fix non-impacting but noisy dependency vulnerabilities

Author: acao

.changeset/tiny-rocks-invite.md

@@ -0,0 +1,5 @@
+---
+"codemirror-json-schema": patch
+---
+
+Fix vulnerability message for json-schema type dependency

.github/workflows/test.yml

@@ -37,3 +37,6 @@ jobs:
 
       - name: Test
         run: pnpm test:coverage
+
+      - name: Vulnerability Audit
+        run: pnpm audit --prod

package.json

@@ -55,7 +55,7 @@
     "@sagold/json-pointer": "^5.1.1",
     "@types/json-schema": "^7.0.12",
     "@types/node": "^20.4.2",
-    "json-schema": "^0.2.3",
+    "json-schema": "^0.4.0",
     "json-schema-library": "^8.0.0"
   },
   "optionalDependencies": {
@@ -76,16 +76,16 @@
     "@codemirror/commands": "^6.2.4",
     "@codemirror/theme-one-dark": "^6.1.2",
     "@evilmartians/lefthook": "^1.4.6",
-    "@vitest/coverage-v8": "^0.33.0",
+    "@vitest/coverage-v8": "^0.34.6",
     "codemirror": "^6.0.1",
     "codemirror-json5": "^1.0.3",
     "happy-dom": "^10.3.2",
     "json5": "^2.2.3",
     "typedoc": "^0.24.8",
     "typedoc-plugin-markdown": "^3.15.3",
     "typescript": "^5.1.6",
-    "vite": "^4.4.4",
-    "vitest": "0.33.0",
+    "vite": "^4.5.0",
+    "vitest": "0.34.6",
     "vitest-dom": "^0.1.0"
   },
   "scripts": {