fix: resolve 22 of 23 security vulnerabilities

Dockerfile

@@ -1,22 +1,22 @@
 # Stage 1: Build client
 FROM node:22-alpine AS client-builder
-RUN npm install -g pnpm
+RUN npm install -g pnpm@9
 WORKDIR /app
 COPY pnpm-workspace.yaml package.json pnpm-lock.yaml ./
 COPY client/package.json ./client/
 COPY server/package.json ./server/
-RUN pnpm config set enableScripts true && pnpm install --frozen-lockfile
+RUN pnpm config set enable-scripts true && pnpm install --frozen-lockfile
 COPY client ./client
 RUN pnpm --filter ./client build
 
 # Stage 2: Build server
 FROM node:22-alpine AS server-builder
-RUN npm install -g pnpm
+RUN npm install -g pnpm@9
 WORKDIR /app
 COPY pnpm-workspace.yaml package.json pnpm-lock.yaml ./
 COPY client/package.json ./client/
 COPY server/package.json ./server/
-RUN pnpm config set enableScripts true && pnpm install --frozen-lockfile
+RUN pnpm config set enable-scripts true && pnpm install --frozen-lockfile
 COPY server ./server
 RUN pnpm --filter ./server build
 

client/package.json

@@ -13,16 +13,16 @@
     "d3-dag": "^1.1.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
-    "react-router": "^7.1.5"
+    "react-router": "^7.18.2"
   },
   "devDependencies": {
     "@tailwindcss/vite": "^4.0.6",
     "@types/d3": "^7.4.3",
     "@types/react": "^19.0.8",
     "@types/react-dom": "^19.0.3",
-    "@vitejs/plugin-react": "^4.3.4",
+    "@vitejs/plugin-react": "^4.7.0",
     "tailwindcss": "^4.0.6",
     "typescript": "^5.7.2",
-    "vite": "^6.0.11"
+    "vite": "^6.4.3"
   }
 }

package.json

@@ -8,6 +8,14 @@
     "install:all": "pnpm install"
   },
   "devDependencies": {
-    "concurrently": "^9.1.2"
+    "concurrently": "^9.2.4"
+  },
+  "pnpm": {
+    "overrides": {
+      "postcss": ">=8.5.18",
+      "@babel/core": ">=7.29.6",
+      "nanoid": "3.3.16",
+      "tsx": "4.23.4"
+    }
   }
 }