fix(deps): dependabot remediation 2026-07-21 (tkhq/sdk)

[arawal]

Dependabot remediation

Bumps two pnpm-workspace.yaml overrides to address 9 open Dependabot advisories. Lockfile regenerated via corepack pnpm install --lockfile-only. The override declares the floor; the actual version change lands in pnpm-lock.yaml.

axios >=1.15.1 → >=1.18.0

Covers 7 axios advisories (all fixed in 1.18.0). All are transitive; no first-party axios imports in this repo. We're taking these defensively — the vulnerable code paths (server-side proxying of attacker-controlled proxy config, HTTP/2 streamed uploads with a maxBodyLength cap, formToJSON on untrusted FormData keys, NO_PROXY policy relying on 0.0.0.0 rejection) are not reachable in this client-side signing SDK.

What changed (1.15.1→1.18.0): hardens the Node HTTP adapter's proxy resolution against Object.prototype.proxy pollution after interceptor config cloning; adds a maxDepth guard in formDataToJSON's buildPath recursion; adds byte-counting stream enforcement for HTTP/2 streamed uploads (previously only HTTP/1 with maxRedirects:0); treats 0.0.0.0 and :: as loopback in shouldBypassProxy's NO_PROXY check; guards auth.username/auth.password subfield reads with hasOwnProp; adds a top-level shortcut depth check on toFormData {}-metatoken keys. No public API changes.

• #1015 — high — GHSA-gcfj-64vw-6mp9 — Node HTTP adapter can inherit polluted proxy after interceptor config clone. low sev / trivial cmplx → 80. Not reachable: no interceptors that re-materialize config as a plain object; no server-side proxy config path.
• #1014 — medium — GHSA-hcpx-6fm6-wx23 — toFormData {}-metatoken bypasses maxDepth, JSON.stringify stack overflow. low/trivial → 80. Not reachable: SDK does not serialize attacker-controlled objects with axios form serializer.
• #1013 — medium — GHSA-mwf2-3pr3-8698 — HTTP/2 streamed uploads bypass maxBodyLength. low/trivial → 80. Not reachable: SDK does not proxy attacker streams over HTTP/2.
• #1012 — medium — GHSA-f4gw-2p7v-4548 — 0.0.0.0 not treated as loopback → NO_PROXY bypass SSRF. low/trivial → 80. Not reachable: SDK is a client-side signing library, not a URL-forwarding server.
• #1008 — medium — GHSA-42h9-826w-cgv3 — unbounded recursion in formDataToJSON when serializing FormData with Content-Type: application/json. low/trivial → 80. Not reachable: SDK does not accept attacker-controlled FormData keys.
• #1007 — medium — GHSA-pmv8-rq9r-6j72 — same code path as chore: release packages #1008, deep bracket-segment recursion crash. low/trivial → 80. Same reachability analysis.
• #1006 — medium — GHSA-xj6q-8x83-jv6g — polluted Object.prototype.username/.password leaked into outbound Basic auth when caller passes auth: {}. low/trivial → 80. Not reachable: SDK does not use the auth: opts.auth || {} pattern with untrusted prototype state.

protobufjs >=8.6.0 → >=8.6.6

Covers 2 protobufjs advisories (both fixed by 8.6.6). All are transitive; no first-party protobufjs imports in this repo. Both bugs require parsing attacker-controlled schema or text-format input, which this SDK does not do.

What changed (8.6.0→8.6.6): adds an end-of-input check in the .proto option-name parser (was looping until = without EOF guard); switches text-format string-keyed map parsing to a null-prototype backing object so a __proto__ map key can no longer mutate the parsed map's prototype. No public API changes.

• #1010 — medium — GHSA-j3f2-48v5-ccww / CVE-2026-59877 — DoS via infinite loop in .proto option parsing (Root.load/parse). low/trivial → 80. Not reachable: SDK does not parse untrusted .proto schemas.
• #1009 — medium — GHSA-jfj6-75fj-8934 / CVE-2026-59876 — per-object proto pollution via __proto__ map key in text-format extension. low/trivial → 80. Not reachable: SDK does not parse untrusted text-format protobuf.

Auto-opened by the Dependabot remediation workflow.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	axios@​1.16.0 ⏵ 1.18.1		+31		-1

View full report

[codesandbox-ci]

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

Latest deployment of this branch, based on commit 3333569:

Sandbox	Source
@turnkey/example-react-components	Configuration