ -40,21 +40,21 @@
 		"@types/punycode.js": "npm:@types/punycode@2.1.4",
 		"@types/tinycolor2": "1.4.6",
 		"@types/ws": "8.18.1",
-		"@typescript-eslint/eslint-plugin": "8.58.1",
-		"@typescript-eslint/parser": "8.58.1",
-		"@vitest/coverage-v8": "4.1.3",
+		"@typescript-eslint/eslint-plugin": "8.58.2",
+		"@typescript-eslint/parser": "8.58.2",
+		"@vitest/coverage-v8": "4.1.4",
 		"@vue/runtime-core": "3.5.32",
 		"acorn": "8.16.0",
 		"cross-env": "10.1.0",
 		"eslint-plugin-import": "2.32.0",
 		"eslint-plugin-vue": "10.8.0",
-		"happy-dom": "20.8.9",
+		"happy-dom": "20.9.0",
 		"intersection-observer": "0.12.2",
 		"micromatch": "4.0.8",
-		"msw": "2.13.2",
-		"prettier": "3.8.1",
+		"msw": "2.13.3",
+		"prettier": "3.8.3",
 		"sass-embedded": "1.99.0",
-		"start-server-and-test": "2.1.5",
+		"start-server-and-test": "3.0.2",
 		"tsx": "4.21.0",
 		"vite": "8.0.8",
 		"vite-plugin-turbosnap": "1.0.3",
--- a/packages/frontend-shared/package.json
+++ b/packages/frontend-shared/package.json
@@ -22,8 +22,8 @@
 	},
 	"devDependencies": {
 		"@types/node": "24.12.2",
-		"@typescript-eslint/eslint-plugin": "8.58.1",
-		"@typescript-eslint/parser": "8.58.1",
+		"@typescript-eslint/eslint-plugin": "8.58.2",
+		"@typescript-eslint/parser": "8.58.2",
 		"esbuild": "0.28.0",
 		"eslint-plugin-vue": "10.8.0",
 		"nodemon": "3.1.14",
--- a/packages/frontend-shared/tsconfig.json
+++ b/packages/frontend-shared/tsconfig.json
@@ -7,7 +7,7 @@
 		"declaration": true,
 		"declarationMap": true,
 		"sourceMap": false,
-		"outDir": "./js-built/",
+		"outDir": "./js-built",
 		"removeComments": true,
 		"resolveJsonModule": true,
 		"strict": true,
@@ -17,6 +17,7 @@
 		"noImplicitReturns": true,
 		"esModuleInterop": true,
 		"verbatimModuleSyntax": true,
+		"rootDir": "./js",
 		"paths": {
 			"@/*": ["./*"],
 			"@@/*": ["./*"]
--- a/packages/frontend/package.json
+++ b/packages/frontend/package.json
@@ -21,11 +21,11 @@
 		"@github/webauthn-json": "2.1.1",
 		"@mcaptcha/core-glue": "0.1.0-alpha-5",
 		"@misskey-dev/browser-image-resizer": "2024.1.0",
-		"@sentry/vue": "10.47.0",
+		"@sentry/vue": "10.48.0",
 		"@syuilo/aiscript": "1.2.1",
 		"@syuilo/aiscript-0-19-0": "npm:@syuilo/aiscript@^0.19.0",
 		"@twemoji/parser": "16.0.0",
-		"@vitejs/plugin-vue": "6.0.5",
+		"@vitejs/plugin-vue": "6.0.6",
 		"aiscript-vscode": "github:aiscript-dev/aiscript-vscode#v0.1.16",
 		"analytics": "0.8.19",
 		"broadcast-channel": "7.3.0",
@@ -42,7 +42,7 @@
 		"date-fns": "4.1.0",
 		"eventemitter3": "5.0.4",
 		"execa": "9.6.1",
-		"exifreader": "4.38.0",
+		"exifreader": "4.38.1",
 		"frontend-shared": "workspace:*",
 		"i18n": "workspace:*",
 		"icons-subsetter": "workspace:*",
@@ -106,9 +106,9 @@
 		"@types/textarea-caret": "3.0.4",
 		"@types/throttle-debounce": "5.0.2",
 		"@types/tinycolor2": "1.4.6",
-		"@typescript-eslint/eslint-plugin": "8.58.1",
-		"@typescript-eslint/parser": "8.58.1",
-		"@vitest/coverage-v8": "4.1.3",
+		"@typescript-eslint/eslint-plugin": "8.58.2",
+		"@typescript-eslint/parser": "8.58.2",
