Commit Graph

21 Commits

Author SHA1 Message Date
yxsj245
cde368fb35 chore(client): 升级 react-router-dom 到 7.18.2 修复安全漏洞
- 将 react-router-dom 从 6.30.3 升级到 7.18.2,修复了 3 个重要安全漏洞
- 移除了 BrowserRouter 的 future prop,v7 中默认启用相关特性
- 更新 package-lock.json,移除旧依赖 @remix-run/router,新增 cookie 和 set-cookie-parser
- 保持与 React 18 和现有生态兼容,确保无破坏性变更
- 更新依赖文档,说明此次升级的安全修复和兼容性细节
- 依然保留部分不影响项目的 RSC Mode CSRF 漏洞警告,可在 Dependabot 中标记忽略
2026-07-29 21:01:11 +08:00
yxsj245
127456dd38 build: 更新前后端依赖版本与配置
1.  调整server端esbuild依赖位置至overrides并新增js-yaml固定版本
2.  更新client端@vitejs/plugin-react与vite依赖到最新版本
3.  清理并更新server端lock文件中的冗余依赖与版本配置
2026-06-20 17:11:57 +08:00
yxsj245
7c39453b24 Upgrade node-cron and postcss to fix Dependabot alerts 2026-04-30 09:15:30 +08:00
yxsj245
9921f830f5 Upgrade follow-redirects to 1.16.0 2026-04-22 16:04:52 +08:00
yxsj245
ffffb0c4ef Upgrade project dependencies and fix tar typing 2026-03-29 20:35:53 +08:00
yxsj245
29656235b8 升级依赖 2026-03-01 10:51:22 +08:00
yxsj245
e4b3f63779 升级依赖 2026-03-01 10:48:32 +08:00
yxsj245
59ad7eb0f3 优化分片上传 2026-02-26 21:26:50 +08:00
yxsj245
e3a1eff2d0 修复CVE-2026-25639 2026-02-13 11:00:32 +08:00
yxsj245
e4ce7c50db glob CLI: Command injection via -c/--cmd executes matches with shell:true 2025-11-21 09:51:31 +08:00
dependabot[bot]
8177bdff45 Bump vite from 5.4.20 to 5.4.21 in /client
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.4.20 to 5.4.21.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 5.4.21
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-23 02:21:38 +00:00
dependabot[bot]
2903faaaeb Bump axios from 1.11.0 to 1.12.0 in /client
Bumps [axios](https://github.com/axios/axios) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.11.0...v1.12.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.12.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-12 12:08:46 +00:00
dependabot[bot]
4e7f21199b Bump vite from 5.4.19 to 5.4.20 in /client
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.4.19 to 5.4.20.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.20/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.20/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 5.4.20
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-12 11:55:09 +00:00
小朱
27197b6e89 修补CVE-2025-7783 2025-07-24 10:45:48 +08:00
小朱
d4eefe8a0f Upgrade form-data to version 4.0.4 or later. For example 2025-07-23 12:44:54 +08:00
小朱
77928b4ae5 升级esbuild库 2025-07-19 18:51:13 +08:00
小朱
62a7920083 更新vite 2025-07-13 21:40:18 +08:00
小朱
6083fdc76b 适配文件编辑器 2025-07-11 22:23:24 +08:00
小朱
f0c2f52233 增加过度动画 2025-07-10 12:54:04 +08:00
小朱
54b98ac6fd 文件管理 2025-07-08 21:51:04 +08:00
小朱
208aaba672 初始 2025-07-08 11:51:05 +08:00