Maurice 8acfaea3c4 chore(deps): take the multer and nodemailer fixes for four HIGH CVEs ...

Docker Scout turned the release PR red overnight on advisories published
after the last green run:

  multer < 2.3.0      CVE-2026-82333, CVE-2026-77078, CVE-2026-77037
  nodemailer < 9.1.0  GHSA-2x7j-588g-ccc2

Both are patch-level resource-exhaustion fixes with no API change — multer
2.3.0 carries the same four dependencies as 2.2.0. multer resolves through
the root override (@nestjs/platform-express asks for 2.1.1), so the range
there has to move with it, and the server's own override list beside it.

2026-09-09 10:24:22 +02:00

..

assets

fix(atlas): correct Guangdong Province name in region bundle

2026-09-08 16:36:47 +02:00

public

v3.0.16 — bug fixes (#964)

2026-05-06 21:38:40 +02:00

scripts

fix(atlas): correct Guangdong Province name in region bundle

2026-09-08 16:36:47 +02:00

src

fix(collab): keep every panel on screen, and stop leaking spool and links

2026-09-09 00:11:00 +02:00

tests

fix(tests): let the spool handler stub carry a payload

2026-09-09 10:11:36 +02:00

.env.example

fix(llm): let a model refuse temperature, and say which extractor is installed

2026-09-06 15:03:13 +02:00

.gitignore

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

.prettierrc

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

CLAUDE.md

feat(plugins): TREK_PLUGINS_IGNORE_TREK_RANGE turns the version gate into a warning (#2226)

2026-09-04 00:43:06 +02:00

eslint.config.mjs

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

package.json

chore(deps): take the multer and nodemailer fixes for four HIGH CVEs

2026-09-09 10:24:22 +02:00

reset-admin.js

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

tsconfig.build.json

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

tsconfig.json

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

tsconfig.tests.json

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

vitest.config.ts

test(roadtrip): cover the surface the domain shipped without

2026-09-07 18:36:54 +02:00