fix(deps): update vulnerable dependencies

This commit is contained in:
Clover You
2026-05-06 03:25:18 +08:00
committed by Dawn
parent b62811c924
commit 75272e1f81
4 changed files with 62 additions and 63 deletions
+5 -5
View File
@@ -106,10 +106,10 @@
"crypto-js": "^4.2.0",
"dayjs": "^1.11.19",
"digest-wasm": "^0.1.4",
"dompurify": "^3.3.0",
"dompurify": "^3.4.2",
"driver.js": "^1.4.0",
"es-toolkit": "^1.43.0",
"file-type": "^21.1.1",
"file-type": "^22.0.1",
"grapheme-splitter": "^1.0.4",
"hula-emojis": "^1.3.1",
"internal-ip": "^8.0.1",
@@ -163,7 +163,7 @@
"commitizen": "^4.3.1",
"cz-git": "^1.12.0",
"eruda": "^3.4.3",
"happy-dom": "^20.0.2",
"happy-dom": "^20.9.0",
"husky": "^9.1.7",
"lint-staged": "^16.2.7",
"postcss-pxtorem": "^6.1.0",
@@ -187,8 +187,8 @@
"pnpm": {
"overrides": {
"conventional-changelog-conventionalcommits": "8.0.0",
"lodash": "4.17.23",
"lodash-es": "4.17.23"
"lodash": "4.18.1",
"lodash-es": "4.18.1"
},
"ignoredBuiltDependencies": ["@parcel/watcher", "esbuild", "sharp", "tlbs-map-vue", "vue-demi"]
}
Generated Vendored
+39 -39
View File
@@ -6,8 +6,8 @@ settings:
overrides:
conventional-changelog-conventionalcommits: 8.0.0
lodash: 4.17.23
lodash-es: 4.17.23
lodash: 4.18.1
lodash-es: 4.18.1
importers:
@@ -101,8 +101,8 @@ importers:
specifier: ^0.1.4
version: 0.1.4
dompurify:
specifier: ^3.3.0
version: 3.3.3
specifier: ^3.4.2
version: 3.4.2
driver.js:
specifier: ^1.4.0
version: 1.4.0
@@ -110,8 +110,8 @@ importers:
specifier: ^1.43.0
version: 1.45.1
file-type:
specifier: ^21.1.1
version: 21.3.4
specifier: ^22.0.1
version: 22.0.1
grapheme-splitter:
specifier: ^1.0.4
version: 1.0.4
@@ -267,8 +267,8 @@ importers:
specifier: ^3.4.3
version: 3.4.3
happy-dom:
specifier: ^20.0.2
version: 20.8.9
specifier: ^20.9.0
version: 20.9.0
husky:
specifier: ^9.1.7
version: 9.1.7
@@ -304,7 +304,7 @@ importers:
version: 0.4.0(vite@8.0.8(@types/node@25.6.0)(jiti@2.6.1)(sass@1.97.2)(yaml@2.8.3))
vitest:
specifier: ^4.1.4
version: 4.1.4(@types/node@25.6.0)(@vitest/coverage-v8@4.1.4)(@vitest/ui@4.1.4)(happy-dom@20.8.9)(vite@8.0.8(@types/node@25.6.0)(jiti@2.6.1)(sass@1.97.2)(yaml@2.8.3))
version: 4.1.4(@types/node@25.6.0)(@vitest/coverage-v8@4.1.4)(@vitest/ui@4.1.4)(happy-dom@20.9.0)(vite@8.0.8(@types/node@25.6.0)(jiti@2.6.1)(sass@1.97.2)(yaml@2.8.3))
vue-tsc:
specifier: ^3.2.6
version: 3.2.6(typescript@5.9.3)
@@ -2800,8 +2800,8 @@ packages:
resolution: {integrity: sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==}
engines: {node: '>= 4'}
dompurify@3.3.3:
resolution: {integrity: sha512-Oj6pzI2+RqBfFG+qOaOLbFXLQ90ARpcGG6UePL82bJLtdsa6CYJD7nmiU8MW9nQNOtCHV3lZ/Bzq1X0QYbBZCA==}
dompurify@3.4.2:
resolution: {integrity: sha512-lHeS9SA/IKeIFFyYciHBr2n0v1VMPlSj843HdLOwjb2OxNwdq9Xykxqhk+FE42MzAdHvInbAolSE4mhahPpjXA==}
domutils@3.2.2:
resolution: {integrity: sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw==}
@@ -2988,9 +2988,9 @@ packages:
