5 Commits

Author SHA1 Message Date
dependabot[bot] 3dcaa96dd8 chore(deps): bump the docs-dependencies group in /docs with 27 updates (#960)
Bumps the docs-dependencies group in /docs with 27 updates:

| Package | From | To |
| --- | --- | --- |
| [esbuild](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/aix-ppc64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/android-arm64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/android-arm](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/android-x64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/darwin-arm64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/darwin-x64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/freebsd-arm64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/freebsd-x64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/linux-arm64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/linux-arm](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/linux-ia32](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/linux-loong64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/linux-mips64el](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/linux-ppc64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/linux-riscv64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/linux-s390x](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/linux-x64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/netbsd-arm64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/netbsd-x64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/openbsd-arm64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/openbsd-x64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/openharmony-arm64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/sunos-x64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/win32-arm64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/win32-ia32](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [@esbuild/win32-x64](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |


Updates `esbuild` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/aix-ppc64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/android-arm64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/android-arm` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/android-x64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/darwin-arm64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/darwin-x64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/freebsd-arm64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/freebsd-x64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/linux-arm64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/linux-arm` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/linux-ia32` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/linux-loong64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/linux-mips64el` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/linux-ppc64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/linux-riscv64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/linux-s390x` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/linux-x64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/netbsd-arm64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/netbsd-x64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/openbsd-arm64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/openbsd-x64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/openharmony-arm64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/sunos-x64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/win32-arm64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/win32-ia32` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

Updates `@esbuild/win32-x64` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.1...v0.28.2)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.28.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/aix-ppc64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/android-arm64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/android-arm"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/android-x64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/darwin-arm64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/darwin-x64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/freebsd-arm64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/freebsd-x64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/linux-arm64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/linux-arm"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/linux-ia32"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/linux-loong64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/linux-mips64el"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/linux-ppc64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/linux-riscv64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/linux-s390x"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/linux-x64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/netbsd-arm64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/netbsd-x64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/openbsd-arm64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/openbsd-x64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/openharmony-arm64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/sunos-x64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/win32-arm64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/win32-ia32"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
- dependency-name: "@esbuild/win32-x64"
  dependency-version: 0.28.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-19 22:55:34 +08:00
Yuchuan b6999953a8 chore(ci): 增加依赖漏洞审计与许可证报告 (#927)
* chore(ci): 增加依赖漏洞审计与许可证报告

Closes #870

Taskr: 2026-08-18-task-c5bbf857

* fix(ci): 修复依赖审计缓存清理失败

* fix(ci): 补充依赖审计负向控制
2026-08-19 11:17:21 +08:00
Wenjie Zhang acdb0c6597 fix: 修复前端依赖安全告警
将 web 与 docs 的 esbuild 锁定到 0.28.1,修复 Dependabot 高危告警;docs 同步升级 Vite/plugin-vue override 以兼容 patched esbuild;web 补充 brace-expansion override 清理 npm audit 中的中危告警。
2026-06-15 02:17:48 +08:00
Wenjie Zhang 6e2c0d87c9 fix: 修复安全预警依赖与路径校验
- 升级 npm/uv 锁文件中的漏洞依赖,并移除未使用的 python-jose 以消除 ecdsa 预警
- 收紧 viewer/thread/sandbox 路径解析边界,补充路径逃逸测试
- 更新 roadmap 记录本次安全修复
2026-06-05 23:46:06 +08:00
Wenjie Zhang 26bfcda013 refactor: 更新文档部署说明
- 移除对于双版本文档的支持,更加清晰
- 将 docs 的入口从根目录移动到子目录
2026-03-24 11:09:46 +08:00