From 950bfe43c71e83a4cb2fa9967be12a24efe4381c Mon Sep 17 00:00:00 2001
From: automated-signal <37887102+automated-signal@users.noreply.github.com>
Date: Thu, 23 Jul 2026 15:11:13 -0500
Subject: [PATCH] Update linkify-it and add a few more ignore cases

Co-authored-by: Scott Nonnenberg <scott@signal.org>
---
 package.json        |  2 +-
 pnpm-lock.yaml      | 10 +++++-----
 pnpm-workspace.yaml | 17 +++++++++++------
 3 files changed, 17 insertions(+), 12 deletions(-)

diff --git a/package.json b/package.json
index 01c84c5935..f13bfacbe0 100644
--- a/package.json
+++ b/package.json
@@ -268,7 +268,7 @@
     "js-yaml": "4.1.1",
     "json-to-ast": "2.1.0",
     "knip": "6.14.0",
-    "linkify-it": "5.0.1",
+    "linkify-it": "5.0.2",
     "lodash": "4.18.1",
     "log-symbols": "7.0.1",
     "lru-cache": "11.2.7",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 29973568da..a3f1a711d6 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -471,8 +471,8 @@ importers:
         specifier: 6.14.0
         version: 6.14.0(@emnapi/core@1.11.1)(@emnapi/runtime@1.11.1)
       linkify-it:
-        specifier: 5.0.1
-        version: 5.0.1
+        specifier: 5.0.2
+        version: 5.0.2
       lodash:
         specifier: 4.18.1
         version: 4.18.1
@@ -8500,8 +8500,8 @@ packages:
   lines-and-columns@1.2.4:
     resolution: {integrity: sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==, tarball: https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz}
 
-  linkify-it@5.0.1:
-    resolution: {integrity: sha512-wVoTjP4Q6R0NW5hiZkVJaFZPWgtXfoGF+6LucL3/FtiNjmcHhYjEr5f1Kqjirc1nBW07J/ZuRFumqr2oqccEWg==, tarball: https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.1.tgz}
+  linkify-it@5.0.2:
+    resolution: {integrity: sha512-ONTm2jCMAVZjgQa/Fy1kScXsuOoF5NPTsoFBdE1KVIZ2vAh/r9+Bqo+0jINCBYnavTPQZz38QzFTme79ENoN3Q==, tarball: https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.2.tgz}
 
   loader-runner@4.3.0:
     resolution: {integrity: sha512-3R/1M+yS3j5ou80Me59j7F9IMs4PXs3VqRrm0TU3AbKPxlmpoY1TNscJV/oGJXo8qCatFGTfDbY6W6ipGOYXfg==, tarball: https://registry.npmjs.org/loader-runner/-/loader-runner-4.3.0.tgz}
@@ -20120,7 +20120,7 @@ snapshots:
 
   lines-and-columns@1.2.4: {}
 
-  linkify-it@5.0.1:
+  linkify-it@5.0.2:
     dependencies:
       uc.micro: 2.1.0
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 7c4bcfde92..4dce43d414 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -41,12 +41,17 @@ auditConfig:
     - GHSA-9wfr-w7mm-pc7f # react-devtools > electron
     - GHSA-c27g-q93r-2cwf # sticker-creator > vite
     - GHSA-2w69-qvjg-hvjx # sticker-creator > @remix-run/router
-    - GHSA-23hp-3jrh-7fpw # dev-time usage
-    - GHSA-3jxr-9vmj-r5cp # dev tools
-    - GHSA-52cp-r559-cp3m # dev tools
-    - GHSA-8x88-c5mf-7j5w # dev-time usage
-    - GHSA-395f-4hp3-45gv # dev tools
-    - GHSA-gcfj-64vw-6mp9 # storybook
+    - GHSA-23hp-3jrh-7fpw # node-tar, only used at dev-time
+    - GHSA-3jxr-9vmj-r5cp # brace-expansion, only used at dev-time
+    - GHSA-52cp-r559-cp3m # js-yaml, only used at dev-time
+    - GHSA-8x88-c5mf-7j5w # tar, only used at dev-time
+    - GHSA-395f-4hp3-45gv # shell-quote, only used at dev-time
+    - GHSA-gcfj-64vw-6mp9 # axios, only used at dev-time
+    - GHSA-v56q-mh7h-f735 # used by sass, only used at dev-time
+    - GHSA-xvcm-6775-5m9r # used by sass, only used at dev-time
+    - GHSA-2p49-hgcm-8545 # svgo, only used at dev-time
+    - GHSA-v2hh-gcrm-f6hx # fast-uri, only used at dev-time
+    - GHSA-4c8g-83qw-93j6 # fast-uri, only used at dev-time
 
 overrides:
   '@electron/rebuild>node-gyp': '12.4.0'