resolution: {integrity: sha512-yaduQFRKLXYOGgEn6AZau90j3ggSOyiqXU0F9JZfeXYhNa+Jk4X+s45A2zg5jns87GAFa34BBm2kXw4XpNcbdg==}
engines: {node: '>=8'}
file-type@21.3.4:
resolution: {integrity: sha512-Ievi/yy8DS3ygGvT47PjSfdFoX+2isQueoYP1cntFW1JLYAuS4GD7NUPGg4zv2iZfV52uDyk5w5Z0TdpRS6Q1g==}
engines: {node: '>=20'}
file-type@22.0.1:
resolution: {integrity: sha512-ww5Mhre0EE+jmBvOXTmXAbEMuZE7uX4a3+oRCQFNj8w++g3ev913N6tXQz0XTXbueQ5TWQfm6BdaViEHHn8bhA==}
engines: {node: '>=22'}
fill-range@7.1.1:
resolution: {integrity: sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==}
@@ -3124,8 +3124,8 @@ packages:
engines: {node: '>=0.4.7'}
hasBin: true
happy-dom@20.8.9:
resolution: {integrity: sha512-Tz23LR9T9jOGVZm2x1EPdXqwA37G/owYMxRwU0E4miurAtFsPMQ1d2Jc2okUaSjZqAFz2oEn3FLXC5a0a+siyA==}
happy-dom@20.9.0:
resolution: {integrity: sha512-GZZ9mKe8r646NUAf/zemnGbjYh4Bt8/MqASJY+pSm5ZDtc3YQox+4gsLI7yi1hba6o+eCsGxpHn5+iEVn31/FQ==}
engines: {node: '>=20.0.0'}
has-flag@3.0.0:
@@ -3549,8 +3549,8 @@ packages:
resolution: {integrity: sha512-arhlxbFRmoQHl33a0Zkle/YWlmNwoyt6QNZEIJcqNbdrsix5Lvc4HyyI3EnwxTYlZYc32EbYrQ8SzEZ7dqgg9A==}
engines: {node: '>=14'}
lodash-es@4.17.23:
resolution: {integrity: sha512-kVI48u3PZr38HdYz98UmfPnXl2DXrpdctLrFLCd3kOx1xUkOmpFPx7gCWWM5MPkL/fD8zb+Ph0QzjGFs4+hHWg==}
lodash-es@4.18.1:
resolution: {integrity: sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A==}
lodash.camelcase@4.3.0:
resolution: {integrity: sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA==}
@@ -3591,8 +3591,8 @@ packages:
lodash.upperfirst@4.3.1:
resolution: {integrity: sha512-sReKOYJIJf74dhJONhU4e0/shzi1trVbSWDOhKYE5XV2O+H7Sb2Dihwuc7xWxVl+DgFPyTqIN3zMfT9cq5iWDg==}
lodash@4.17.23:
resolution: {integrity: sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==}
lodash@4.18.1:
resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
log-symbols@4.1.0:
resolution: {integrity: sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==}
@@ -5827,7 +5827,7 @@ snapshots:
'@nodeutils/defaults-deep@1.1.0':
dependencies:
lodash: 4.17.23
lodash: 4.18.1
'@octokit/auth-token@4.0.0': {}
@@ -6034,7 +6034,7 @@ snapshots:
fast-glob: 3.3.3
ini: 5.0.0
js-yaml: 4.1.1
lodash-es: 4.17.23
lodash-es: 4.18.1
release-it: 19.2.4(@types/node@25.6.0)(magicast@0.5.2)
semver: 7.7.4
@@ -6570,7 +6570,7 @@ snapshots:
obug: 2.1.1
std-env: 4.0.0
tinyrainbow: 3.1.0
vitest: 4.1.4(@types/node@25.6.0)(@vitest/coverage-v8@4.1.4)(@vitest/ui@4.1.4)(happy-dom@20.8.9)(vite@8.0.8(@types/node@25.6.0)(jiti@2.6.1)(sass@1.97.2)(yaml@2.8.3))
vitest: 4.1.4(@types/node@25.6.0)(@vitest/coverage-v8@4.1.4)(@vitest/ui@4.1.4)(happy-dom@20.9.0)(vite@8.0.8(@types/node@25.6.0)(jiti@2.6.1)(sass@1.97.2)(yaml@2.8.3))
'@vitest/expect@4.1.4':
dependencies:
@@ -6616,7 +6616,7 @@ snapshots:
sirv: 3.0.2
tinyglobby: 0.2.16
tinyrainbow: 3.1.0
vitest: 4.1.4(@types/node@25.6.0)(@vitest/coverage-v8@4.1.4)(@vitest/ui@4.1.4)(happy-dom@20.8.9)(vite@8.0.8(@types/node@25.6.0)(jiti@2.6.1)(sass@1.97.2)(yaml@2.8.3))
