fix(deps): update dependency systeminformation to v5.27.14 [security] [ci skip] (#17003)

* fix(deps): update dependency systeminformation to v5.27.14 [security]

* update whitelist to force update systeminformation package

* bump other dependencies to fix dep error

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: kakkokari-gtyih <67428053+kakkokari-gtyih@users.noreply.github.com>
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>

packages/backend/package.json

@@ -71,11 +71,11 @@
 		"utf-8-validate": "6.0.5"
 	},
 	"dependencies": {
-		"@aws-sdk/client-s3": "3.947.0",
+		"@aws-sdk/client-s3": "3.948.0",
-		"@aws-sdk/lib-storage": "3.947.0",
+		"@aws-sdk/lib-storage": "3.948.0",
 		"@discordapp/twemoji": "16.0.1",
 		"@fastify/accepts": "5.0.4",
-		"@fastify/cors": "11.1.0",
+		"@fastify/cors": "11.2.0",
 		"@fastify/express": "4.0.2",
 		"@fastify/http-proxy": "11.4.1",
 		"@fastify/multipart": "9.3.0",
@@ -166,7 +166,7 @@
 		"slacc": "0.0.10",
 		"strict-event-emitter-types": "2.0.0",
 		"stringz": "2.1.0",
-		"systeminformation": "5.27.12",
+		"systeminformation": "5.27.14",
 		"tinycolor2": "1.6.0",
 		"tmp": "0.2.5",
 		"tsc-alias": "1.8.16",
@@ -207,7 +207,7 @@
 		"@types/rename": "1.0.7",
 		"@types/sanitize-html": "2.16.0",
 		"@types/semver": "7.7.1",
-		"@types/simple-oauth2": "5.0.7",
+		"@types/simple-oauth2": "5.0.8",
 		"@types/sinonjs__fake-timers": "15.0.1",
 		"@types/supertest": "6.0.3",
 		"@types/tinycolor2": "1.4.6",

packages/frontend-embed/package.json

@@ -26,7 +26,7 @@
 		"misskey-js": "workspace:*",
 		"punycode.js": "2.3.1",
 		"rollup": "4.53.3",
-		"sass": "1.95.0",
+		"sass": "1.95.1",
 		"shiki": "3.19.0",
 		"tinycolor2": "1.6.0",
 		"uuid": "13.0.0",
@@ -61,8 +61,8 @@
 		"tsx": "4.21.0",
 		"typescript": "5.9.3",
 		"vite-plugin-turbosnap": "1.0.3",
-		"vue-component-type-helpers": "3.1.7",
+		"vue-component-type-helpers": "3.1.8",
 		"vue-eslint-parser": "10.2.0",
-		"vue-tsc": "3.1.7"
+		"vue-tsc": "3.1.8"
 	}
 }

packages/frontend/package.json

@@ -55,7 +55,7 @@
 		"is-file-animated": "1.0.2",
 		"json5": "2.2.3",
 		"matter-js": "0.20.0",
-		"mediabunny": "1.25.7",
+		"mediabunny": "1.25.8",
 		"mfm-js": "0.25.0",
 		"misskey-bubble-game": "workspace:*",
 		"misskey-js": "workspace:*",
@@ -66,7 +66,7 @@
 		"qr-scanner": "1.4.2",
 		"rollup": "4.53.3",
 		"sanitize-html": "2.17.0",
-		"sass": "1.95.0",
+		"sass": "1.95.1",
 		"shiki": "3.19.0",
 		"textarea-caret": "3.1.0",
 		"three": "0.181.2",
@@ -82,7 +82,7 @@
 		"@misskey-dev/summaly": "5.2.5",
 		"@storybook/addon-essentials": "8.6.14",
 		"@storybook/addon-interactions": "8.6.14",
-		"@storybook/addon-links": "10.1.4",
+		"@storybook/addon-links": "10.1.5",
 		"@storybook/addon-mdx-gfm": "8.6.14",
 		"@storybook/addon-storysource": "8.6.14",
 		"@storybook/blocks": "8.6.14",
@@ -90,13 +90,13 @@
 		"@storybook/core-events": "8.6.14",
 		"@storybook/manager-api": "8.6.14",
 		"@storybook/preview-api": "8.6.14",
-		"@storybook/react": "10.1.4",
+		"@storybook/react": "10.1.5",
-		"@storybook/react-vite": "10.1.4",
+		"@storybook/react-vite": "10.1.5",
 		"@storybook/test": "8.6.14",
 		"@storybook/theming": "8.6.14",
 		"@storybook/types": "8.6.14",
-		"@storybook/vue3": "10.1.4",
+		"@storybook/vue3": "10.1.5",
-		"@storybook/vue3-vite": "10.1.4",
+		"@storybook/vue3-vite": "10.1.5",
 		"@tabler/icons-webfont": "3.35.0",
 		"@testing-library/vue": "8.1.0",
 		"@types/canvas-confetti": "1.9.0",
@@ -133,7 +133,7 @@
 		"react-dom": "19.2.1",
 		"seedrandom": "3.0.5",
 		"start-server-and-test": "2.1.3",
-		"storybook": "10.1.4",
+		"storybook": "10.1.5",
 		"storybook-addon-misskey-theme": "github:misskey-dev/storybook-addon-misskey-theme",
 		"tsx": "4.21.0",
 		"typescript": "5.9.3",
@@ -141,7 +141,7 @@
 		"vite-plugin-turbosnap": "1.0.3",
 		"vitest": "4.0.15",
 		"vitest-fetch-mock": "0.4.5",
-		"vue-component-type-helpers": "3.1.7",
+		"vue-component-type-helpers": "3.1.8",
 		"vue-eslint-parser": "10.2.0",
 		"vue-tsc": "3.1.8"
 	}

pnpm-workspace.yaml

@@ -35,5 +35,4 @@ ignorePatchFailures: false
 minimumReleaseAge: 10080 # delay 7days to mitigate supply-chain attack
 minimumReleaseAgeExclude:
   - '@syuilo/aiscript'
-  - vue-tsc
+  - systeminformation # 脆弱性対応。そのうち消すこと
-  - '@vue/language-core'