deps updates

node_modules/cidr-regex/package.json

@@ -1,12 +1,25 @@
 {
   "name": "cidr-regex",
-  "version": "5.0.4",
+  "version": "5.0.5",
   "description": "Regular expression for matching IP addresses in CIDR notation",
   "author": "silverwind <me@silverwind.io>",
   "contributors": [
     "Felipe Apostol <flipjs.io@gmail.com> (http://flipjs.io/)"
   ],
   "repository": "silverwind/cidr-regex",
+  "keywords": [
+    "cidr",
+    "regex",
+    "regexp",
+    "ip",
+    "ipv4",
+    "ipv6",
+    "address",
+    "subnet",
+    "network",
+    "notation",
+    "match"
+  ],
   "license": "BSD-2-Clause",
   "type": "module",
   "sideEffects": false,
@@ -21,18 +34,18 @@
   },
   "devDependencies": {
     "@types/node": "25.6.0",
-    "@typescript/native-preview": "7.0.0-dev.20260420.1",
+    "@typescript/native-preview": "7.0.0-dev.20260427.1",
     "eslint": "10.2.1",
-    "eslint-config-silverwind": "131.0.5",
+    "eslint-config-silverwind": "132.0.0",
     "jest-extended": "7.0.0",
-    "tsdown": "0.21.9",
-    "tsdown-config-silverwind": "2.1.0",
+    "tsdown": "0.21.10",
+    "tsdown-config-silverwind": "2.1.1",
     "typescript": "6.0.3",
     "typescript-config-silverwind": "18.0.0",
-    "updates": "17.15.5",
-    "updates-config-silverwind": "2.1.0",
-    "versions": "15.0.0",
-    "vitest": "4.1.4",
-    "vitest-config-silverwind": "11.3.0"
+    "updates": "17.16.4",
+    "updates-config-silverwind": "2.1.1",
+    "versions": "15.0.1",
+    "vitest": "4.1.5",
+    "vitest-config-silverwind": "11.3.1"
   }
 }

node_modules/ip-address/dist/ipv6.js

@@ -536,7 +536,12 @@ class Address6 {
             this.address4 = new ipv4_1.Address4(this.parsedAddress4);
             for (let i = 0; i < this.address4.groups; i++) {
                 if (/^0[0-9]+/.test(this.address4.parsedAddress[i])) {
-                    throw new address_error_1.AddressError("IPv4 addresses can't have leading zeroes.", address.replace(constants4.RE_ADDRESS, this.address4.parsedAddress.map(spanLeadingZeroes4).join('.')));
+                    // The prefix groups haven't been through the bad-character check
+                    // yet, so escape them before including in the error HTML.
+                    const highlighted = this.address4.parsedAddress.map(spanLeadingZeroes4).join('.');
+                    const prefix = groups.slice(0, -1).map(helpers.escapeHtml).join(':');
+                    const separator = groups.length > 1 ? ':' : '';
+                    throw new address_error_1.AddressError("IPv4 addresses can't have leading zeroes.", `${prefix}${separator}${highlighted}`);
                 }
             }
             this.v4 = true;
@@ -896,10 +901,13 @@ class Address6 {
             formFunction = this.to4in6;
         }
         const form = formFunction.call(this);
+        const safeHref = helpers.escapeHtml(`${options.prefix}${form}`);
+        const safeForm = helpers.escapeHtml(form);
         if (options.className) {
-            return `<a href="${options.prefix}${form}" class="${options.className}">${form}</a>`;
+            const safeClass = helpers.escapeHtml(options.className);
+            return `<a href="${safeHref}" class="${safeClass}">${safeForm}</a>`;
         }
-        return `<a href="${options.prefix}${form}">${form}</a>`;
+        return `<a href="${safeHref}">${safeForm}</a>`;
     }
     /**
      * Groups an address
@@ -908,13 +916,13 @@ class Address6 {
     group() {
         if (this.elidedGroups === 0) {
             // The simple case
-            return helpers.simpleGroup(this.address).join(':');
+            return helpers.simpleGroup(this.addressMinusSuffix).join(':');
         }
         assert(typeof this.elidedGroups === 'number');
         assert(typeof this.elisionBegin === 'number');
         // The elided case
         const output = [];
-        const [left, right] = this.address.split('::');
+        const [left, right] = this.addressMinusSuffix.split('::');
         if (left.length) {
             output.push(...helpers.simpleGroup(left));
         }

