Resolve tar related dependabot alerts in the application-layer. (#17801)

Resolves [Dependabot Alert
424](https://github.com/twentyhq/twenty/security/dependabot/424),
[Dependabot Alert
425](https://github.com/twentyhq/twenty/security/dependabot/425) and
[Dependabot Alert
426](https://github.com/twentyhq/twenty/security/dependabot/426).
This commit is contained in:
Abdullah.
2026-02-09 18:41:26 +05:00
committed by GitHub
parent d7c28d6455
commit 0b4cebfe0e
3 changed files with 400 additions and 595 deletions
@@ -1,6 +1,6 @@
{
"dependencies": {
"@types/bcrypt": "^5.0.2",
"@types/bcrypt": "^6.0.0",
"@types/deep-equal": "^1.0.4",
"@types/lodash.camelcase": "^4.3.9",
"@types/lodash.compact": "^3.0.9",
@@ -18,7 +18,7 @@
"@types/uuid": "^10.0.0",
"archiver": "^7.0.1",
"axios": "^1.12.0",
"bcrypt": "^5.1.1",
"bcrypt": "^6.0.0",
"body-parser": "^1.20.4",
"deep-equal": "^2.2.3",
"jsonwebtoken": "^9.0.2",
@@ -38,7 +38,7 @@
"lodash.snakecase": "^4.1.1",
"lodash.upperfirst": "^4.3.1",
"nodemailer": "^7.0.11",
"sharp": "^0.33.5",
"sharp": "^0.34.5",
"uuid": "^10.0.0",
"winston": "^3.14.2"
}
@@ -7,8 +7,8 @@ import { SEED_DEPENDENCIES_DIRNAME } from 'src/engine/core-modules/application-l
// To regenerate: use logicFunctionCreateHash from logic-function-create-hash.utils.
// package.json: hash(JSON.stringify(JSON.parse(content))). yarn.lock: hash(content).
// Both use first 32 chars of SHA512 hex digest.
const DEFAULT_PACKAGE_JSON_CHECKSUM = '84772134573e316a4eb1f9dc2e58706a';
const DEFAULT_YARN_LOCK_CHECKSUM = '8d837b7503cf8eff21c6446a126588d4';
const DEFAULT_PACKAGE_JSON_CHECKSUM = '1eee7f7ff908b69946b4c21ac46c5501';
const DEFAULT_YARN_LOCK_CHECKSUM = '2b6e84fc87db6467d936669815d064da';
export type DefaultApplicationPackageFields = {
packageJsonChecksum: string;