Abdullah.
ed95b8cfde
## Summary Bumps **postcss -> 8.5.22** in the 13 twenty-apps lockfiles that carry it transitively, clearing **GHSA-r28c-9q8g-f849** (high) on those manifests: path traversal in previous source map auto-loading (`sourceMappingURL`) leading to arbitrary `.map` file disclosure, vulnerable `<= 8.5.17`. Apps covered: document-generator, hello-world, postcard, self-hosting, twenty-partners, call-recorder, people-data-labs, twenty-discord, twenty-exa, twenty-fireflies, twenty-last-contact, twenty-linear, twenty-slack. Every app reaches postcss through a caret range (`^8.5.15`), so a recursive `yarn up -R postcss` lifts it in each project with **no resolution and no `package.json` change** - the diff is 13 `yarn.lock` files and nothing else. Yarn resolves to **8.5.22**, the latest in range (above the 8.5.18 fix floor). ## Not included The **root lockfile** carries the same advisory but its postcss copies are held by exact pins - `next` (8.4.31 in every stable release, including 16.2.11) and `@mintlify/common` (8.5.14, unchanged in its latest) - so no `yarn up` reaches it. That one needs a scoped resolution and is handled separately. ## Verification - postcss resolves to **8.5.22** in all 13 lockfiles; nothing at or below 8.5.17 remains. - `yarn install --immutable` passes in each of the 13 projects. - 8.5.22 published 2026-07-22, clears the 3-day npm age gate.
Document Generator
Turn your CRM data into finished documents — in one click.
✨ What you get
- Reusable templates — write once with
{{placeholders}}like{{name.firstName}}or{{company.name}} - Generate anywhere — from the command menu on a record, a workflow step, or AI chat
- Polished PDFs — every document is saved to the record with a downloadable PDF
- Shareable links — open any document as a standalone, printable web page
- Native rich-text editor — author templates in the same editor as Notes and Tasks
📌 Heads up
- Free to run — generation uses no external API, so there's no per-document charge.
- A hands-on reference — this is the app built in the Document Generator tutorial, a tour through most of the Twenty SDK.