+		"@vitest/coverage-v8": "4.1.4",
 		"@vue/compiler-core": "3.5.32",
 		"acorn": "8.16.0",
 		"astring": "1.9.0",
@@ -117,27 +117,27 @@
 		"eslint-plugin-import": "2.32.0",
 		"eslint-plugin-vue": "10.8.0",
 		"estree-walker": "3.0.3",
-		"happy-dom": "20.8.9",
+		"happy-dom": "20.9.0",
 		"intersection-observer": "0.12.2",
 		"micromatch": "4.0.8",
 		"minimatch": "10.2.5",
-		"msw": "2.13.2",
+		"msw": "2.13.3",
 		"msw-storybook-addon": "2.0.7",
 		"nodemon": "3.1.14",
-		"prettier": "3.8.1",
+		"prettier": "3.8.3",
 		"react": "19.2.5",
 		"react-dom": "19.2.5",
 		"rolldown": "1.0.0-rc.15",
 		"sass-embedded": "1.99.0",
 		"seedrandom": "3.0.5",
-		"start-server-and-test": "2.1.5",
+		"start-server-and-test": "3.0.2",
 		"storybook": "10.3.5",
 		"storybook-addon-misskey-theme": "github:misskey-dev/storybook-addon-misskey-theme",
 		"tsx": "4.21.0",
 		"vite": "8.0.8",
 		"vite-plugin-glsl": "1.6.0",
 		"vite-plugin-turbosnap": "1.0.3",
-		"vitest": "4.1.3",
+		"vitest": "4.1.4",
 		"vitest-fetch-mock": "0.4.5",
 		"vue-component-type-helpers": "3.2.6",
 		"vue-eslint-parser": "10.4.0",
--- a/packages/i18n/package.json
+++ b/packages/i18n/package.json
@@ -30,8 +30,8 @@
 	"devDependencies": {
 		"@types/js-yaml": "4.0.9",
 		"@types/node": "24.12.2",
-		"@typescript-eslint/eslint-plugin": "8.58.1",
-		"@typescript-eslint/parser": "8.58.1",
+		"@typescript-eslint/eslint-plugin": "8.58.2",
+		"@typescript-eslint/parser": "8.58.2",
 		"chokidar": "5.0.0",
 		"esbuild": "0.28.0",
 		"execa": "9.6.1",
--- a/packages/i18n/tsconfig.json
+++ b/packages/i18n/tsconfig.json
@@ -6,9 +6,11 @@
 		"esModuleInterop": true,
 		"forceConsistentCasingInFileNames": true,
 		"strict": true,
-		"skipLibCheck": true
+		"skipLibCheck": true,
+		"types": ["node"],
+		"rootDir": "./src",
 	},
 	"include": [
 		"src/**/*.ts"
 	]
-}
+}
--- a/packages/icons-subsetter/package.json
+++ b/packages/icons-subsetter/package.json
@@ -13,8 +13,8 @@
 	"devDependencies": {
 		"@types/node": "24.12.2",
 		"@types/wawoff2": "1.0.2",
-		"@typescript-eslint/eslint-plugin": "8.58.1",
-		"@typescript-eslint/parser": "8.58.1"
+		"@typescript-eslint/eslint-plugin": "8.58.2",
+		"@typescript-eslint/parser": "8.58.2"
 	},
 	"dependencies": {
 		"@tabler/icons-webfont": "3.35.0",
--- a/packages/misskey-bubble-game/package.json
+++ b/packages/misskey-bubble-game/package.json
@@ -27,8 +27,8 @@
 		"@types/matter-js": "0.20.2",
 		"@types/node": "24.12.2",
 		"@types/seedrandom": "3.0.8",
-		"@typescript-eslint/eslint-plugin": "8.58.1",
-		"@typescript-eslint/parser": "8.58.1",
+		"@typescript-eslint/eslint-plugin": "8.58.2",
+		"@typescript-eslint/parser": "8.58.2",
 		"esbuild": "0.28.0",
 		"execa": "9.6.1",
 		"nodemon": "3.1.14"
--- a/packages/misskey-bubble-game/tsconfig.json
+++ b/packages/misskey-bubble-game/tsconfig.json
@@ -7,7 +7,7 @@
 		"declaration": true,
 		"declarationMap": true,
 		"sourceMap": false,
-		"outDir": "./built/",
+		"outDir": "./built",
 		"removeComments": true,
 		"strict": true,
 		"strictFunctionTypes": true,