vitest: 4.1.4(@types/node@25.6.0)(@vitest/coverage-v8@4.1.4)(@vitest/ui@4.1.4)(happy-dom@20.9.0)(vite@8.0.8(@types/node@25.6.0)(jiti@2.6.1)(sass@1.97.2)(yaml@2.8.3))
'@vitest/utils@4.1.4':
dependencies:
@@ -7028,7 +7028,7 @@ snapshots:
chevrotain-allstar@0.4.1(chevrotain@12.0.0):
dependencies:
chevrotain: 12.0.0
lodash-es: 4.17.23
lodash-es: 4.18.1
chevrotain@12.0.0:
dependencies:
@@ -7150,7 +7150,7 @@ snapshots:
glob: 7.2.3
inquirer: 8.2.5
is-utf8: 0.2.1
lodash: 4.17.23
lodash: 4.18.1
minimist: 1.2.7
strip-bom: 4.0.0
strip-json-comments: 3.1.1
@@ -7531,7 +7531,7 @@ snapshots:
dagre-d3-es@7.0.14:
dependencies:
d3: 7.9.0
lodash-es: 4.17.23
lodash-es: 4.18.1
data-uri-to-buffer@6.0.2: {}
@@ -7610,7 +7610,7 @@ snapshots:
dependencies:
domelementtype: 2.3.0
dompurify@3.3.3:
dompurify@3.4.2:
optionalDependencies:
'@types/trusted-types': 2.0.7
@@ -7782,7 +7782,7 @@ snapshots:
dependencies:
escape-string-regexp: 1.0.5
file-type@21.3.4:
file-type@22.0.1:
dependencies:
'@tokenizer/inflate': 0.4.1
strtok3: 10.3.5
@@ -7949,7 +7949,7 @@ snapshots:
optionalDependencies:
uglify-js: 3.19.3
happy-dom@20.8.9:
happy-dom@20.9.0:
dependencies:
'@types/node': 25.6.0
'@types/whatwg-mimetype': 3.0.2
@@ -8086,7 +8086,7 @@ snapshots:
cli-width: 3.0.0
external-editor: 3.1.0
figures: 3.2.0
lodash: 4.17.23
lodash: 4.18.1
mute-stream: 0.0.8
ora: 5.4.1
run-async: 2.4.1
@@ -8341,7 +8341,7 @@ snapshots:
pkg-types: 2.3.0
quansync: 0.2.11
lodash-es@4.17.23: {}
lodash-es@4.18.1: {}
lodash.camelcase@4.3.0: {}
@@ -8369,7 +8369,7 @@ snapshots:
lodash.upperfirst@4.3.1: {}
lodash@4.17.23: {}
lodash@4.18.1: {}
log-symbols@4.1.0:
dependencies:
@@ -8499,10 +8499,10 @@ snapshots:
d3-sankey: 0.12.3
dagre-d3-es: 7.0.14
dayjs: 1.11.20
dompurify: 3.3.3
dompurify: 3.4.2
katex: 0.16.45
khroma: 2.1.0
lodash-es: 4.17.23
lodash-es: 4.18.1
marked: 16.4.2
roughjs: 4.6.6
stylis: 4.3.6
@@ -8597,8 +8597,8 @@ snapshots:
date-fns-tz: 3.2.0(date-fns@4.1.0)
evtd: 0.2.4
highlight.js: 11.11.1
lodash: 4.17.23
lodash-es: 4.17.23
lodash: 4.18.1
lodash-es: 4.18.1
seemly: 0.3.10
treemate: 0.3.11
vdirs: 0.1.8(vue@3.5.32(typescript@5.9.3))
@@ -9561,7 +9561,7 @@ snapshots:
sass: 1.97.2
yaml: 2.8.3
vitest@4.1.4(@types/node@25.6.0)(@vitest/coverage-v8@4.1.4)(@vitest/ui@4.1.4)(happy-dom@20.8.9)(vite@8.0.8(@types/node@25.6.0)(jiti@2.6.1)(sass@1.97.2)(yaml@2.8.3)):
vitest@4.1.4(@types/node@25.6.0)(@vitest/coverage-v8@4.1.4)(@vitest/ui@4.1.4)(happy-dom@20.9.0)(vite@8.0.8(@types/node@25.6.0)(jiti@2.6.1)(sass@1.97.2)(yaml@2.8.3)):
dependencies:
'@vitest/expect': 4.1.4
'@vitest/mocker': 4.1.4(vite@8.0.8(@types/node@25.6.0)(jiti@2.6.1)(sass@1.97.2)(yaml@2.8.3))
@@ -9587,7 +9587,7 @@ snapshots:
'@types/node': 25.6.0
'@vitest/coverage-v8': 4.1.4(vitest@4.1.4)
'@vitest/ui': 4.1.4(vitest@4.1.4)
happy-dom: 20.8.9
happy-dom: 20.9.0
transitivePeerDependencies:
- msw
+16 -17
View File
