⬆️ Update dependencies (#10166)

* ⬆️ Update exporter dependencies * ⬆️ Update frontend dependencies * ⬆️ Update nodejs version devenv and docker images
2026-06-16 12:22:22 +00:00 · 2026-06-15 12:03:59 +02:00 · 2026-06-15 12:03:59 +02:00 · 61c52a665d
commit 61c52a665d
parent 79227c4de8
11 changed files with 658 additions and 277 deletions
--- a/docker/devenv/Dockerfile
+++ b/docker/devenv/Dockerfile
@ -32,7 +32,7 @@ RUN set -ex; \

 FROM base AS setup-node

-ENV NODE_VERSION=v24.15.0 \
+ENV NODE_VERSION=v24.16.0 \
    PATH=/opt/node/bin:$PATH

 RUN set -eux; \
--- a/docker/images/Dockerfile.backend
+++ b/docker/images/Dockerfile.backend
@ -5,7 +5,7 @@ ENV LANG='C.UTF-8' \
    LC_ALL='C.UTF-8' \
    JAVA_HOME="/opt/jdk" \
    DEBIAN_FRONTEND=noninteractive \
-    NODE_VERSION=v24.15.0 \
+    NODE_VERSION=v24.16.0 \
    TZ=Etc/UTC

 RUN set -ex; \
--- a/docker/images/Dockerfile.exporter
+++ b/docker/images/Dockerfile.exporter
@ -3,7 +3,7 @@ LABEL maintainer="Penpot <docker@penpot.app>"

 ENV LANG=en_US.UTF-8 \
    LC_ALL=en_US.UTF-8 \
-    NODE_VERSION=v24.15.0 \
+    NODE_VERSION=v24.16.0 \
    DEBIAN_FRONTEND=noninteractive \
    PATH=/opt/node/bin:/opt/imagick/bin:$PATH \
    PLAYWRIGHT_BROWSERS_PATH=/opt/penpot/browsers
--- a/exporter/package.json
+++ b/exporter/package.json
@ -20,7 +20,7 @@
    "playwright": "^1.60.0",
    "raw-body": "^3.0.2",
    "source-map-support": "^0.5.21",
-    "svgo": "penpot/svgo#v3.1",
+    "@penpot/svgo": "penpot/svgo#3.3.0",
    "undici": "^8.4.1",
    "xml-js": "^1.6.11",
    "xregexp": "^5.1.2"
--- a/exporter/pnpm-lock.yaml
+++ b/exporter/pnpm-lock.yaml
@ -4,10 +4,18 @@ settings:
  autoInstallPeers: true
  excludeLinksFromLockfile: false

+overrides:
+  lodash@<=4.17.23: ^4.17.24
+  lodash@>=4.0.0 <=4.17.22: ^4.17.23
+  lodash@>=4.0.0 <=4.17.23: ^4.17.24
+
 importers:

  .:
    dependencies:
+      '@penpot/svgo':
+        specifier: penpot/svgo#3.3.0
+        version: https://codeload.github.com/penpot/svgo/tar.gz/65b3a645df9edbe3c00acf4267dd06c2ca736021
      archiver:
        specifier: 8.0.0
        version: 8.0.0
@ -35,9 +43,6 @@ importers:
      source-map-support:
        specifier: ^0.5.21
        version: 0.5.21
-      svgo:
-        specifier: penpot/svgo#v3.1
-        version: https://codeload.github.com/penpot/svgo/tar.gz/a46262c12c0d967708395972c374eb2adead4180
      undici:
        specifier: ^8.4.1
        version: 8.4.1
@ -54,16 +59,16 @@ importers:

 packages:

-  '@babel/runtime-corejs3@7.28.4':
-    resolution: {integrity: sha512-h7iEYiW4HebClDEhtvFObtPmIvrd1SSfpI9EhOeKk4CtIK/ngBWFpuhCzhdmRKtg71ylcue+9I6dv54XYO1epQ==}
+  '@babel/runtime-corejs3@7.29.7':
+    resolution: {integrity: sha512-ppj9ouYku+RX0ljtgZd+KMO5mkM2bCqg8H2PYAFWnLsHEIKIdRojqbJ2i3eVHrisuxy7nOFCmngTDdWtUCdXUQ==}
    engines: {node: '>=6.9.0'}

