chore(deps): curated fixes (vite, vitest, unhead, yaml) + pin TypeScript

Targeted, tests-green update instead of a blanket npm update:
- vite 6.3.5 -> 6.4.5, vitest 3.1.4 -> 3.2.7, @unhead/react 2.1.17 (unhead
  2.1.17), yaml 2.9.1; npm dedupe.
- typescript pinned to 5.8.3 (exact) so npm i can't drift into the 5.9
  typed-array breakage that failed the last auto-update.
OSV findings: 107 -> 59. Remaining are transitive/major (vitest 4, valibot 1,
uuid 11, zod 4) or xlsx (no fix; write-only export, parse CVEs don't apply).
npm test green.
This commit is contained in:
SkateSpots 2026-10-26 11:24:36 +07:00
parent 2164dd61b0
commit 221ba5c253
2 changed files with 390 additions and 373 deletions

757
package-lock.json generated

File diff suppressed because it is too large Load diff

View file

@ -168,10 +168,10 @@
"rollup-plugin-visualizer": "^7.1.1", "rollup-plugin-visualizer": "^7.1.1",
"tailwindcss": "^3.4.11", "tailwindcss": "^3.4.11",
"tsx": "^4.22.4", "tsx": "^4.22.4",
"typescript": "^5.5.3", "typescript": "5.8.3",
"typescript-eslint": "^8.0.1", "typescript-eslint": "^8.0.1",
"vite": "^6.3.5", "vite": "^6.4.5",
"vitest": "^3.1.4", "vitest": "^3.2.7",
"web-push": "^3.6.7" "web-push": "^3.6.7"
} }
} }