fix(deps): 修复 Dependabot 安全漏洞

- 添加 npm overrides 强制使用安全版本
  - minimatch: ^10.2.2 (修复 ReDoS 漏洞 CVE-2026-26996)
  - glob: ^11.1.0
- 更新 Jest 到 v30.2.0
- 漏洞数量: 31 → 0
This commit is contained in:
Abner
2026-02-21 17:14:45 +08:00
parent 4670e67360
commit ea0d187acd
2 changed files with 3290 additions and 3078 deletions

6358
package-lock.json generated

File diff suppressed because it is too large Load Diff

View File

@@ -64,8 +64,8 @@
"cssnano": "^6.0.1",
"esbuild": "^0.25.8",
"http-proxy-middleware": "^3.0.5",
"jest": "^29.7.0",
"jest-environment-jsdom": "^29.7.0",
"jest": "^30.2.0",
"jest-environment-jsdom": "^30.2.0",
"nodemon": "^3.0.2",
"on-headers": "^1.1.0",
"postcss": "^8.4.31",
@@ -89,5 +89,9 @@
"bugs": {
"url": "https://github.com/Silentely/eSIM-Tools/issues"
},
"homepage": "https://esim.cosr.eu.org"
"homepage": "https://esim.cosr.eu.org",
"overrides": {
"minimatch": "^10.2.2",
"glob": "^11.1.0"
}
}