This repository was archived by the owner on Apr 8, 2026. It is now read-only.
v4.0.1
Security
- lodash bumped to 4.18.x — fixes code injection via
_.template(high) and prototype pollution via_.unset/_.omit(medium) - Pygments bumped to 2.20.0 — fixes ReDoS via inefficient GUID regex matching (low)
Dependencies
- 22 npm packages updated (Dependabot PR #162), including TypeScript 5.9 → 6.0
- Full TypeScript 6.0 strict mode migration: 583 type errors fixed across 58 files
Bug Fixes
- Fixed empty-string file name selection edge case in FileComponent