mirror of
https://github.com/MHSanaei/3x-ui.git
synced 2026-10-20 23:55:20 +08:00
MHSanaei
d57dcf824b
Bump vite, oxlint/oxfmt, msw, jsdom and plugin-react in the frontend, and fumadocs, lucide-react, oxlint/oxfmt, postcss and pnpm in docs. npm audit reported seroval <=1.6.2 (critical) via solid-js, which the react-query devtools pull in pinned to ~1.5.4, and sprintf-js (no patched release) via remarkable's argparse@1. `npm audit fix --force` "fixed" both by downgrading swagger-ui-react to 3.23.3, which brings in far worse advisories. Instead override seroval/seroval-plugins to ^1.6.8 and give remarkable argparse@2; remarkable only requires argparse from its unused CLI entry, so the bundled library is unaffected. pnpm appends an exact-version minimumReleaseAgeExclude entry on every update of a too-fresh release and never prunes them. Drop the stale ones; keep only fumadocs 16.16.2 and oxlint/oxfmt, still inside the 1-day cutoff.
53 lines
2.0 KiB
YAML
53 lines
2.0 KiB
YAML
allowBuilds:
|
|
esbuild: true
|
|
sharp: true
|
|
unrs-resolver: true
|
|
# Force any vulnerable transitive postcss (pulled in by next) up to a patched
|
|
# release — fixes GHSA-qx2v-qp2m-jg93 / CVE-2026-41305 (vulnerable < 8.5.10).
|
|
overrides:
|
|
'postcss@<8.5.10': '^8.5.15'
|
|
'sharp@<0.35.0': '^0.35.3'
|
|
minimumReleaseAgeExclude:
|
|
- [email protected]
|
|
- [email protected]
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxfmt/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- '@oxlint/[email protected]'
|
|
- [email protected]
|
|
- [email protected]
|