mirror of
https://github.com/MHSanaei/3x-ui.git
synced 2026-11-01 02:35:02 +03:00
chore(deps): bump frontend and docs deps, clear npm audit findings
Bump vite, oxlint/oxfmt, msw, jsdom and plugin-react in the frontend, and fumadocs, lucide-react, oxlint/oxfmt, postcss and pnpm in docs. npm audit reported seroval <=1.6.2 (critical) via solid-js, which the react-query devtools pull in pinned to ~1.5.4, and sprintf-js (no patched release) via remarkable's argparse@1. `npm audit fix --force` "fixed" both by downgrading swagger-ui-react to 3.23.3, which brings in far worse advisories. Instead override seroval/seroval-plugins to ^1.6.8 and give remarkable argparse@2; remarkable only requires argparse from its unused CLI entry, so the bundled library is unaffected. pnpm appends an exact-version minimumReleaseAgeExclude entry on every update of a too-fresh release and never prunes them. Drop the stale ones; keep only fumadocs 16.16.2 and oxlint/oxfmt, still inside the 1-day cutoff.
This commit is contained in:
+11
-6
@@ -66,26 +66,28 @@
|
||||
"@types/react": "^19.3.0",
|
||||
"@types/react-dom": "^19.3.0",
|
||||
"@types/swagger-ui-react": "^5.18.0",
|
||||
"@vitejs/plugin-react": "^6.1.1",
|
||||
"@vitejs/plugin-react": "^6.1.2",
|
||||
"@vitest/browser-playwright": "5.0.3",
|
||||
"@vitest/coverage-v8": "^5.0.3",
|
||||
"husky": "^9.1.7",
|
||||
"jsdom": "^30.1.1",
|
||||
"jsdom": "^30.1.2",
|
||||
"lint-staged": "^17.6.0",
|
||||
"msw": "^3.0.1",
|
||||
"oxfmt": "0.71.0",
|
||||
"oxlint": "1.86.0",
|
||||
"msw": "^3.0.2",
|
||||
"oxfmt": "0.72.0",
|
||||
"oxlint": "1.87.0",
|
||||
"oxlint-tsgolint": "^7.0.2003",
|
||||
"playwright": "^1.63.0",
|
||||
"storybook": "^10.6.1",
|
||||
"typescript": "7.0.2",
|
||||
"vite": "8.3.2",
|
||||
"vite": "8.3.3",
|
||||
"vitest": "^5.0.3"
|
||||
},
|
||||
"overrides": {
|
||||
"dompurify": "^3.4.15",
|
||||
"react-copy-to-clipboard": "^5.1.1",
|
||||
"react-inspector": "^9.0.0",
|
||||
"seroval": "^1.6.8",
|
||||
"seroval-plugins": "^1.6.8",
|
||||
"react-debounce-input": {
|
||||
"react": "^19.0.0"
|
||||
},
|
||||
@@ -100,6 +102,9 @@
|
||||
"vitest": "^5.0.0",
|
||||
"@vitest/browser-playwright": "^5.0.0",
|
||||
"@vitest/browser": "^5.0.0"
|
||||
},
|
||||
"remarkable": {
|
||||
"argparse": "^2.0.1"
|
||||
}
|
||||
},
|
||||
"allowScripts": {
|
||||
|
||||
Reference in New Issue
Block a user