Security: sync overrides with 26_1 (rollup, vite, minimatch, basic-ftp)

Author: aleksei-semikozov

package.json

@@ -65,68 +65,73 @@
   "pnpm": {
     "overrides": {
       "@devexpress/callsite-record@^4.1.6": "4.1.7",
-      "basic-ftp@<5.2.0": "~5.2.0",
+      "@eslint/plugin-kit@<0.3.4": "^0.3.4",
+      "@hono/node-server@<1.19.10": "^1.19.10",
       "@isaacs/brace-expansion@<=5.0.0": "^5.0.1",
       "@modelcontextprotocol/sdk@>=1.10.0 <=1.25.3": "^1.26.0",
-      "form-data@<2.5.4": "2.5.5",
-      "form-data@>=4.0.0 <4.0.4": "^4.0.5",
-      "pbkdf2@<=3.1.2": "^3.1.3",
-      "sha.js@<=2.4.11": "^2.4.12",
-      "rollup@<2.79.2": "^4.53.3",
-      "rollup@>=4.0.0 <4.59.0": "^4.59.0",
-      "json5@<1.0.2": "^2.2.3",
+      "@tootallnate/once@<3.0.1": "^3.0.1",
+      "ajv@<6.14.0": "6.14.0",
+      "ajv@>=7.0.0-alpha.0 <8.18.0": "^8.18.0",
       "axios@<=1.13.4": "^1.13.5",
-      "braces@<3.0.3": "^3.0.3",
-      "semver@<5.7.2": "^5.7.2",
-      "qs": ">=6.14.2",
-      "glob@>=10.2.0 <10.5.0": "^10.5.0",
-      "node-forge@<1.4.0": "1.4.0",
-      "vite@>=6.0.0 <6.4.1": "^6.4.1",
-      "tar@<=7.5.9": "^7.5.10",
-      "underscore@<=1.13.7": "^1.13.8",
-      "hono@<4.12.4": "^4.12.4",
-      "@hono/node-server@<1.19.10": "^1.19.10",
-      "express-rate-limit@>=8.2.0 <8.2.2": "^8.2.2",
-      "immutable@>=5.0.0 <5.1.5": "^5.1.5",
-      "minimatch@<3.1.5": "3.1.5",
-      "minimatch@>=9.0.0 <9.0.7": "9.0.9",
-      "minimatch@>=10.0.0 <10.2.4": "10.2.4",
-      "picomatch@>=2.0.0 <2.3.2": "2.3.2",
-      "picomatch@>=4.0.0 <4.0.4": "4.0.4",
-      "path-to-regexp@0.1.12": "0.1.13",
-      "path-to-regexp@>=8.0.0 <8.4.0": "8.4.0",
-      "serialize-javascript@<=7.0.2": "7.0.5",
-      "flatted@<3.4.0": "^3.4.0",
-      "undici@<7.24.0": "^7.24.0",
-      "socket.io-parser@>=4.0.0 <4.2.6": "^4.2.6",
-      "lodash@<4.18.1": "4.18.1",
-      "lodash.template@<4.18.1": "4.18.1",
+      "basic-ftp@<5.2.0": "~5.2.0",
+      "basic-ftp@<5.2.1": "~5.2.1",
       "bn.js@<4.12.3": "4.12.3",
       "bn.js@>=5.0.0 <5.2.3": "5.2.3",
       "brace-expansion@<1.1.13": "1.1.13",
       "brace-expansion@>=2.0.0 <2.0.3": "2.0.3",
+      "braces@<3.0.3": "^3.0.3",
       "cookie@<0.7.0": "^0.7.0",
       "diff@>=4.0.0 <4.0.4": "4.0.4",
       "diff@>=5.0.0 <5.2.2": "5.2.2",
       "dompurify@<=3.3.1": "^3.3.2",
