fix: remediate several vulnerabilities

admission-server/README.md

@@ -10,6 +10,7 @@ pnpm run dev
 ```
 
 Open the browser and navigate to the following URL:
+
 ```
 open http://localhost:3009
 ```
@@ -29,16 +30,18 @@ wgc federated-graph create mygraph -r http://127.0.0.1:3001/graphql --admission-
 ```
 
 2. Publish a subgraph
+
 ```bash
 wgc subgraph publish employees --schema ../demo/pkg/subgraphs/employees/subgraph/schema.graphqls --labels team=A
 ```
 
 3. Start the router with the same signing key as the admission server
+
 ```yaml
 version: '1'
 
-graph: 
+graph:
   sign_key: 'sign_key'
 ```
 
-4. Wait for the log line that says "Config signature validation successful"
+4. Wait for the log line that says "Config signature validation successful"

admission-server/tsconfig.json

@@ -5,8 +5,6 @@
     "outDir": "./dist",
     "module": "ESNext",
     "moduleResolution": "Bundler",
-    "types": [
-      "node"
-    ]
+    "types": ["node"]
   }
-}
+}

cli/package.json

@@ -51,7 +51,7 @@
     "@wundergraph/cosmo-connect": "workspace:*",
     "@wundergraph/cosmo-shared": "workspace:*",
     "@wundergraph/protographic": "workspace:*",
-    "ajv": "8.17.1",
+    "ajv": "8.18.0",
     "axios": "1.13.5",
     "boxen": "7.1.1",
     "cli-progress": "3.12.0",

package.json

@@ -72,7 +72,7 @@
       "react": "18.3.1",
       "graphql": "16.9.0",
       "cross-spawn": "7.0.6",
-      "next": "15.4.11",
+      "next": "15.5.15",
       "zod": "^3.25.0",
       "debug": "<4.4.2",
       "supports-color": "<10.2.1",
@@ -102,7 +102,9 @@
       "minimatch@9.x": "9.0.7",
       "minimatch@10.x": "10.2.4",
       "express-rate-limit": "8.2.2",
-      "serialize-javascript": "7.0.3"
+      "serialize-javascript": "7.0.3",
+      "markdown-it": "14.1.1",
+      "lodash": "4.18.1"
     },
     "patchedDependencies": {
       "graphql@16.9.0": "patches/graphql@16.9.0.patch"