fixed build workflow

security patches

.github/workflows/build.yml

@@ -15,6 +15,8 @@ jobs:
       packages: write
     steps:
       - uses: actions/checkout@v4
+      - name: Lowercase repo owner
+        run: echo "REPO_OWNER=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]')" >> $GITHUB_ENV
       - uses: docker/login-action@v3
         with:
           registry: ghcr.io
@@ -25,8 +27,8 @@ jobs:
           context: ./api
           push: true
           tags: |
-            ghcr.io/${{ github.repository_owner }}/stoat-admin-api:latest
+            ghcr.io/${{ env.REPO_OWNER }}/stoat-admin-api:latest
-            ghcr.io/${{ github.repository_owner }}/stoat-admin-api:${{ github.sha }}
+            ghcr.io/${{ env.REPO_OWNER }}/stoat-admin-api:${{ github.sha }}
 
   build-web:
     runs-on: ubuntu-latest
@@ -35,6 +37,8 @@ jobs:
       packages: write
     steps:
       - uses: actions/checkout@v4
+      - name: Lowercase repo owner
+        run: echo "REPO_OWNER=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]')" >> $GITHUB_ENV
       - uses: docker/login-action@v3
         with:
           registry: ghcr.io
@@ -47,5 +51,5 @@ jobs:
           build-args: |
             VITE_API_URL=http://127.0.0.1:5181
           tags: |
-            ghcr.io/${{ github.repository_owner }}/stoat-admin-web:latest
+            ghcr.io/${{ env.REPO_OWNER }}/stoat-admin-web:latest
-            ghcr.io/${{ github.repository_owner }}/stoat-admin-web:${{ github.sha }}
+            ghcr.io/${{ env.REPO_OWNER }}/stoat-admin-web:${{ github.sha }}

api/package.json

@@ -5,13 +5,6 @@
   "type": "module",
   "license": "AGPL-3.0-only",
   "packageManager": "pnpm@10.6.3",
-  "pnpm": {
-    "onlyBuiltDependencies": [
-      "argon2",
-      "better-sqlite3",
-      "esbuild"
-    ]
-  },
   "engines": {
     "node": ">=22"
   },
@@ -36,7 +29,7 @@
     "mongodb": "^7.1.1",
     "nanoid": "^5.1.5",
     "node-cron": "^4.0.7",
-    "resend": "^6.10.0",
+    "resend": "^6.12.2",
     "ulid": "^3.0.2",
     "zod": "^4.3.6"
   },
@@ -48,11 +41,11 @@
     "@types/express-session": "^1.18.1",
     "@types/node": "24.12.0",
     "@types/node-cron": "^3.0.11",
+    "@typescript-eslint/eslint-plugin": "^8.18.2",
+    "@typescript-eslint/parser": "^8.18.2",
     "eslint": "^10.1.0",
     "globals": "^17.4.0",
     "tsx": "^4.19.2",
-    "typescript": "^6.0.2",
+    "typescript": "^6.0.2"
-    "@typescript-eslint/eslint-plugin": "^8.18.2",
-    "@typescript-eslint/parser": "^8.18.2"
   }
 }

package.json

@@ -11,6 +11,9 @@
     "turbo": "^2.5.4"
   },
   "pnpm": {
+    "overrides": {
+      "uuid": ">=14.0.0"
+    },
     "onlyBuiltDependencies": [
       "argon2",
       "better-sqlite3",

web/package.json

@@ -5,11 +5,6 @@
   "type": "module",
   "license": "AGPL-3.0-only",
   "packageManager": "pnpm@10.6.3",
-  "pnpm": {
-    "onlyBuiltDependencies": [
-      "esbuild"
-    ]
-  },
   "engines": {
     "node": ">=22"
   },
@@ -23,27 +18,27 @@
     "lint": "eslint ."
   },
   "dependencies": {
-    "@tanstack/react-query": "^5.62.11",
+    "@tanstack/react-query": "^5.100.5",
-    "react": "^19.0.0",
+    "react": "^19.2.5",
-    "react-dom": "^19.0.0",
+    "react-dom": "^19.2.5",
-    "react-router-dom": "^7.1.1",
+    "react-router-dom": "^7.14.2",
     "ulid": "^3.0.2"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@tailwindcss/vite": "^4.0.0",
+    "@tailwindcss/vite": "^4.2.4",
-    "@types/node": "^24.12.0",
+    "@types/node": "^24.12.2",
-    "@types/react": "^19.0.2",
+    "@types/react": "^19.2.14",
-    "@types/react-dom": "^19.0.2",
+    "@types/react-dom": "^19.2.3",
+    "@typescript-eslint/eslint-plugin": "^8.59.1",
+    "@typescript-eslint/parser": "^8.59.1",
     "@vitejs/plugin-react": "^6.0.1",
-    "eslint": "^10.1.0",
+    "eslint": "^10.2.1",
-    "eslint-plugin-react-hooks": "^7.0.1",
+    "eslint-plugin-react-hooks": "^7.1.1",
     "eslint-plugin-react-refresh": "^0.5.2",
-    "globals": "^17.4.0",
+    "globals": "^17.5.0",
-    "tailwindcss": "^4.0.0",
+    "tailwindcss": "^4.2.4",
-    "typescript": "^6.0.2",
+    "typescript": "^6.0.3",
-    "@typescript-eslint/eslint-plugin": "^8.18.2",
+    "vite": "^8.0.10"
-    "@typescript-eslint/parser": "^8.18.2",
-    "vite": "^8.0.3"
   }
 }