-      "@eslint/plugin-kit@<0.3.4": "^0.3.4",
+      "express-rate-limit@>=8.2.0 <8.2.2": "^8.2.2",
+      "flatted@<3.4.0": "^3.4.0",
+      "form-data@<2.5.4": "2.5.5",
+      "form-data@>=4.0.0 <4.0.4": "^4.0.5",
+      "glob@>=10.2.0 <10.5.0": "^10.5.0",
+      "hono@<4.12.4": "^4.12.4",
       "http-proxy-middleware@>=1.3.0 <2.0.9": "^2.0.9",
       "immutable@>=4.0.0-rc.1 <4.3.8": "^4.3.8",
-      "jspdf@<=4.2.0": "^4.2.1",
+      "immutable@>=5.0.0 <5.1.5": "^5.1.5",
       "js-yaml@>=4.0.0 <4.1.1": "^4.1.1",
+      "json5@<1.0.2": "^2.2.3",
+      "jspdf@<=4.2.0": "^4.2.1",
+      "lodash.template@<4.18.1": "4.18.1",
+      "lodash@<4.18.1": "4.18.1",
       "micromatch@<4.0.8": "^4.0.8",
+      "minimatch@<3.1.5": "3.1.5",
+      "minimatch@>=10.0.0 < 10.2.4": "10.2.4",
+      "minimatch@>=10.0.0 <10.2.4": "10.2.4",
       "minimatch@>=4.0.0 <4.2.5": "4.2.5",
       "minimatch@>=5.0.0 <5.1.8": "5.1.8",
+      "minimatch@>=9.0.0 < 9.0.7": "9.0.9",
+      "minimatch@>=9.0.0 <9.0.7": "9.0.9",
       "nanoid@<3.3.8": "^3.3.8",
+      "node-forge@<1.4.0": "1.4.0",
       "on-headers@<1.1.0": "^1.1.0",
-      "ajv@<6.14.0": "6.14.0",
-      "ajv@>=7.0.0-alpha.0 <8.18.0": "^8.18.0",
-      "yaml@>=1.0.0 <1.10.3": "1.10.3",
-      "yaml@>=2.0.0 <2.8.3": "2.8.3",
+      "path-to-regexp@0.1.12": "0.1.13",
+      "path-to-regexp@>=8.0.0 <8.4.0": "8.4.0",
+      "pbkdf2@<=3.1.2": "^3.1.3",
+      "picomatch@>=2.0.0 <2.3.2": "2.3.2",
+      "picomatch@>=4.0.0 <4.0.4": "4.0.4",
+      "qs": ">=6.14.1",
+      "rollup@< 4.59.0": "^4.59.0",
+      "rollup@<2.79.2": "^4.53.3",
+      "rollup@>=4.0.0 <4.59.0": "^4.59.0",
+      "semver@<5.7.2": "^5.7.2",
+      "serialize-javascript@<=7.0.2": "7.0.5",
+      "sha.js@<=2.4.11": "^2.4.12",
+      "socket.io-parser@>=4.0.0 <4.2.6": "^4.2.6",
+      "tar@<=7.5.9": "^7.5.10",
       "tmp@<=0.2.3": "^0.2.4",
-      "@tootallnate/once@<3.0.1": "^3.0.1",
       "tough-cookie@<4.1.3": "^4.1.3",
-      "webpack@>=5.49.0 <=5.104.0": "^5.104.1"
+      "underscore@<=1.13.7": "^1.13.8",
+      "undici@<7.24.0": "^7.24.0",
+      "vite@>=6.0.0 <6.4.1": "^7.3.2",
+      "vite@>=7.0.0 <=7.3.1": "^7.3.2",
+      "webpack@>=5.49.0 <=5.104.0": "^5.104.1",
+      "yaml@>=1.0.0 <1.10.3": "1.10.3",
+      "yaml@>=2.0.0 <2.8.3": "2.8.3"
     }
   },
   "packageManager": "pnpm@9.15.4"