From 780ad31d3d35498ab7e872daa6e2cce3e9df9ba5 Mon Sep 17 00:00:00 2001 From: "Zen P." Date: Sat, 3 Jan 2026 22:31:55 +0100 Subject: [PATCH 1/3] fix(deps): update @node-minify packages to v10.1.1 (#1150) Fixes high severity vulnerability in glob (CVE via @node-minify/core). Updates: - @node-minify/core: ^9.0.2 -> ^10.1.1 - @node-minify/clean-css: ^9.0.1 -> ^10.1.1 - @node-minify/terser: ^9.0.1 -> ^10.1.1 The glob vulnerability (GHSA-5j98-mcp5-4vw2) allowed command injection via -c/--cmd flag. @node-minify v10.x removes glob as a dependency, eliminating this attack vector. Co-authored-by: Zenpower --- package.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 0a7c4d2..79133aa 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@emulatorjs/emulatorjs", - "version": "4.2.3", + "version": "4.2.4", "type": "module", "description": "EmulatorJS is a frontend for RetroArch in the web browser.", "homepage": "https://emulatorjs.org", @@ -21,9 +21,9 @@ "docs": "jsdoc data/src/*.js -d jsdoc" }, "dependencies": { - "@node-minify/clean-css": "^9.0.1", - "@node-minify/core": "^9.0.2", - "@node-minify/terser": "^9.0.1", + "@node-minify/clean-css": "^10.1.1", + "@node-minify/core": "^10.1.1", + "@node-minify/terser": "^10.1.1", "http-server": "^14.1.1", "node-7z": "^3.0.0" }, From ae9cd11583e5085ee642be107b18c8e240e7deed Mon Sep 17 00:00:00 2001 From: Ethan O'Brien Date: Sat, 3 Jan 2026 18:44:29 -0600 Subject: [PATCH 2/3] Add intv --- data/src/emulator.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/data/src/emulator.js b/data/src/emulator.js index f78cf1c..f838567 100644 --- a/data/src/emulator.js +++ b/data/src/emulator.js @@ -36,7 +36,8 @@ class EmulatorJS { "pet": ["vice_xpet"], "plus4": ["vice_xplus4"], "vic20": ["vice_xvic"], - "dos": ["dosbox_pure"] + "dos": ["dosbox_pure"], + "intv": ["freeintv"] }; if (this.isSafari && this.isMobile) { rv.n64 = rv.n64.reverse(); From b440392a49f9aeb8bbdbb3a17a5811eb0a054716 Mon Sep 17 00:00:00 2001 From: Ethan O'Brien Date: Sat, 3 Jan 2026 18:58:17 -0600 Subject: [PATCH 3/3] Update dependencies and fix minify script --- minify/minify.js | 8 ++++---- package.json | 6 +++--- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/minify/minify.js b/minify/minify.js index af1f375..b897009 100644 --- a/minify/minify.js +++ b/minify/minify.js @@ -1,8 +1,8 @@ import path from "path"; import { fileURLToPath } from "url"; -import minify from "@node-minify/core"; -import terser from "@node-minify/terser"; -import cleanCSS from "@node-minify/clean-css"; +import { minify } from "@node-minify/core"; +import { terser } from "@node-minify/terser"; +import { cleanCss } from '@node-minify/clean-css'; const __filename = fileURLToPath(import.meta.url); const __dirname = path.dirname(__filename); @@ -21,7 +21,7 @@ async function doMinify() { console.log("Minified JS"); }); await minify({ - compressor: cleanCSS, + compressor: cleanCss, input: path.join(rootPath, "data/emulator.css"), output: path.join(rootPath, "data/emulator.min.css"), }) diff --git a/package.json b/package.json index 79133aa..63228bc 100644 --- a/package.json +++ b/package.json @@ -21,9 +21,9 @@ "docs": "jsdoc data/src/*.js -d jsdoc" }, "dependencies": { - "@node-minify/clean-css": "^10.1.1", - "@node-minify/core": "^10.1.1", - "@node-minify/terser": "^10.1.1", + "@node-minify/clean-css": "^10.2.0", + "@node-minify/core": "^10.2.0", + "@node-minify/terser": "^10.2.0", "http-server": "^14.1.1", "node-7z": "^3.0.0" },