@@ -15,6 +15,7 @@
 		"experimentalDecorators": true,
 		"noImplicitReturns": true,
 		"esModuleInterop": true,
+		"rootDir": "./src",
 		"typeRoots": [
 			"./node_modules/@types"
 		],
--- a/packages/misskey-js/generator/package.json
+++ b/packages/misskey-js/generator/package.json
@@ -9,8 +9,8 @@
 	"devDependencies": {
 		"@readme/openapi-parser": "6.0.1",
 		"@types/node": "24.12.2",
-		"@typescript-eslint/eslint-plugin": "8.58.1",
-		"@typescript-eslint/parser": "8.58.1",
+		"@typescript-eslint/eslint-plugin": "8.58.2",
+		"@typescript-eslint/parser": "8.58.2",
 		"openapi-types": "12.1.3",
 		"openapi-typescript": "7.13.0",
 		"ts-case-convert": "2.1.0",
--- a/packages/misskey-js/package.json
+++ b/packages/misskey-js/package.json
@@ -39,15 +39,15 @@
 	"devDependencies": {
 		"@microsoft/api-extractor": "7.58.2",
 		"@types/node": "24.12.2",
-		"@typescript-eslint/eslint-plugin": "8.58.1",
-		"@typescript-eslint/parser": "8.58.1",
-		"@vitest/coverage-v8": "4.1.3",
+		"@typescript-eslint/eslint-plugin": "8.58.2",
+		"@typescript-eslint/parser": "8.58.2",
+		"@vitest/coverage-v8": "4.1.4",
 		"esbuild": "0.28.0",
 		"execa": "9.6.1",
 		"ncp": "2.0.0",
 		"nodemon": "3.1.14",
 		"tsd": "0.33.0",
-		"vitest": "4.1.3",
+		"vitest": "4.1.4",
 		"vitest-websocket-mock": "0.5.0"
 	},
 	"files": [
--- a/packages/misskey-js/tsconfig.json
+++ b/packages/misskey-js/tsconfig.json
@@ -7,7 +7,7 @@
 		"declaration": true,
 		"declarationMap": true,
 		"sourceMap": false,
-		"outDir": "./built/",
+		"outDir": "./built",
 		"removeComments": true,
 		"strict": true,
 		"strictFunctionTypes": true,
@@ -16,6 +16,7 @@
 		"noImplicitReturns": true,
 		"esModuleInterop": true,
 		"exactOptionalPropertyTypes": true,
+		"rootDir": "./src",
 		"typeRoots": [
 			"./node_modules/@types"
 		],
--- a/packages/misskey-reversi/package.json
+++ b/packages/misskey-reversi/package.json
@@ -25,8 +25,8 @@
 	},
 	"devDependencies": {
 		"@types/node": "24.12.2",
-		"@typescript-eslint/eslint-plugin": "8.58.1",
-		"@typescript-eslint/parser": "8.58.1",
+		"@typescript-eslint/eslint-plugin": "8.58.2",
+		"@typescript-eslint/parser": "8.58.2",
 		"esbuild": "0.28.0",
 		"execa": "9.6.1",
 		"nodemon": "3.1.14"
--- a/packages/misskey-reversi/tsconfig.json
+++ b/packages/misskey-reversi/tsconfig.json
@@ -7,7 +7,7 @@
 		"declaration": true,
 		"declarationMap": true,
 		"sourceMap": false,
-		"outDir": "./built/",
+		"outDir": "./built",
 		"removeComments": true,
 		"strict": true,
 		"strictFunctionTypes": true,
@@ -15,6 +15,7 @@
 		"experimentalDecorators": true,
 		"noImplicitReturns": true,
 		"esModuleInterop": true,
+		"rootDir": "./src",
 		"typeRoots": [
 			"./node_modules/@types"
 		],
--- a/packages/sw/package.json
+++ b/packages/sw/package.json
@@ -15,7 +15,7 @@
 		"misskey-js": "workspace:*"
 	},
 	"devDependencies": {
-		"@typescript-eslint/parser": "8.58.1",
+		"@typescript-eslint/parser": "8.58.2",
 		"@typescript/lib-webworker": "npm:@types/serviceworker@0.0.74",
 		"eslint-plugin-import": "2.32.0",
 		"nodemon": "3.1.14"