yxsj245
|
cde368fb35
|
chore(client): 升级 react-router-dom 到 7.18.2 修复安全漏洞
- 将 react-router-dom 从 6.30.3 升级到 7.18.2,修复了 3 个重要安全漏洞
- 移除了 BrowserRouter 的 future prop,v7 中默认启用相关特性
- 更新 package-lock.json,移除旧依赖 @remix-run/router,新增 cookie 和 set-cookie-parser
- 保持与 React 18 和现有生态兼容,确保无破坏性变更
- 更新依赖文档,说明此次升级的安全修复和兼容性细节
- 依然保留部分不影响项目的 RSC Mode CSRF 漏洞警告,可在 Dependabot 中标记忽略
|
2026-07-29 21:01:11 +08:00 |
|
yxsj245
|
37706db03d
|
chore(deps): 升级多个依赖包版本
- 将 @types/node 升级至 26.1.2,undici-types 升级至 8.3.0
- 升级 b4a、bare-events、bare-fs、bare-path、bare-stream、bare-url 等库版本
- 升级 brace-expansion、concurrently、fs-extra、iconv-lite、jsonfile、minimatch 等工具依赖
- 升级 shell-quote、streamx、tar、tar-stream、typescript、undici-types 等包版本
- 客户端相关依赖如 @ant-design/icons-svg、@babel/plugin-transform-react-jsx-self、@babel/runtime 等也做了升级
- 更新 Rollup 相关包版本至 4.62.3,提升构建工具稳定性和性能
- 多数依赖为开发环境依赖,涉及安全和兼容性修复
|
2026-07-29 20:53:14 +08:00 |
|
yxsj245
|
127456dd38
|
build: 更新前后端依赖版本与配置
1. 调整server端esbuild依赖位置至overrides并新增js-yaml固定版本
2. 更新client端@vitejs/plugin-react与vite依赖到最新版本
3. 清理并更新server端lock文件中的冗余依赖与版本配置
|
2026-06-20 17:11:57 +08:00 |
|
yxsj245
|
11a4f957e3
|
fix: 修复响应头content-length解析可能的类型错误,统一处理空值
1. 将多处直接对response.headers['content-length']进行parseInt的代码,改为先通过String()包装处理空值情况,避免潜在的类型转换报错
2. 为factorio-deployer中的content-type获取添加了空值默认处理
3. 更新了项目依赖包版本并整理了dev依赖顺序
|
2026-06-20 17:07:53 +08:00 |
|
yxsj245
|
7c39453b24
|
Upgrade node-cron and postcss to fix Dependabot alerts
|
2026-04-30 09:15:30 +08:00 |
|
yxsj245
|
9921f830f5
|
Upgrade follow-redirects to 1.16.0
|
2026-04-22 16:04:52 +08:00 |
|
yxsj245
|
0c5f519293
|
发布版本
|
2026-04-09 12:17:54 +08:00 |
|
yxsj245
|
ffffb0c4ef
|
Upgrade project dependencies and fix tar typing
|
2026-03-29 20:35:53 +08:00 |
|
yxsj245
|
29656235b8
|
升级依赖
|
2026-03-01 10:51:22 +08:00 |
|
yxsj245
|
e4b3f63779
|
升级依赖
|
2026-03-01 10:48:32 +08:00 |
|
yxsj245
|
59ad7eb0f3
|
优化分片上传
|
2026-02-26 21:26:50 +08:00 |
|
yxsj245
|
e3a1eff2d0
|
修复CVE-2026-25639
|
2026-02-13 11:00:32 +08:00 |
|
yxsj245
|
df4278d385
|
修复CVE-2025-13465
|
2026-01-22 12:23:42 +08:00 |
|
yxsj245
|
162537f128
|
修复CVE-2025-13465
|
2026-01-22 12:19:09 +08:00 |
|
yxsj245
|
c5b11aa0be
|
修复CVE-2025-13465
|
2026-01-22 12:18:16 +08:00 |
|
yxsj245
|
b8c4aefbf9
|
更新依赖
|
2026-01-17 16:50:00 +08:00 |
|
dependabot[bot]
|
af23105b87
|
Bump jws from 3.2.2 to 3.2.3 in /client
Bumps [jws](https://github.com/brianloveswords/node-jws) from 3.2.2 to 3.2.3.
- [Release notes](https://github.com/brianloveswords/node-jws/releases)
- [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianloveswords/node-jws/compare/v3.2.2...v3.2.3)
---
updated-dependencies:
- dependency-name: jws
dependency-version: 3.2.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-12-12 07:57:37 +00:00 |
|
yxsj245
|
d8b32c2338
|
glob CLI: Command injection via -c/--cmd executes matches with shell:true
|
2025-11-21 09:57:04 +08:00 |
|
dependabot[bot]
|
29eaad8770
|
Bump js-yaml from 4.1.0 to 4.1.1 in /client
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 4.1.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-11-21 01:55:05 +00:00 |
|
yxsj245
|
e4ce7c50db
|
glob CLI: Command injection via -c/--cmd executes matches with shell:true
|
2025-11-21 09:51:31 +08:00 |
|
yxsj245
|
66ad674436
|
修复vite漏洞
|
2025-10-23 10:25:27 +08:00 |
|
dependabot[bot]
|
8177bdff45
|
Bump vite from 5.4.20 to 5.4.21 in /client
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.4.20 to 5.4.21.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite)
---
updated-dependencies:
- dependency-name: vite
dependency-version: 5.4.21
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-10-23 02:21:38 +00:00 |
|
yxsj245
|
89dc8e95d1
|
优化文本编辑器编码
|
2025-10-15 21:07:39 +08:00 |
|
dependabot[bot]
|
2903faaaeb
|
Bump axios from 1.11.0 to 1.12.0 in /client
Bumps [axios](https://github.com/axios/axios) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.11.0...v1.12.0)
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.12.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-09-12 12:08:46 +00:00 |
|
dependabot[bot]
|
4e7f21199b
|
Bump vite from 5.4.19 to 5.4.20 in /client
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.4.19 to 5.4.20.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.20/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.20/packages/vite)
---
updated-dependencies:
- dependency-name: vite
dependency-version: 5.4.20
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-09-12 11:55:09 +00:00 |
|
小朱
|
27197b6e89
|
修补CVE-2025-7783
|
2025-07-24 10:45:48 +08:00 |
|
小朱
|
d4eefe8a0f
|
Upgrade form-data to version 4.0.4 or later. For example
|
2025-07-23 12:44:54 +08:00 |
|
小朱
|
98f13a5edd
|
应用升级
|
2025-07-19 18:58:16 +08:00 |
|
小朱
|
62a7920083
|
更新vite
|
2025-07-13 21:40:18 +08:00 |
|
小朱
|
b721258eb4
|
新版更多一游戏部署
|
2025-07-12 20:15:57 +08:00 |
|
小朱
|
f0c2f52233
|
增加过度动画
|
2025-07-10 12:54:04 +08:00 |
|
小朱
|
54b98ac6fd
|
文件管理
|
2025-07-08 21:51:04 +08:00 |
|
小朱
|
208aaba672
|
初始
|
2025-07-08 11:51:05 +08:00 |
|