node_modules/ip-address/dist/v6/helpers.js

@@ -1,26 +1,35 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.escapeHtml = escapeHtml;
 exports.spanAllZeroes = spanAllZeroes;
 exports.spanAll = spanAll;
 exports.spanLeadingZeroes = spanLeadingZeroes;
 exports.simpleGroup = simpleGroup;
+function escapeHtml(s) {
+    return s
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
 /**
  * @returns {String} the string with all zeroes contained in a <span>
  */
 function spanAllZeroes(s) {
-    return s.replace(/(0+)/g, '<span class="zero">$1</span>');
+    return escapeHtml(s).replace(/(0+)/g, '<span class="zero">$1</span>');
 }
 /**
  * @returns {String} the string with each character contained in a <span>
  */
 function spanAll(s, offset = 0) {
     const letters = s.split('');
     return letters
-        .map((n, i) => `<span class="digit value-${n} position-${i + offset}">${spanAllZeroes(n)}</span>`)
+        .map((n, i) => `<span class="digit value-${escapeHtml(n)} position-${i + offset}">${spanAllZeroes(n)}</span>`)
         .join('');
 }
 function spanLeadingZeroesSimple(group) {
-    return group.replace(/^(0+)/, '<span class="zero">$1</span>');
+    return escapeHtml(group).replace(/^(0+)/, '<span class="zero">$1</span>');
 }
 /**
  * @returns {String} the string with leading zeroes contained in a <span>

node_modules/ip-address/package.json

@@ -7,7 +7,7 @@
     "browser",
     "validation"
   ],
-  "version": "10.1.0",
+  "version": "10.1.1",
   "author": "Beau Gunderson <beau@beaugunderson.com> (https://beaugunderson.com/)",
   "license": "MIT",
   "main": "dist/ip-address.js",
@@ -17,28 +17,25 @@
     "build": "rm -rf dist; mkdir dist; tsc",
     "prepack": "npm run build",
     "release": "release-it",
-    "test-ci": "nyc mocha",
+    "test-ci": "c8 --experimental-monocart mocha",
     "test": "mocha",
     "watch": "mocha --watch"
   },
-  "nyc": {
-    "extension": [
-      ".ts"
+  "c8": {
+    "include": [
+      "src/**/*.ts"
     ],
     "exclude": [
       "**/*.d.ts",
-      ".eslintrc.js",
-      "coverage/",
-      "dist/",
-      "test/",
-      "tmp/"
+      "src/ip-address.ts",
+      "src/v4/constants.ts",
+      "src/v6/constants.ts"
     ],
     "reporter": [
       "html",
       "lcov",
       "text"
-    ],
-    "all": true
+    ]
   },
   "engines": {
     "node": ">= 12"
@@ -56,6 +53,7 @@
     "@types/mocha": "^10.0.8",
     "@typescript-eslint/eslint-plugin": "^8.8.0",
     "@typescript-eslint/parser": "^8.8.0",
+    "c8": "^11.0.0",
     "chai": "^5.1.1",
     "documentation": "^14.0.3",
     "eslint": "^8.50.0",
@@ -68,7 +66,7 @@
     "eslint-plugin-prettier": "^5.2.1",
     "eslint-plugin-sort-imports-es6-autofix": "^0.6.0",
     "mocha": "^10.7.3",
-    "nyc": "^17.1.0",
+    "monocart-coverage-reports": "^2.12.9",
     "prettier": "^3.3.3",
     "release-it": "^17.6.0",
     "source-map-support": "^0.5.21",

node_modules/socks/.claude/settings.local.json

@@ -0,0 +1,26 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(npm test:*)",
+      "Bash(npm run lint:*)",
+      "Bash(npm run build:*)",
+      "Bash(find:*)",
+      "Bash(wc:*)",
+      "Bash(git:*)",
+      "Bash(npm run:*)",
+      "Bash(npm install:*)",
+      "Bash(npm uninstall:*)",
+      "Bash(npx eslint:*)",
+      "Bash(gh issue:*)",
+      "Bash(npx vitest:*)",
+      "WebFetch(domain:www.openssh.com)",
+      "Bash(ls:*)",
+      "Bash(cat:*)",
+      "Bash(npm pack:*)",
+      "Bash(npx tsc:*)",
+      "Bash(node:*)",
+      "Bash(npm info:*)",
+      "Bash(cp:*)"
+    ]
+  }
+}

node_modules/socks/package.json

@@ -1,7 +1,7 @@
 {
   "name": "socks",
   "private": false,
-  "version": "2.8.7",
+  "version": "2.8.8",
   "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.",
   "main": "build/index.js",
   "typings": "typings/index.d.ts",
@@ -44,7 +44,7 @@
     "typescript": "^5.3.3"
   },
   "dependencies": {
-    "ip-address": "^10.0.1",
+    "ip-address": "^10.1.1",
     "smart-buffer": "^4.2.0"
   },
   "scripts": {