chore(deps): bump deps to resolve all high severity (#13002)

Bumps dependencies to resolve all `high` severity vulnerabilities

Author: denolfe

package.json

@@ -91,6 +91,10 @@
  "reinstall": "pnpm clean:all && pnpm install",
  "release": "pnpm --filter releaser release --tag latest",
  "runts": "cross-env NODE_OPTIONS=\"--no-deprecation --no-experimental-strip-types\" node --no-deprecation --no-experimental-strip-types --import @swc-node/register/esm-register",
+ "script:audit": "pnpm audit -P",
+ "script:audit:critical": "pnpm audit -P --audit-level critical",
+ "script:audit:high": "pnpm audit -P --audit-level high",
+ "script:audit:moderate": "pnpm audit -P --audit-level moderate",
  "script:build-template-with-local-pkgs": "pnpm --filter scripts build-template-with-local-pkgs",
  "script:gen-templates": "pnpm --filter scripts gen-templates",
  "script:gen-templates:build": "pnpm --filter scripts gen-templates --build",
@@ -121,7 +125,6 @@
  "prettier --write",
  "eslint --cache --fix"
  ],
- "templates/website/**/*": "sh -c \"cd templates/website; pnpm install --no-frozen-lockfile --ignore-workspace; pnpm run lint --fix\"",
  "templates/**/pnpm-lock.yaml": "pnpm runts scripts/remove-template-lock-files.ts",
  "tsconfig.base.json": "node scripts/reset-tsconfig.js"
  },

packages/payload/package.json

@@ -111,7 +111,7 @@
  "sanitize-filename": "1.6.3",
  "scmp": "2.1.0",
  "ts-essentials": "10.0.3",
- "tsx": "4.19.2",
+ "tsx": "4.20.3",
  "undici": "7.10.0",
  "uuid": "10.0.0",
  "ws": "^8.16.0"

pnpm-lock.yaml

@@ -29,7 +29,7 @@
  "payload": "latest",
  "react": "19.1.0",
  "react-dom": "19.1.0",
- "sharp": "0.32.6"
+ "sharp": "0.34.2"
  },
  "devDependencies": {
  "@eslint/eslintrc": "^3.2.0",

templates/_template/package.json

@@ -29,7 +29,7 @@
  "next": "15.3.2",
  "payload": "workspace:*",
  "react": "19.1.0",
- "sharp": "0.32.6"
+ "sharp": "0.34.2"
  },
  "devDependencies": {
  "@playwright/test": "1.50.0",

templates/blank/package.json

@@ -36,8 +36,8 @@
  "dev:generate-importmap": "pnpm dev:payload generate:importmap",
  "dev:generate-types": "pnpm dev:payload generate:types",
  "dev:payload": "cross-env PAYLOAD_CONFIG_PATH=./dev/payload.config.ts payload",
- "generate:types": "pnpm dev:generate-types",
  "generate:importmap": "pnpm dev:generate-importmap",
+ "generate:types": "pnpm dev:generate-types",
  "lint": "eslint",
  "lint:fix": "eslint ./src --fix",
  "prepublishOnly": "pnpm clean && pnpm build",
@@ -74,7 +74,7 @@
  "react": "19.1.0",
  "react-dom": "19.1.0",
  "rimraf": "3.0.2",
- "sharp": "0.32.6",
+ "sharp": "0.34.2",
  "sort-package-json": "^2.10.0",
  "typescript": "5.7.3",
  "vite-tsconfig-paths": "^5.1.4",

templates/plugin/package.json

@@ -52,7 +52,7 @@
  "react": "19.1.0",
  "react-dom": "19.1.0",
  "react-hook-form": "7.45.4",
- "sharp": "0.32.6",
+ "sharp": "0.34.2",
  "tailwind-merge": "^2.3.0",
  "tailwindcss-animate": "^1.0.7"
  },

templates/website/package.json

@@ -25,7 +25,7 @@
  "payload": "3.29.0",
  "react": "19.1.0",
  "react-dom": "19.1.0",
- "sharp": "0.32.6"
+ "sharp": "0.34.2"
  },
  "devDependencies": {
  "@eslint/eslintrc": "^3.2.0",