@@ -817,9 +817,9 @@ checksum = "8f1fe948ff07f4bd06c30984e69f5b4899c516a3ef74f34df92a2df2ab535495"
[[package]]
name = "bytes"
version = "1.11.0"
version = "1.11.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "b35204fbdc0b3f4446b89fc1ac2cf84a8a68971995d0bf2e925ec7cd960f9cb3"
checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
dependencies = [
"serde",
]
@@ -2164,9 +2164,9 @@ dependencies = [
[[package]]
name = "futures-channel"
version = "0.3.31"
version = "0.3.32"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10"
checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
dependencies = [
"futures-core",
"futures-sink",
@@ -2174,9 +2174,9 @@ dependencies = [
[[package]]
name = "futures-core"
version = "0.3.31"
version = "0.3.32"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e"
checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
[[package]]
name = "futures-executor"
@@ -2202,9 +2202,9 @@ dependencies = [
[[package]]
name = "futures-io"
version = "0.3.31"
version = "0.3.32"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6"
checksum = "cecba35d7ad927e23624b22ad55235f2239cfa44fd10428eecbeba6d6a717718"
[[package]]
name = "futures-lite"
@@ -2221,9 +2221,9 @@ dependencies = [
[[package]]
name = "futures-macro"
version = "0.3.31"
version = "0.3.32"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650"
checksum = "e835b70203e41293343137df5c0664546da5745f82ec9b84d40be8336958447b"
dependencies = [
"proc-macro2",
"quote",
@@ -2232,21 +2232,21 @@ dependencies = [
[[package]]
name = "futures-sink"
version = "0.3.31"
version = "0.3.32"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "e575fab7d1e0dcb8d0c7bcf9a63ee213816ab51902e6d244a95819acacf1d4f7"
checksum = "c39754e157331b013978ec91992bde1ac089843443c49cbc7f46150b0fad0893"
[[package]]
name = "futures-task"
version = "0.3.31"
version = "0.3.32"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "f90f7dce0722e95104fcb095585910c0977252f286e354b5e3bd38902cd99988"
checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
[[package]]
name = "futures-util"
version = "0.3.31"
version = "0.3.32"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81"
checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
dependencies = [
"futures-channel",
"futures-core",
@@ -2256,7 +2256,6 @@ dependencies = [
"futures-task",
"memchr",
"pin-project-lite",
"pin-utils",
"slab",
]
+2 -2
View File
@@ -92,7 +92,7 @@ sea-orm = { version = "1.1.19", features = [
anyhow = "1.0.100"
base64 = "0.22.1"
bytes = "1.11"
bytes = "1.11.1"
config = { version = "0.15.19", default-features = false, features = ["yaml"] }
dotenv = "0.15.0"
entity = { path = "entity" }
@@ -115,7 +115,7 @@ rodio = "0.21.1"
thiserror = "2.0.17"
# WebSocket 相关依赖
futures-util = "0.3"
futures-util = "0.3.32"
libsqlite3-sys = { version = "0.30.1", features = ["bundled"] }
tokio-tungstenite = { version = "0.28", features = ["rustls-tls-webpki-roots"] }
url = "2.5"