Skip to content
This repository was archived by the owner on Apr 8, 2026. It is now read-only.

v4.0.1

Choose a tag to compare

@thejuran thejuran released this 05 Apr 20:23
· 11 commits to master since this release

Security

  • lodash bumped to 4.18.x — fixes code injection via _.template (high) and prototype pollution via _.unset/_.omit (medium)
  • Pygments bumped to 2.20.0 — fixes ReDoS via inefficient GUID regex matching (low)

Dependencies

  • 22 npm packages updated (Dependabot PR #162), including TypeScript 5.9 → 6.0
  • Full TypeScript 6.0 strict mode migration: 583 type errors fixed across 58 files

Bug Fixes

  • Fixed empty-string file name selection edge case in FileComponent