From 43243eab86965a90f231da115e736f0bb37119ab Mon Sep 17 00:00:00 2001
From: Bastiaan <17990055+bbassie@users.noreply.github.com>
Date: Sat, 17 Oct 2026 21:48:08 +0200
Subject: [PATCH] Bump dependency versions (#1113)

Raise the catalog and package.json floors to the latest release within
each major, and move typebox to 0.34, react-router-dom to 7,
winston-daily-rotate-file to 5, webpack-dev-middleware to 8 and
webpack-manifest-plugin to 6. None of these need code changes.

express 5.3.0 requires proxy-addr ^2.0.8 and qs ^6.16.0, which puts a
floor under the critical proxy-addr and high qs advisories for anyone
installing the published packages. webpack-dev-middleware 8 fixes a
high advisory in the controller's dev mode, and react-router 7 fixes two
moderate ones.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 package.json                     |  8 ++++----
 packages/controller/package.json |  4 ++--
 packages/create/package.json     |  2 +-
 packages/host/package.json       |  2 +-
 packages/web_ui/package.json     |  2 +-
 pnpm-workspace.yaml              | 26 +++++++++++++-------------
 6 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/package.json b/package.json
index cda98039..ed405e3a 100644
--- a/package.json
+++ b/package.json
@@ -49,13 +49,13 @@
 		"@swc/core": "catalog:",
 		"@types/node": "catalog:",
 		"c8": "^12.0.0",
-		"@typescript-eslint/eslint-plugin": "^8.70.0",
-		"@typescript-eslint/parser": "^8.70.0",
-		"eslint": "^10.10.0",
+		"@typescript-eslint/eslint-plugin": "^8.71.2",
+		"@typescript-eslint/parser": "^8.71.2",
+		"eslint": "^10.13.0",
 		"eslint-plugin-node": "^11.1.0",
 		"express": "catalog:",
 		"form-data": "^4.0.6",
-		"globals": "^17.12.0",
+		"globals": "^17.13.0",
 		"jsonwebtoken": "catalog:",
 		"mocha": "^11.8.0",
 		"typedoc": "^0.28.20",
diff --git a/packages/controller/package.json b/packages/controller/package.json
index ed63dd61..d33a2e56 100644
--- a/packages/controller/package.json
+++ b/packages/controller/package.json
@@ -52,7 +52,7 @@
 	"devDependencies": {
 		"@clusterio/web_ui": "workspace:^",
 		"@swc/core": "catalog:",
-		"@types/busboy": "^1.5.4",
+		"@types/busboy": "^1.5.5",
 		"@types/compression": "^1.8.1",
 		"@types/express": "catalog:",
 		"@types/finalhandler": "catalog:",
@@ -67,7 +67,7 @@
 		"typescript": "catalog:",
 		"webpack": "catalog:",
 		"webpack-cli": "catalog:",
-		"webpack-dev-middleware": "^6.1.3",
+		"webpack-dev-middleware": "^8.3.0",
 		"webpack-merge": "catalog:"
 	}
 }
diff --git a/packages/create/package.json b/packages/create/package.json
index 2700943d..f6749a89 100644
--- a/packages/create/package.json
+++ b/packages/create/package.json
@@ -33,7 +33,7 @@
 
 	"dependencies": {
 		"chalk": "catalog:",
-		"inquirer": "^8.2.4",
+		"inquirer": "^8.2.7",
 		"yargs": "catalog:"
 	}
 }
diff --git a/packages/host/package.json b/packages/host/package.json
index ce72524b..d0ae62a3 100644
--- a/packages/host/package.json
+++ b/packages/host/package.json
@@ -40,7 +40,7 @@
 		"@clusterio/lib": "workspace:^",
 		"@sinclair/typebox": "catalog:",
 		"jimp": "^1.6.1",
-		"pidusage": "^4.0.1",
+		"pidusage": "^4.1.0",
 		"rcon-client": "^4.2.5",
 		"semver": "catalog:",
 		"set-blocking": "catalog:",
diff --git a/packages/web_ui/package.json b/packages/web_ui/package.json
index 9d739135..beb299d1 100644
--- a/packages/web_ui/package.json
+++ b/packages/web_ui/package.json
@@ -62,7 +62,7 @@
 		"util": "^0.12.5",
 		"webpack": "catalog:",
 		"webpack-cli": "catalog:",
-		"webpack-manifest-plugin": "^5.0.0"
+		"webpack-manifest-plugin": "^6.0.1"
 	},
 	"devDependencies": {
 		"@types/node": "catalog:",
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 9bc1b526..63ddf233 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -6,38 +6,38 @@ packages:
   - test/
 
 catalog:
-  '@sinclair/typebox': ^0.30.6
-  '@swc/core': ^1.16.2
+  '@sinclair/typebox': ^0.34.52
+  '@swc/core': ^1.16.18
   '@types/express': ^5.0.6
   '@types/finalhandler': ^1.2.4
   '@types/jsonwebtoken': ^9.0.10
-  '@types/node': ^24.13.4
+  '@types/node': ^24.19.2
   '@types/react': ^18.3.31
   '@types/semver': ^7.8.0
   '@types/set-blocking': ^2.0.2
-  '@types/ws': ^8.18.1
+  '@types/ws': ^8.18.2
   '@types/yargs': ^17.0.35
   '@types/yauzl': ^3.4.0
   '@types/yazl': ^3.3.1
   antd: ^5.29.3
-  chalk: ^6.0.0
-  express: ^5.2.1
+  chalk: ^6.0.1
+  express: ^5.3.0
   jsonwebtoken: ^9.0.3
-  react: ^18.2.0
-  react-dom: ^18.2.0
+  react: ^18.3.1
+  react-dom: ^18.3.1
   react-markdown: ^10.1.0
-  react-router-dom: ^6.30.6
+  react-router-dom: ^7.18.4
   semver: ^7.8.5
   set-blocking: ^2.0.0
   typescript: ^5.9.3
-  webpack: ^5.110.3
+  webpack: ^5.112.0
   webpack-cli: ^7.2.3
   webpack-merge: 5.9.0
   winston: ^3.19.0
-  winston-daily-rotate-file: ^4.7.1
+  winston-daily-rotate-file: ^5.0.0
   winston-transport: ^4.9.0
-  ws: ^8.21.3
-  yargs: ^18.1.0
+  ws: ^8.22.0
+  yargs: ^18.2.0
   yauzl: ^3.4.0
   yazl: ^3.3.1