Commit Graph

33 Commits

Author SHA1 Message Date
yxsj245
cde368fb35 chore(client): 升级 react-router-dom 到 7.18.2 修复安全漏洞
- 将 react-router-dom 从 6.30.3 升级到 7.18.2,修复了 3 个重要安全漏洞
- 移除了 BrowserRouter 的 future prop,v7 中默认启用相关特性
- 更新 package-lock.json,移除旧依赖 @remix-run/router,新增 cookie 和 set-cookie-parser
- 保持与 React 18 和现有生态兼容,确保无破坏性变更
- 更新依赖文档,说明此次升级的安全修复和兼容性细节
- 依然保留部分不影响项目的 RSC Mode CSRF 漏洞警告,可在 Dependabot 中标记忽略
2026-07-29 21:01:11 +08:00
yxsj245
37706db03d chore(deps): 升级多个依赖包版本
- 将 @types/node 升级至 26.1.2,undici-types 升级至 8.3.0
- 升级 b4a、bare-events、bare-fs、bare-path、bare-stream、bare-url 等库版本
- 升级 brace-expansion、concurrently、fs-extra、iconv-lite、jsonfile、minimatch 等工具依赖
- 升级 shell-quote、streamx、tar、tar-stream、typescript、undici-types 等包版本
- 客户端相关依赖如 @ant-design/icons-svg、@babel/plugin-transform-react-jsx-self、@babel/runtime 等也做了升级
- 更新 Rollup 相关包版本至 4.62.3,提升构建工具稳定性和性能
- 多数依赖为开发环境依赖,涉及安全和兼容性修复
2026-07-29 20:53:14 +08:00
yxsj245
127456dd38 build: 更新前后端依赖版本与配置
1.  调整server端esbuild依赖位置至overrides并新增js-yaml固定版本
2.  更新client端@vitejs/plugin-react与vite依赖到最新版本
3.  清理并更新server端lock文件中的冗余依赖与版本配置
2026-06-20 17:11:57 +08:00
yxsj245
11a4f957e3 fix: 修复响应头content-length解析可能的类型错误,统一处理空值
1.  将多处直接对response.headers['content-length']进行parseInt的代码,改为先通过String()包装处理空值情况,避免潜在的类型转换报错
2.  为factorio-deployer中的content-type获取添加了空值默认处理
3.  更新了项目依赖包版本并整理了dev依赖顺序
2026-06-20 17:07:53 +08:00
yxsj245
7c39453b24 Upgrade node-cron and postcss to fix Dependabot alerts 2026-04-30 09:15:30 +08:00
yxsj245
9921f830f5 Upgrade follow-redirects to 1.16.0 2026-04-22 16:04:52 +08:00
yxsj245
0c5f519293 发布版本 2026-04-09 12:17:54 +08:00
yxsj245
ffffb0c4ef Upgrade project dependencies and fix tar typing 2026-03-29 20:35:53 +08:00
yxsj245
29656235b8 升级依赖 2026-03-01 10:51:22 +08:00
yxsj245
e4b3f63779 升级依赖 2026-03-01 10:48:32 +08:00
yxsj245
59ad7eb0f3 优化分片上传 2026-02-26 21:26:50 +08:00
yxsj245
e3a1eff2d0 修复CVE-2026-25639 2026-02-13 11:00:32 +08:00
yxsj245
df4278d385 修复CVE-2025-13465 2026-01-22 12:23:42 +08:00
yxsj245
162537f128 修复CVE-2025-13465 2026-01-22 12:19:09 +08:00
yxsj245
c5b11aa0be 修复CVE-2025-13465 2026-01-22 12:18:16 +08:00
yxsj245
b8c4aefbf9 更新依赖 2026-01-17 16:50:00 +08:00
dependabot[bot]
af23105b87 Bump jws from 3.2.2 to 3.2.3 in /client
Bumps [jws](https://github.com/brianloveswords/node-jws) from 3.2.2 to 3.2.3.
- [Release notes](https://github.com/brianloveswords/node-jws/releases)
- [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianloveswords/node-jws/compare/v3.2.2...v3.2.3)

---
updated-dependencies:
- dependency-name: jws
  dependency-version: 3.2.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-12 07:57:37 +00:00
yxsj245
d8b32c2338 glob CLI: Command injection via -c/--cmd executes matches with shell:true 2025-11-21 09:57:04 +08:00
dependabot[bot]
29eaad8770 Bump js-yaml from 4.1.0 to 4.1.1 in /client
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-21 01:55:05 +00:00
yxsj245
e4ce7c50db glob CLI: Command injection via -c/--cmd executes matches with shell:true 2025-11-21 09:51:31 +08:00
yxsj245
66ad674436 修复vite漏洞 2025-10-23 10:25:27 +08:00
dependabot[bot]
8177bdff45 Bump vite from 5.4.20 to 5.4.21 in /client
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.4.20 to 5.4.21.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 5.4.21
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-23 02:21:38 +00:00
yxsj245
89dc8e95d1 优化文本编辑器编码 2025-10-15 21:07:39 +08:00
dependabot[bot]
2903faaaeb Bump axios from 1.11.0 to 1.12.0 in /client
Bumps [axios](https://github.com/axios/axios) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.11.0...v1.12.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.12.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-12 12:08:46 +00:00
dependabot[bot]
4e7f21199b Bump vite from 5.4.19 to 5.4.20 in /client
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.4.19 to 5.4.20.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.20/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.20/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 5.4.20
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-12 11:55:09 +00:00
小朱
27197b6e89 修补CVE-2025-7783 2025-07-24 10:45:48 +08:00
小朱
d4eefe8a0f Upgrade form-data to version 4.0.4 or later. For example 2025-07-23 12:44:54 +08:00
小朱
98f13a5edd 应用升级 2025-07-19 18:58:16 +08:00
小朱
62a7920083 更新vite 2025-07-13 21:40:18 +08:00
小朱
b721258eb4 新版更多一游戏部署 2025-07-12 20:15:57 +08:00
小朱
f0c2f52233 增加过度动画 2025-07-10 12:54:04 +08:00
小朱
54b98ac6fd 文件管理 2025-07-08 21:51:04 +08:00
小朱
208aaba672 初始 2025-07-08 11:51:05 +08:00