Audit fix

README.md

@@ -53,6 +53,17 @@ stomp:
 
 For I24 instead, The first few plans are in the branch https://github.com/DiamondLightSource/mx-bluesky/tree/151_web-ui-first-plans and there is already a BlueAPI configuration defined in https://github.com/DiamondLightSource/mx-bluesky/blob/main/src/mx_bluesky/beamlines/i24/serial/blueapi_config.yaml that can be used for testing.
 
+### PNPM Audits
+
+Occasionally third party dependencies may have new known vulnerabilities. The CI checks for these when code is committed and pushed. To fix this, run the audit command with the fix flag. This scans your dependencies for vulnerabilities and automatically adds overrides to `package.json`, pinning affected packages to safe versions. Review these changes before proceeding, as some bumps may be to a new major version that may break other third party dependencies.
+
+```bash
+pnpm audit --fix
+pnpm install
+```
+
+If vulnerabilities remain or other packages break after this, you may need to repeat the command or manually update the affected package (`pnpm update <package>`) or add an override in `package.json` yourself.
+
 ## Run
 
 Once all the above steps are done, start a blueapi server. The gui can be started by running:

package.json

@@ -18,15 +18,15 @@
   },
   "dependencies": {
     "@apollo/client": "^3.14.0",
-    "@base-ui/react": "^1.1.0",
+    "@base-ui/react": "^1.2.0",
     "@diamondlightsource/cs-web-lib": "^0.9.14",
     "@diamondlightsource/sci-react-ui": "^0.3.0",
     "@emotion/react": "^11.14.0",
     "@emotion/styled": "^11.14.1",
     "@mui/icons-material": "^6.5.0",
     "@mui/material": "^6.5.0",
     "@types/react-redux": "^7.1.34",
-    "@typescript-eslint/parser": "^8.54.0",
+    "@typescript-eslint/parser": "^8.56.1",
     "buffer": "^6.0.3",
     "eslint-plugin-tsdoc": "^0.4.0",
     "husky": "^9.1.7",
@@ -42,13 +42,13 @@
     "yaml": "^2.8.2"
   },
   "devDependencies": {
-    "@eslint/js": "^9.39.2",
+    "@eslint/js": "^9.39.3",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.2",
     "@testing-library/user-event": "^14.6.1",
-    "@types/node": "^22.19.7",
-    "@types/react": "^18.3.27",
+    "@types/node": "^22.19.13",
+    "@types/react": "^18.3.28",
     "@types/react-dom": "^18.3.7",
     "@vitejs/plugin-react-swc": "^3.11.0",
     "@vitest/ui": "^3.2.4",
@@ -62,12 +62,17 @@
     "globals": "^15.15.0",
     "jsdom": "^26.1.0",
     "typescript": "~5.6.3",
-    "typescript-eslint": "^8.54.0",
+    "typescript-eslint": "^8.56.1",
     "vite": "^5.4.21",
     "vitest": "^3.2.4"
   },
-  "resolutions": {
-    "minimatch": "^10.2.1"
+  "pnpm": {
+    "overrides": {
+      "ajv": "^6.12.6",
+      "esbuild@<=0.24.2": ">=0.25.0",
+      "minimatch@>=9.0.0 <9.0.6": ">=9.0.6",
+      "minimatch@>=9.0.0 <9.0.7": ">=9.0.7"
+    }
   },
   "imports": {
     "#/*": "./src/*.ts"