templates/with-payload-cloud/package.json

@@ -6,6 +6,7 @@
  "type": "module",
  "scripts": {
  "build": "cross-env NODE_OPTIONS=--no-deprecation next build",
+ "ci": "payload migrate && pnpm build",
  "dev": "cross-env NODE_OPTIONS=--no-deprecation next dev",
  "devsafe": "rm -rf .next && cross-env NODE_OPTIONS=--no-deprecation next dev",
  "generate:importmap": "cross-env NODE_OPTIONS=--no-deprecation payload generate:importmap",
@@ -15,10 +16,10 @@
  "start": "cross-env NODE_OPTIONS=--no-deprecation next start",
  "test": "pnpm run test:int && pnpm run test:e2e",
  "test:e2e": "cross-env NODE_OPTIONS=\"--no-deprecation --no-experimental-strip-types\" pnpm exec playwright test",
- "test:int": "cross-env NODE_OPTIONS=--no-deprecation vitest run --config ./vitest.config.mts",
- "ci": "payload migrate && pnpm build"
+ "test:int": "cross-env NODE_OPTIONS=--no-deprecation vitest run --config ./vitest.config.mts"
  },
  "dependencies": {
+ "@payloadcms/db-postgres": "3.44.0",
  "@payloadcms/next": "3.44.0",
  "@payloadcms/payload-cloud": "3.44.0",
  "@payloadcms/richtext-lexical": "3.44.0",
@@ -29,8 +30,7 @@
  "payload": "3.44.0",
  "react": "19.1.0",
  "react-dom": "19.1.0",
- "sharp": "0.32.6",
- "@payloadcms/db-postgres": "3.44.0"
+ "sharp": "0.34.2"
  },
  "devDependencies": {
  "@eslint/eslintrc": "^3.2.0",

templates/with-postgres/package.json

@@ -7,6 +7,7 @@
  "scripts": {
  "build": "cross-env NODE_OPTIONS=--no-deprecation next build",
  "postbuild": "next-sitemap --config next-sitemap.config.cjs",
+ "ci": "payload migrate && pnpm build",
  "dev": "cross-env NODE_OPTIONS=--no-deprecation next dev",
  "dev:prod": "cross-env NODE_OPTIONS=--no-deprecation rm -rf .next && pnpm build && pnpm start",
  "generate:importmap": "cross-env NODE_OPTIONS=--no-deprecation payload generate:importmap",
@@ -19,11 +20,11 @@
  "start": "cross-env NODE_OPTIONS=--no-deprecation next start",
  "test": "pnpm run test:int && pnpm run test:e2e",
  "test:e2e": "cross-env NODE_OPTIONS=\"--no-deprecation --no-experimental-strip-types\" pnpm exec playwright test --config=playwright.config.ts",
- "test:int": "cross-env NODE_OPTIONS=--no-deprecation vitest run --config ./vitest.config.mts",
- "ci": "payload migrate && pnpm build"
+ "test:int": "cross-env NODE_OPTIONS=--no-deprecation vitest run --config ./vitest.config.mts"
  },
  "dependencies": {
  "@payloadcms/admin-bar": "3.44.0",
+ "@payloadcms/db-vercel-postgres": "3.44.0",
  "@payloadcms/live-preview-react": "3.44.0",
  "@payloadcms/next": "3.44.0",
  "@payloadcms/payload-cloud": "3.44.0",
@@ -33,6 +34,7 @@
  "@payloadcms/plugin-search": "3.44.0",
  "@payloadcms/plugin-seo": "3.44.0",
  "@payloadcms/richtext-lexical": "3.44.0",
+ "@payloadcms/storage-vercel-blob": "3.44.0",
  "@payloadcms/ui": "3.44.0",
  "@radix-ui/react-checkbox": "^1.0.4",
  "@radix-ui/react-label": "^2.0.2",
@@ -52,11 +54,9 @@
  "react": "19.1.0",
  "react-dom": "19.1.0",
  "react-hook-form": "7.45.4",
- "sharp": "0.32.6",
+ "sharp": "0.34.2",
  "tailwind-merge": "^2.3.0",
- "tailwindcss-animate": "^1.0.7",
- "@payloadcms/db-vercel-postgres": "3.44.0",
- "@payloadcms/storage-vercel-blob": "3.44.0"
+ "tailwindcss-animate": "^1.0.7"
  },
  "devDependencies": {
  "@eslint/eslintrc": "^3.2.0",
@@ -82,6 +82,7 @@
  "vite-tsconfig-paths": "5.1.4",
  "vitest": "3.2.3"
  },
+ "packageManager": "pnpm@10.12.4",
  "engines": {
  "node": "^18.20.2 || >=20.9.0"
  },
@@ -91,6 +92,5 @@
  "esbuild",
  "unrs-resolver"
  ]
- },
- "packageManager": "pnpm@10.12.4"
+ }
 }