Charles Bochet b7fefe29b7 security: bump serialize-javascript 6 → 7 (RCE) (#21325) ...

Fixes the **high-severity** `serialize-javascript` RCE advisory
(RegExp.flags / Date.prototype.toISOString, patched in **7.0.5**).

- Bumps the direct dep in `twenty-website` `^6.0.2 → ^7.0.5`.
- Only consumer is `src/lib/seo/JsonLd.tsx` (default-export API,
unchanged in v7 — the major only drops old Node support).
- `twenty-website` typecheck passes; lockfile regenerated under hardened
mode (`--immutable --check-cache` clean).

2026-06-08 17:21:05 +02:00

..

create-twenty-app

chore: bump version to 2.11.0 (#21259)

2026-06-05 16:47:40 +02:00

twenty-apps

security: refresh twenty-apps lockfiles for vulnerable transitive deps (#21316)

2026-06-08 16:45:19 +02:00

twenty-claude-skills

feat(mcp) - optimize instruction prompt and hide get_tool_catalog (#21183)

2026-06-03 16:58:32 +00:00

twenty-cli

…

twenty-client-sdk

feat(emailing-domain): add LOG driver for local development (#21286)

2026-06-08 14:59:11 +02:00

twenty-codex-plugin

feat(mcp) - optimize instruction prompt and hide get_tool_catalog (#21183)

2026-06-03 16:58:32 +00:00

twenty-companion

security: bump electron 36 → 39 in twenty-companion (#21327)

2026-06-08 17:15:33 +02:00

twenty-docker

fix(docker): pin patched curl/nghttp2/postgresql18-client apk versions (#20805)

2026-05-21 12:42:19 +00:00

twenty-docs

i18n - docs translations (#21237)

2026-06-04 19:24:06 +02:00

twenty-e2e-testing

Bump playwright (#21113)

2026-06-01 18:06:55 +02:00

twenty-emails

Twenty email deps (#20223)

2026-05-04 11:09:34 +02:00

twenty-front

fix: wrong record count on deleted and normal records (#21292)

2026-06-08 16:44:03 +02:00

twenty-front-component-renderer

security: bump vulnerable direct dependencies (axios, next, vitest, qs, dompurify, …) (#21309)

2026-06-08 12:49:31 +00:00

twenty-new-ui

security: bump vulnerable direct dependencies (axios, next, vitest, qs, dompurify, …) (#21309)

2026-06-08 12:49:31 +00:00

twenty-oxlint-rules

refactor(twenty-orm): migrate 23 grandfathered entities to WorkspaceScopedRepository (#20987)

2026-05-28 20:46:21 +02:00

twenty-sdk

security: bump vulnerable direct dependencies (axios, next, vitest, qs, dompurify, …) (#21309)

2026-06-08 12:49:31 +00:00

twenty-server

security: bump vulnerable deps in logic-function runtime lockfiles (#21317)

2026-06-08 16:45:05 +02:00

twenty-shared

fix: wrong record count on deleted and normal records (#21292)

2026-06-08 16:44:03 +02:00

twenty-ui

Update Google Workspace and integration logo assets (#21185)

2026-06-04 14:19:49 +00:00

twenty-utils

Dispatch root package.json hoisted deps and devDeps (#20140)

2026-04-30 16:50:22 +00:00

twenty-website

security: bump serialize-javascript 6 → 7 (RCE) (#21325)

2026-06-08 17:21:05 +02:00

twenty-zapier

Migrate Company and Person standard fields in preparation for the enrichment app (#21171)

2026-06-04 15:54:04 +00:00