yxsj245
|
cde368fb35
|
chore(client): 升级 react-router-dom 到 7.18.2 修复安全漏洞
- 将 react-router-dom 从 6.30.3 升级到 7.18.2,修复了 3 个重要安全漏洞
- 移除了 BrowserRouter 的 future prop,v7 中默认启用相关特性
- 更新 package-lock.json,移除旧依赖 @remix-run/router,新增 cookie 和 set-cookie-parser
- 保持与 React 18 和现有生态兼容,确保无破坏性变更
- 更新依赖文档,说明此次升级的安全修复和兼容性细节
- 依然保留部分不影响项目的 RSC Mode CSRF 漏洞警告,可在 Dependabot 中标记忽略
|
2026-07-29 21:01:11 +08:00 |
|
yxsj245
|
127456dd38
|
build: 更新前后端依赖版本与配置
1. 调整server端esbuild依赖位置至overrides并新增js-yaml固定版本
2. 更新client端@vitejs/plugin-react与vite依赖到最新版本
3. 清理并更新server端lock文件中的冗余依赖与版本配置
|
2026-06-20 17:11:57 +08:00 |
|
yxsj245
|
7c39453b24
|
Upgrade node-cron and postcss to fix Dependabot alerts
|
2026-04-30 09:15:30 +08:00 |
|
yxsj245
|
9921f830f5
|
Upgrade follow-redirects to 1.16.0
|
2026-04-22 16:04:52 +08:00 |
|
yxsj245
|
ffffb0c4ef
|
Upgrade project dependencies and fix tar typing
|
2026-03-29 20:35:53 +08:00 |
|
yxsj245
|
29656235b8
|
升级依赖
|
2026-03-01 10:51:22 +08:00 |
|
yxsj245
|
e4b3f63779
|
升级依赖
|
2026-03-01 10:48:32 +08:00 |
|
yxsj245
|
59ad7eb0f3
|
优化分片上传
|
2026-02-26 21:26:50 +08:00 |
|
yxsj245
|
e3a1eff2d0
|
修复CVE-2026-25639
|
2026-02-13 11:00:32 +08:00 |
|
yxsj245
|
e4ce7c50db
|
glob CLI: Command injection via -c/--cmd executes matches with shell:true
|
2025-11-21 09:51:31 +08:00 |
|
dependabot[bot]
|
8177bdff45
|
Bump vite from 5.4.20 to 5.4.21 in /client
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.4.20 to 5.4.21.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite)
---
updated-dependencies:
- dependency-name: vite
dependency-version: 5.4.21
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-10-23 02:21:38 +00:00 |
|
dependabot[bot]
|
2903faaaeb
|
Bump axios from 1.11.0 to 1.12.0 in /client
Bumps [axios](https://github.com/axios/axios) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.11.0...v1.12.0)
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.12.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-09-12 12:08:46 +00:00 |
|
dependabot[bot]
|
4e7f21199b
|
Bump vite from 5.4.19 to 5.4.20 in /client
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.4.19 to 5.4.20.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.20/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.20/packages/vite)
---
updated-dependencies:
- dependency-name: vite
dependency-version: 5.4.20
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-09-12 11:55:09 +00:00 |
|
小朱
|
27197b6e89
|
修补CVE-2025-7783
|
2025-07-24 10:45:48 +08:00 |
|
小朱
|
d4eefe8a0f
|
Upgrade form-data to version 4.0.4 or later. For example
|
2025-07-23 12:44:54 +08:00 |
|
小朱
|
77928b4ae5
|
升级esbuild库
|
2025-07-19 18:51:13 +08:00 |
|
小朱
|
62a7920083
|
更新vite
|
2025-07-13 21:40:18 +08:00 |
|
小朱
|
6083fdc76b
|
适配文件编辑器
|
2025-07-11 22:23:24 +08:00 |
|
小朱
|
f0c2f52233
|
增加过度动画
|
2025-07-10 12:54:04 +08:00 |
|
小朱
|
54b98ac6fd
|
文件管理
|
2025-07-08 21:51:04 +08:00 |
|
小朱
|
208aaba672
|
初始
|
2025-07-08 11:51:05 +08:00 |
|