@quasar/app relies on minimist 1.2.5 but should be 1.2.6 due to security issues

What happened?

After an npm audit:

npm audit report
minimist  <=1.2.5
Severity: high
Prototype Pollution in minimist - https://github.com/advisories/GHSA-xvch-5gv4-984h
No fix available
node_modules/minimist
  @quasar/app  *
  Depends on vulnerable versions of minimist
  node_modules/@quasar/app
2 high severity vulnerabilities
Some issues need review, and may require choosing
a different dependency.

What did you expect to happen?

That @quasar/app should use minimist@1.2.6

Reproduction URL

https://github.com/quasarframework/quasar/blob/dev/cli/package.json

How to reproduce?

1. npm init
2. npm install @quasar/app and then you get 2 high severity vulnerabilities
3. npm audit

Step 3 shows:

# npm audit report

minimist  <=1.2.5
Severity: high
Prototype Pollution in minimist - https://github.com/advisories/GHSA-xvch-5gv4-984h
No fix available
node_modules/minimist
  @quasar/app  *
  Depends on vulnerable versions of minimist
  node_modules/@quasar/app

2 high severity vulnerabilities

Flavour

Quasar CLI (@quasar/cli | @quasar/app)

Areas

Quasar CLI Commands/Configuration (@quasar/cli | @quasar/app)

Platforms/Browsers

Other

Quasar info output

No response

Relevant log output

No response

Additional context

No response

[onursezn]

@rstoenescu thank you it worked after upgrading the @quasar/app to 3.3.3 and running your suggested command.

[MilosPaunovic]

Package @quasar/app diverged to @quasar/app-vite and @quasar/app-webpack. Run commands below for the CLI to handle updates for you.

npm i -d @quasar/cli@latest
quasar upgrade -i