2GT-RichandClaude Opus 4.8
4ff5ed805c
The CI Security Audit (npm audit --audit-level=high) started failing on all new PRs after a critical advisory was published against vitest <4.1.0 (GHSA-5xrq-8626-4rwp — Vitest UI server arbitrary file read/exec). The remediation chain also requires vite to move off the vulnerable esbuild range. These are devDependencies (test/build tooling) and do not ship in the production image, so there was no runtime exposure to deployed users — but the audit gate blocks the pipeline, so bump them: - vite ^5.0.11 -> ^8.0.16 - vitest ^3.0.5 -> ^4.1.8 - @vitejs/plugin-react ^4.2.1 -> ^5.2.0 (vite 8 peer compatibility) Vite 8 ships the rolldown bundler, which requires rollupOptions.output .manualChunks to be a function rather than an object — converted accordingly, with explicit precedence so @xyflow/react (whose name contains the substring "react") lands in the `flow` chunk instead of being pulled into `vendor`. Verified locally: npm ci, npm run lint, tsc --noEmit, npm run build, and npm test (vitest 4.1.8, 3/3 passing) all pass; npm audit reports 0 vulnerabilities. Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
50 lines
1.3 KiB
JSON
50 lines
1.3 KiB
JSON
{
|
|
"name": "mikrotik-manager-frontend",
|
|
"version": "0.11.11-beta",
|
|
"private": true,
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "tsc && vite build",
|
|
"preview": "vite preview",
|
|
"lint": "eslint src",
|
|
"test": "vitest run"
|
|
},
|
|
"dependencies": {
|
|
"@tanstack/react-query": "^5.17.1",
|
|
"@types/leaflet": "^1.9.21",
|
|
"@xterm/addon-fit": "^0.11.0",
|
|
"@xterm/xterm": "^6.0.0",
|
|
"@xyflow/react": "^12.10.2",
|
|
"axios": "^1.16.0",
|
|
"clsx": "^2.1.0",
|
|
"date-fns": "^3.2.0",
|
|
"leaflet": "^1.9.4",
|
|
"lucide-react": "^1.16.0",
|
|
"react": "^19.2.6",
|
|
"react-dom": "^19.2.5",
|
|
"react-router-dom": "^6.21.1",
|
|
"recharts": "^2.10.3",
|
|
"socket.io-client": "^4.7.3",
|
|
"tailwind-merge": "^3.5.0",
|
|
"zustand": "^4.4.7"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "^9.39.4",
|
|
"@types/react": "^19.2.14",
|
|
"@types/react-dom": "^19.2.3",
|
|
"@vitejs/plugin-react": "^5.2.0",
|
|
"autoprefixer": "^10.4.17",
|
|
"eslint": "^9.39.4",
|
|
"eslint-plugin-react": "^7.37.5",
|
|
"eslint-plugin-react-hooks": "^7.0.1",
|
|
"eslint-plugin-security": "^4.0.0",
|
|
"postcss": "^8.5.10",
|
|
"tailwindcss": "^3.4.1",
|
|
"typescript": "^5.9.3",
|
|
"typescript-eslint": "^8.58.2",
|
|
"vite": "^8.0.16",
|
|
"vitest": "^4.1.8"
|
|
}
|
|
}
|