  '@ioredis/commands@1.10.0':
    resolution: {integrity: sha512-UmeW7z4LfctwoQ5wkhVzgq8tXkreED2xZGpX+Bg+zA+WJFZCT6c062AfCK/Dfk81xZnnwdhJCUMkitihRaoC2Q==}

-  '@trysound/sax@0.2.0':
-    resolution: {integrity: sha512-L7z9BgrNEcYyUYtF+HaEfiS5ebkh9jXqbszz7pC0hRBPaatV0XjSD3+eHrpqFemQfgwiFF0QPIarnIihIDn7OA==}
-    engines: {node: '>=10.13.0'}
+  '@penpot/svgo@https://codeload.github.com/penpot/svgo/tar.gz/65b3a645df9edbe3c00acf4267dd06c2ca736021':
+    resolution: {gitHosted: true, integrity: sha512-hG/pgVEWhmHEFMU+evGZkB5kHauff5Zo6ZO+Ro7HY0efsQTJft6svM4isH5jDISeSVrZ1CDGnhWBXuqkztsTWw==, tarball: https://codeload.github.com/penpot/svgo/tar.gz/65b3a645df9edbe3c00acf4267dd06c2ca736021}
+    version: 3.3.0

  abort-controller@3.0.0:
    resolution: {integrity: sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg==}
@ -132,8 +137,9 @@ packages:
  base64-js@1.5.1:
    resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}

-  boolbase@1.0.0:
-    resolution: {integrity: sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==}
+  boolbase@2.0.0:
+    resolution: {integrity: sha512-DkVaaQHymRhpYEYo9x1oo7Q7B0Y6KJUsjm3c9eTyFDby4MHLBTwZ6ZDWBel5zrYxj1WsZgC5oLpiz+93MluXeA==}
+    engines: {node: '>=20.19.0'}

  brace-expansion@5.0.6:
    resolution: {integrity: sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==}
@ -165,8 +171,8 @@ packages:
    resolution: {integrity: sha512-TG2hpqe4ELx54QER/S3HQ9SRVnQnGBtKUz5bLQWtYAQ+o6GpgMs6sYUvaiJjVxb+UXwhRhAEP3m7LbsIZ77Hmw==}
    engines: {node: '>= 0.8'}

-  core-js-pure@3.47.0:
-    resolution: {integrity: sha512-BcxeDbzUrRnXGYIVAGFtcGQVNpFcUhVjr6W7F8XktvQW2iJP9e66GP6xdKotCRFlrxBvNIBrhwKteRXqMV86Nw==}
+  core-js-pure@3.49.0:
+    resolution: {integrity: sha512-XM4RFka59xATyJv/cS3O3Kml72hQXUeGRuuTmMYFxwzc9/7C8OYTaIR/Ji+Yt8DXzsFLNhat15cE/JP15HrCgw==}

  core-util-is@1.0.3:
    resolution: {integrity: sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==}
@ -180,20 +186,21 @@ packages:
    resolution: {integrity: sha512-IBWsY8xznyQrcHn8h4bC8/4ErNke5elzgG8GcqF4RFPw6aHkWWRc7Tgw6upjaTX/CT/yQgqYENkxYsTYN+hW2g==}
    engines: {node: '>=18'}

-  css-select@5.2.2:
-    resolution: {integrity: sha512-TizTzUddG/xYLA3NXodFM0fSbNizXjOKhqiQQwvhlspadZokn1KDy0NZFS0wuEubIYAV5/c1/lAr0TaaFXEXzw==}
+  css-select@7.0.0:
+    resolution: {integrity: sha512-snmjEVXy+1LnwXdxhYvTMj1d9tOh4HxkA1YmoayVBeeyR2C14Pum7fcxJIm4SswYspVy866eYNwlH6xC3/VH5g==}
+    engines: {node: '>=20.19.0'}

  css-tree@2.2.1:
    resolution: {integrity: sha512-OA0mILzGc1kCOCSJerOeqDxDQ4HOh+G8NbOJFOTgOCzpw7fCBubk0fEyxp8AgOL/jvLgYA/uV0cMbe43ElF1JA==}
    engines: {node: ^10 || ^12.20.0 || ^14.13.0 || >=15.0.0, npm: '>=7.0.0'}

-  css-tree@3.1.0:
-    resolution: {integrity: sha512-0eW44TGN5SQXU1mWSkKwFstI/22X2bG1nYzZTYMAWjylYURhse752YgbE4Cx46AC+bAvI+/dYTPRk1LqSUnu6w==}
+  css-tree@3.2.1:
+    resolution: {integrity: sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==}
    engines: {node: ^10 || ^12.20.0 || ^14.13.0 || >=15.0.0}

-  css-what@6.2.2:
-    resolution: {integrity: sha512-u/O3vwbptzhMs3L1fQE82ZSLHQQfto5gyZzwteVIEyeaY5Fc7R4dapF/BvRoSYFeqfBk4m0V1Vafq5Pjv25wvA==}
-    engines: {node: '>= 6'}
+  css-what@8.0.0:
+    resolution: {integrity: sha512-DH0Bqq3DNp5tdOReuNyAA+Ev4Y2GS5FMbZpeTLP6C4CDi0h5nL0BmUPChXw3o/qbHLDWHl49sbNqQVY7bMSDdw==}
+    engines: {node: '>=20.19.0'}

  csso@5.0.5:
    resolution: {integrity: sha512-0LrrStPOdJj+SPCCrGhzryycLjwcgUSHBtxNA8aIDxf0GLsRh1cKYhB00Gd1lDOS4yGH69+SNn13+TWbVHETFQ==}
@ -219,22 +226,25 @@ packages:
    resolution: {integrity: sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==}
    engines: {node: '>= 0.8'}

-  dom-serializer@2.0.0:
-    resolution: {integrity: sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg==}
+  dom-serializer@3.1.1:
+    resolution: {integrity: sha512-4MEa38/QexBob6gFNwu+EGdWvhJ1OKuNwdYY3Y3NyeWDQfnGeDYQUDfIRzWu5B5gsv03so2Uxd28YC6zrsx3Lw==}
+    engines: {node: '>=20.19.0'}

-  domelementtype@2.3.0:
-    resolution: {integrity: sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==}
+  domelementtype@3.0.0:
+    resolution: {integrity: sha512-umCQid3jKbDmVjx8jGaW7uUykm4DEUeyV21hPxNMo2nV955DhUThwqyOIDtreepP31hl84X7G5U9ZfsWvIB3Pg==}
+    engines: {node: '>=20.19.0'}

-  domhandler@5.0.3:
-    resolution: {integrity: sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==}
-    engines: {node: '>= 4'}
+  domhandler@6.0.1:
+    resolution: {integrity: sha512-gYzvtM72ZtxQO0T048kd6HWSbbGCNOUwcnfQ01cqIJ4X2IYKFFHZ5mKvrQETcFXxsRObZulDaKmy//R7TPtsBg==}
+    engines: {node: '>=20.19.0'}

-  domutils@3.2.2:
-    resolution: {integrity: sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw==}
+  domutils@4.0.2:
+    resolution: {integrity: sha512-qI4JLRKnSzqFqr7hAlS5xQDusBCjKSEG4t4+7aNrIQMHBcsC2TGEhuyABJdYkgSewL57PNLYEiibY2iPKhKpaA==}
+    engines: {node: '>=20.19.0'}

-  entities@4.5.0:
-    resolution: {integrity: sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==}
-    engines: {node: '>=0.12'}
+  entities@8.0.0:
+    resolution: {integrity: sha512-zwfzJecQ/Uej6tusMqwAqU/6KL2XaB2VZ2Jg54Je6ahNBGNH6Ek6g3jjNCF0fG9EWQKGZNddNjU5F1ZQn/sBnA==}
+    engines: {node: '>=20.19.0'}

  event-target-shim@5.0.1:
    resolution: {integrity: sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ==}
@ -263,8 +273,8 @@ packages:
    resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==}
    engines: {node: '>= 0.8'}

-  iconv-lite@0.7.1:
-    resolution: {integrity: sha512-2Tth85cXwGFHfvRgZWszZSvdo+0Xsqmw8k8ZwxScfcBneNUraK+dxRxRm24nszx80Y0TVio8kKLt5sLE7ZCLlw==}
+  iconv-lite@0.7.2:
+    resolution: {integrity: sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==}
    engines: {node: '>=0.10.0'}

  ieee754@1.2.1:
@ -291,20 +301,19 @@ packages:
  keygrip@1.1.0:
    resolution: {integrity: sha512-iYSchDJ+liQ8iwbSI2QqsQOvqv58eJCEanyJPJi+Khyu8smkcKSFUCbPwzFcL7YVtZ6eONjqRX/38caJ7QjRAQ==}
    engines: {node: '>= 0.6'}
-    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.

  lazystream@1.0.1:
    resolution: {integrity: sha512-b94GiNHQNy6JNTrt5w6zNyffMrNkXZb3KTkCZJb2V1xaEGCk093vkZ2jk3tpaeP33/OiXC+WvK9AxUebnf5nbw==}
    engines: {node: '>= 0.6.3'}

-  lodash@4.17.21:
-    resolution: {integrity: sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==}
+  lodash@4.18.1:
+    resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}

  mdn-data@2.0.28:
    resolution: {integrity: sha512-aylIc7Z9y4yzHYAJNuESG3hfhC+0Ibp/MAMiaOZgNv4pmEdFyfZhhhny4MNiAfWdBQ1RQ2mfDWmM1x8SvGyp8g==}

-  mdn-data@2.12.2:
-    resolution: {integrity: sha512-IEn+pegP1aManZuckezWCO+XZQDplx1366JoVhTpMpBB1sPey/SbveZQUosKiKiGYjg1wH4pMlNgXbCiYgihQA==}
+  mdn-data@2.27.1:
+    resolution: {integrity: sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==}

  minimatch@10.2.5:
    resolution: {integrity: sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==}
@ -317,8 +326,9 @@ packages:
    resolution: {integrity: sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==}
    engines: {node: '>=0.10.0'}

-  nth-check@2.1.1:
-    resolution: {integrity: sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==}
+  nth-check@3.0.1:
+    resolution: {integrity: sha512-GX0gsdbGVCgnRgbeGaubfjpBXyYRWOOCVeYh08bSQvDZqxz5ndXs1OTfAt/h36G1xvI94YIspsI0sVFqAV9+RQ==}
+    engines: {node: '>=20.19.0'}

  playwright-core@1.60.0:
    resolution: {integrity: sha512-9bW6zvX/m0lEbgTKJ6YppOKx8H3VOPBMOCFh2irXFOT4BbHgrx5hPjwJYLT40Lu+4qtD36qKc/Hn56StUW57IA==}
@ -369,8 +379,9 @@ packages:
  safer-buffer@2.1.2:
    resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}

-  sax@1.4.3:
-    resolution: {integrity: sha512-yqYn1JhPczigF94DMS+shiDMjDowYO6y9+wB/4WgO0Y19jWYk0lQ4tuG5KI7kj4FTp1wxPj5IFfcrz/s1c3jjQ==}
+  sax@1.6.0:
+    resolution: {integrity: sha512-6R3J5M4AcbtLUdZmRv2SygeVaM7IhrLXu9BmnOGmmACak8fiUtOsYNWUS4uK7upbmHIBbLBeFeI//477BKLBzA==}
+    engines: {node: '>=11.0.0'}

  setprototypeof@1.2.0:
    resolution: {integrity: sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==}
@ -402,11 +413,6 @@ packages:
  string_decoder@1.3.0:
    resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}

-  svgo@https://codeload.github.com/penpot/svgo/tar.gz/a46262c12c0d967708395972c374eb2adead4180:
-    resolution: {gitHosted: true, tarball: https://codeload.github.com/penpot/svgo/tar.gz/a46262c12c0d967708395972c374eb2adead4180}
-    version: 4.0.0
-    engines: {node: '>=16.0.0'}
-
  tar-stream@3.2.0:
    resolution: {integrity: sha512-ojzvCvVaNp6aOTFmG7jaRD0meowIAuPc3cMMhSgKiVWws1GyHbGd/xvnyuRKcKlMpt3qvxx6r0hreCNITP9hIg==}

@ -460,13 +466,19 @@ packages:

 snapshots:

-  '@babel/runtime-corejs3@7.28.4':
+  '@babel/runtime-corejs3@7.29.7':
    dependencies:
-      core-js-pure: 3.47.0
+      core-js-pure: 3.49.0

  '@ioredis/commands@1.10.0': {}

-  '@trysound/sax@0.2.0': {}
+  '@penpot/svgo@https://codeload.github.com/penpot/svgo/tar.gz/65b3a645df9edbe3c00acf4267dd06c2ca736021':
+    dependencies:
+      css-select: 7.0.0
+      css-tree: 3.2.1
+      csso: 5.0.5
+      lodash: 4.18.1
+      sax: 1.6.0

  abort-controller@3.0.0:
    dependencies:
@ -528,7 +540,7 @@ snapshots:

  base64-js@1.5.1: {}

-  boolbase@1.0.0: {}
+  boolbase@2.0.0: {}

  brace-expansion@5.0.6:
    dependencies:
@ -560,7 +572,7 @@ snapshots:
      depd: 2.0.0
      keygrip: 1.1.0

-  core-js-pure@3.47.0: {}
+  core-js-pure@3.49.0: {}

  core-util-is@1.0.3: {}

@ -571,25 +583,25 @@ snapshots:
      crc-32: 1.2.2
      readable-stream: 4.7.0

-  css-select@5.2.2:
+  css-select@7.0.0:
    dependencies:
-      boolbase: 1.0.0
-      css-what: 6.2.2
-      domhandler: 5.0.3
-      domutils: 3.2.2
-      nth-check: 2.1.1
+      boolbase: 2.0.0
+      css-what: 8.0.0
+      domhandler: 6.0.1
+      domutils: 4.0.2
+      nth-check: 3.0.1

  css-tree@2.2.1:
    dependencies:
      mdn-data: 2.0.28
      source-map-js: 1.2.1

-  css-tree@3.1.0:
+  css-tree@3.2.1:
    dependencies:
-      mdn-data: 2.12.2
+      mdn-data: 2.27.1
      source-map-js: 1.2.1

-  css-what@6.2.2: {}
+  css-what@8.0.0: {}

  csso@5.0.5:
    dependencies:
@ -605,25 +617,25 @@ snapshots:

  depd@2.0.0: {}

-  dom-serializer@2.0.0:
+  dom-serializer@3.1.1:
    dependencies:
-      domelementtype: 2.3.0
-      domhandler: 5.0.3
-      entities: 4.5.0
+      domelementtype: 3.0.0
+      domhandler: 6.0.1
+      entities: 8.0.0

-  domelementtype@2.3.0: {}
+  domelementtype@3.0.0: {}

-  domhandler@5.0.3:
+  domhandler@6.0.1:
    dependencies:
-      domelementtype: 2.3.0
+      domelementtype: 3.0.0

-  domutils@3.2.2:
+  domutils@4.0.2:
    dependencies:
-      dom-serializer: 2.0.0
-      domelementtype: 2.3.0
-      domhandler: 5.0.3
+      dom-serializer: 3.1.1
+      domelementtype: 3.0.0
+      domhandler: 6.0.1

-  entities@4.5.0: {}
+  entities@8.0.0: {}

  event-target-shim@5.0.1: {}

@ -650,7 +662,7 @@ snapshots:
      statuses: 2.0.2
      toidentifier: 1.0.1

-  iconv-lite@0.7.1:
+  iconv-lite@0.7.2:
    dependencies:
      safer-buffer: 2.1.2

@ -684,11 +696,11 @@ snapshots:
    dependencies:
      readable-stream: 2.3.8

-  lodash@4.17.21: {}
+  lodash@4.18.1: {}

  mdn-data@2.0.28: {}

-  mdn-data@2.12.2: {}
+  mdn-data@2.27.1: {}

  minimatch@10.2.5:
    dependencies:
@ -698,9 +710,9 @@ snapshots:

  normalize-path@3.0.0: {}

-  nth-check@2.1.1:
+  nth-check@3.0.1:
    dependencies:
-      boolbase: 1.0.0
+      boolbase: 2.0.0

  playwright-core@1.60.0: {}

@ -718,7 +730,7 @@ snapshots:
    dependencies:
      bytes: 3.1.2
      http-errors: 2.0.1
-      iconv-lite: 0.7.1
+      iconv-lite: 0.7.2
      unpipe: 1.0.0

  readable-stream@2.3.8:
@ -755,7 +767,7 @@ snapshots:

  safer-buffer@2.1.2: {}

-  sax@1.4.3: {}
+  sax@1.6.0: {}

  setprototypeof@1.2.0: {}

@ -789,14 +801,6 @@ snapshots:
    dependencies:
      safe-buffer: 5.2.1

-  svgo@https://codeload.github.com/penpot/svgo/tar.gz/a46262c12c0d967708395972c374eb2adead4180:
-    dependencies:
-      '@trysound/sax': 0.2.0
-      css-select: 5.2.2
-      css-tree: 3.1.0
-      csso: 5.0.5
-      lodash: 4.17.21
-
  tar-stream@3.2.0:
    dependencies:
      b4a: 1.8.1
@ -835,11 +839,11 @@ snapshots:

  xml-js@1.6.11:
    dependencies:
-      sax: 1.4.3
+      sax: 1.6.0

  xregexp@5.1.2:
    dependencies:
-      '@babel/runtime-corejs3': 7.28.4
+      '@babel/runtime-corejs3': 7.29.7

  zip-stream@7.0.5:
    dependencies:
--- a/exporter/pnpm-workspace.yaml
+++ b/exporter/pnpm-workspace.yaml
@ -1,2 +1,9 @@
 allowBuilds:
  core-js-pure: false
+minimumReleaseAgeExclude:
+  - lodash@4.17.24
+  - lodash@4.17.23
+overrides:
+  lodash@<=4.17.23: ^4.17.24
+  lodash@>=4.0.0 <=4.17.22: ^4.17.23
+  lodash@>=4.0.0 <=4.17.23: ^4.17.24
--- a/exporter/src/app/renderer/svg.cljs
+++ b/exporter/src/app/renderer/svg.cljs
@ -6,7 +6,7 @@

 (ns app.renderer.svg
  (:require
-   ["svgo" :as svgo]
+   ["@penpot/svgo" :as svgo]
   ["xml-js" :as xml]
   [app.browser :as bw]
   [app.common.data :as d]
--- a/frontend/package.json
+++ b/frontend/package.json
@ -52,17 +52,17 @@
    "@penpot/draft-js": "link:packages/draft-js",
    "@penpot/mousetrap": "link:packages/mousetrap",
    "@penpot/plugins-runtime": "link:../plugins/libs/plugins-runtime",
-    "@penpot/svgo": "github:penpot/svgo#v3.2",
+    "@penpot/svgo": "penpot/svgo#3.3.0",
    "@penpot/text-editor": "link:text-editor",
    "@penpot/tokenscript": "link:packages/tokenscript",
    "@penpot/ui": "link:packages/ui",
    "@playwright/test": "1.60.0",
-    "@storybook/addon-docs": "10.4.3",
-    "@storybook/addon-themes": "10.4.3",
-    "@storybook/addon-vitest": "10.4.3",
-    "@storybook/react-vite": "10.4.3",
+    "@storybook/addon-docs": "10.4.4",
+    "@storybook/addon-themes": "10.4.4",
+    "@storybook/addon-vitest": "10.4.4",
+    "@storybook/react-vite": "10.4.4",
    "@tokens-studio/sd-transforms": "2.0.3",
-    "@types/node": "^25.9.2",
+    "@types/node": "^25.9.3",
    "@vitest/browser": "4.1.8",
    "@vitest/browser-playwright": "^4.1.8",
    "@vitest/coverage-v8": "4.1.8",
@ -71,7 +71,7 @@
    "compression": "^1.8.1",
    "concurrently": "^10.0.3",
    "date-fns": "^4.4.0",
-    "esbuild": "^0.28.0",
+    "esbuild": "^0.28.1",
    "eventsource-parser": "^3.1.0",
    "express": "^5.1.0",
    "fancy-log": "^2.0.0",
@ -110,7 +110,7 @@
    "sax": "^1.6.0",
    "scheduler": "^0.27.0",
    "source-map-support": "^0.5.21",
-    "storybook": "10.4.3",
+    "storybook": "10.4.4",
    "style-dictionary": "5.4.4",
    "stylelint": "^17.13.0",
    "stylelint-config-standard-scss": "^17.0.0",
--- a/frontend/pnpm-lock.yaml
+++ b/frontend/pnpm-lock.yaml
--- a/package.json
+++ b/package.json
@ -4,7 +4,7 @@
  "license": "MPL-2.0",
  "author": "Kaleidos INC Sucursal en España SL",
  "private": true,
-  "packageManager": "pnpm@10.33.0+sha512.10568bb4a6afb58c9eb3630da90cc9516417abebd3fabbe6739f0ae795728da1491e9db5a544c76ad8eb7570f5c4bb3d6c637b2cb41bfdcdb47fa823c8649319",
+  "packageManager": "pnpm@11.6.0+sha512.9a36518224080c6fe5165afdcfe79bfa118c29be703f3f462b1e32efe1e98e47e8750b148e08286250aad4113cc7993ca413c4e2cd447752708c2ee5751bc95f",
  "repository": {
    "type": "git",
    "url": "https://github.com/penpot/penpot"
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@ -1,2 +1,3 @@
 allowBuilds:
+  esbuild: true
  opencode-ai: true