From b898ada880f1227daf9a768e105423bd84017417 Mon Sep 17 00:00:00 2001
From: Thomas Hohn <tho@gyldendal.dk>
Date: Sat, 11 Apr 2026 08:36:34 +0200
Subject: [PATCH 1/2] Fix critical security issue in axios

---
 package.json | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/package.json b/package.json
index f351a1c89..a230dc78e 100644
--- a/package.json
+++ b/package.json
@@ -91,7 +91,7 @@
     "@xmldom/xmldom": "0.9.9",
     "acorn": "8.16.0",
     "arrify": "3.0.0",
-    "axios": "1.14.0",
+    "axios": "1.15.0",
     "chalk": "4.1.2",
     "cheerio": "^1.2.0",
     "chokidar": "^4.0.3",
@@ -140,7 +140,7 @@
     "@pollyjs/core": "6.0.6",
     "@types/chai": "5.2.3",
     "@types/inquirer": "9.0.9",
-    "@types/node": "^25.5.2",
+    "@types/node": "^25.6.0",
     "@wdio/sauce-service": "9.12.5",
     "@wdio/selenium-standalone-service": "8.15.0",
     "@wdio/utils": "9.19.2",
@@ -149,7 +149,7 @@
     "chai-as-promised": "7.1.2",
     "chai-subset": "1.6.0",
     "documentation": "14.0.3",
-    "electron": "41.1.1",
+    "electron": "41.2.0",
     "eslint": "^9.39.4",
     "eslint-plugin-import": "2.32.0",
     "eslint-plugin-mocha": "11.2.0",
@@ -165,7 +165,7 @@
     "json-server": "0.17.4",
     "mochawesome": "^7.1.4",
     "playwright": "1.55.1",
-    "prettier": "^3.8.1",
+    "prettier": "^3.8.2",
     "puppeteer": "24.15.0",
     "qrcode-terminal": "0.12.0",
     "rosie": "2.1.1",
@@ -199,6 +199,7 @@
   },
   "overrides": {
     "@xmldom/xmldom": "0.9.9",
+    "axios": "1.15.0",
     "diff": "~8.0.3",
     "fast-xml-parser": "~5.5.6",
     "js-yaml": "~4.1.1",

From 14d82bf39a6021bff4e2c624e2f69d972f05b26d Mon Sep 17 00:00:00 2001
From: Thomas Hohn <tho@gyldendal.dk>
Date: Sat, 11 Apr 2026 08:58:51 +0200
Subject: [PATCH 2/2] Update more outdated deps

---
 package.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index a230dc78e..7ff368fe9 100644
--- a/package.json
+++ b/package.json
@@ -109,7 +109,7 @@
     "html-minifier-terser": "7.2.0",
     "inquirer": "^8.2.7",
     "invisi-data": "^1.2.0",
-    "joi": "18.0.2",
+    "joi": "18.1.2",
     "js-beautify": "1.15.4",
     "lodash.clonedeep": "4.5.0",
     "lodash.merge": "4.6.2",
@@ -171,7 +171,7 @@
     "rosie": "2.1.1",
     "runok": "0.9.3",
     "semver": "7.7.4",
-    "sinon": "21.0.3",
+    "sinon": "21.1.1",
     "sinon-chai": "3.7.0",
     "testcafe": "3.7.4",
     "ts-morph": "26.0.0",