chore(deps): curated fixes (vite, vitest, unhead, yaml) + pin TypeScript
Targeted, tests-green update instead of a blanket npm update: - vite 6.3.5 -> 6.4.5, vitest 3.1.4 -> 3.2.7, @unhead/react 2.1.17 (unhead 2.1.17), yaml 2.9.1; npm dedupe. - typescript pinned to 5.8.3 (exact) so npm i can't drift into the 5.9 typed-array breakage that failed the last auto-update. OSV findings: 107 -> 59. Remaining are transitive/major (vitest 4, valibot 1, uuid 11, zod 4) or xlsx (no fix; write-only export, parse CVEs don't apply). npm test green.
This commit is contained in:
parent
2164dd61b0
commit
221ba5c253
2 changed files with 390 additions and 373 deletions
757
package-lock.json
generated
757
package-lock.json
generated
File diff suppressed because it is too large
Load diff
|
|
@ -168,10 +168,10 @@
|
||||||
"rollup-plugin-visualizer": "^7.1.1",
|
"rollup-plugin-visualizer": "^7.1.1",
|
||||||
"tailwindcss": "^3.4.11",
|
"tailwindcss": "^3.4.11",
|
||||||
"tsx": "^4.22.4",
|
"tsx": "^4.22.4",
|
||||||
"typescript": "^5.5.3",
|
"typescript": "5.8.3",
|
||||||
"typescript-eslint": "^8.0.1",
|
"typescript-eslint": "^8.0.1",
|
||||||
"vite": "^6.3.5",
|
"vite": "^6.4.5",
|
||||||
"vitest": "^3.1.4",
|
"vitest": "^3.2.7",
|
||||||
"web-push": "^3.6.7"
|
"web-push": "^3.6.7"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue