fix: remove vulnerable dependencies (#24)

Dockerfile

@@ -2,10 +2,11 @@
 FROM node:18 as build
 WORKDIR /app
 
-# install pnpm
-RUN npm i -g [email protected]
-
 COPY pnpm-lock.yaml package.json ./
+
+# install pnpm as defined in package.json
+RUN npm i -g $(node -p "require('./package.json').packageManager")
+
 RUN pnpm install --frozen-lockfile
 
 COPY . ./

example/package.json

@@ -15,20 +15,20 @@
   "dependencies": {
     "discord-player-plus": "^2.0.0",
     "discord.js": "^14.11.0",
-    "dotenv": "^16.1.4"
+    "dotenv": "^16.3.1"
   },
   "devDependencies": {
-    "@types/node": "^18.16.18",
-    "@typescript-eslint/eslint-plugin": "^5.59.11",
-    "@typescript-eslint/parser": "^5.59.11",
-    "eslint": "^8.42.0",
-    "eslint-config-prettier": "^8.8.0",
+    "@types/node": "^18.17.1",
+    "@typescript-eslint/eslint-plugin": "^5.62.0",
+    "@typescript-eslint/parser": "^5.62.0",
+    "eslint": "^8.46.0",
+    "eslint-config-prettier": "^8.9.0",
     "eslint-plugin-prettier": "^4.2.1",
-    "lint-staged": "^13.2.2",
+    "lint-staged": "^13.2.3",
     "prettier": "^2.8.8",
-    "simple-git-hooks": "^2.8.1",
+    "simple-git-hooks": "^2.9.0",
     "tsup": "^6.7.0",
-    "typescript": "^5.1.3"
+    "typescript": "~5.1.6"
   },
   "simple-git-hooks": {
     "pre-commit": "npx lint-staged"

package.json

@@ -2,7 +2,7 @@
   "name": "discord-player-plus",
   "description": "Library for quickly creating discord music and sound bots using discord.js v14.",
   "version": "2.0.0",
-  "packageManager": "pnpm@8.5.0",
+  "packageManager": "pnpm@8.6.10",
   "license": "MIT",
   "homepage": "https://discordplayerplus.lars-rickert.de",
   "files": [
@@ -47,7 +47,7 @@
   },
   "dependencies": {
     "deepmerge-ts": "^5.1.0",
-    "discord-api-types": "~0.37.43",
+    "discord-api-types": "~0.37.50",
     "isomorphic-unfetch": "^4.0.2",
     "libsodium-wrappers": "~0.7.11",
     "music-metadata": "^7.13.4",
@@ -58,22 +58,22 @@
   "devDependencies": {
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/git": "^10.0.1",
-    "@types/node": "^18.16.18",
-    "@typescript-eslint/eslint-plugin": "^5.59.11",
-    "@typescript-eslint/parser": "^5.59.11",
-    "@vitest/coverage-v8": "^0.32.0",
-    "eslint": "^8.42.0",
-    "eslint-config-prettier": "^8.8.0",
+    "@types/node": "^18.17.1",
+    "@typescript-eslint/eslint-plugin": "^5.62.0",
+    "@typescript-eslint/parser": "^5.62.0",
+    "@vitest/coverage-v8": "^0.33.0",
+    "eslint": "^8.46.0",
+    "eslint-config-prettier": "^8.9.0",
     "eslint-plugin-prettier": "^4.2.1",
-    "lint-staged": "^13.2.2",
+    "lint-staged": "^13.2.3",
     "prettier": "^2.8.8",
-    "semantic-release": "^21.0.5",
-    "simple-git-hooks": "^2.8.1",
+    "semantic-release": "^21.0.7",
+    "simple-git-hooks": "^2.9.0",
     "tsup": "^6.7.0",
-    "typescript": "^5.1.3",
-    "vitepress": "1.0.0-alpha.75",
-    "vitest": "~0.32.0",
-    "vitest-mock-extended": "^1.1.3"
+    "typescript": "^5.1.6",
+    "vitepress": "1.0.0-beta.6",
+    "vitest": "~0.33.0",
+    "vitest-mock-extended": "^1.1.4"
   },
   "simple-git-hooks": {
     "pre-commit": "npx lint-staged"