chore(deps): bump vite/postcss/picomatch/flatted/esbuild to patch Dependabot alerts

web/:
- pnpm.overrides force vite>=6.4.2, postcss>=8.5.10, picomatch>=2.3.2/>=4.0.4, flatted>=3.4.2
- bump devDeps vite to ^6.4.2 and postcss to ^8.5.10

docs/skillhub/:
- npm overrides force vite^6.4.2, postcss^8.5.10, esbuild^0.25.0
- regenerate package-lock.json

Resolves Dependabot alerts:
- web: GHSA-p9ff-h696-f583 (vite high), GHSA-rf6f-7fwh-wjgh (flatted high),
       GHSA-qx2v-qp2m-jg93 (postcss), GHSA-4w7w-66w2-5vf9 (vite),
       GHSA-3v7f-55p6-f55p (picomatch x2)
- docs: GHSA-67mh-4wv8-2f99 (esbuild), GHSA-qx2v-qp2m-jg93 (postcss),
        GHSA-4w7w-66w2-5vf9 (vite)
This commit is contained in:
dongmucat 2026-05-27 11:21:24 +08:00
parent 1cf2e481ee
commit aac4706194
4 changed files with 714 additions and 617 deletions

File diff suppressed because it is too large Load diff

View file

@ -9,5 +9,10 @@
},
"devDependencies": {
"vitepress": "^1.6.3"
},
"overrides": {
"vite": "^6.4.2",
"postcss": "^8.5.10",
"esbuild": "^0.25.0"
}
}

View file

@ -7,7 +7,14 @@
"pnpm": {
"onlyBuiltDependencies": [
"esbuild"
]
],
"overrides": {
"vite@<6.4.2": "^6.4.2",
"postcss@<8.5.10": "^8.5.10",
"picomatch@<2.3.2": "^2.3.2",
"picomatch@>=4.0.0 <4.0.4": "^4.0.4",
"flatted@<3.4.2": "^3.4.2"
}
},
"scripts": {
"install:ci": "pnpm install --frozen-lockfile",
@ -64,10 +71,10 @@
"eslint-plugin-react-refresh": "^0.4.5",
"jsdom": "^29.1.1",
"openapi-typescript": "^7.6.1",
"postcss": "^8.4.0",
"postcss": "^8.5.10",
"tailwindcss": "^3.4.0",
"typescript": "^5.7.0",
"vite": "^6.1.0",
"vite": "^6.4.2",
"vitest": "^3.2.4"
}
}

141
web/pnpm-lock.yaml generated
View file

@ -4,6 +4,13 @@ settings:
autoInstallPeers: true
excludeLinksFromLockfile: false
overrides:
vite@<6.4.2: ^6.4.2
postcss@<8.5.10: ^8.5.10
picomatch@<2.3.2: ^2.3.2
picomatch@>=4.0.0 <4.0.4: ^4.0.4
flatted@<3.4.2: ^3.4.2
importers:
.:
@ -107,10 +114,10 @@ importers:
version: 7.18.0(eslint@8.57.1)(typescript@5.9.3)
'@vitejs/plugin-react':
specifier: ^4.3.0
version: 4.7.0(vite@6.4.1(jiti@1.21.7))
version: 4.7.0(vite@6.4.2(jiti@1.21.7))
autoprefixer:
specifier: ^10.4.0
version: 10.4.27(postcss@8.5.8)
version: 10.4.27(postcss@8.5.15)
eslint:
specifier: ^8.57.0
version: 8.57.1
@ -127,8 +134,8 @@ importers:
specifier: ^7.6.1
version: 7.13.0(typescript@5.9.3)
postcss:
specifier: ^8.4.0
version: 8.5.8
specifier: ^8.5.10
version: 8.5.15
tailwindcss:
specifier: ^3.4.0
version: 3.4.19
@ -136,8 +143,8 @@ importers:
specifier: ^5.7.0
version: 5.9.3
vite:
specifier: ^6.1.0
version: 6.4.1(jiti@1.21.7)
specifier: ^6.4.2
version: 6.4.2(jiti@1.21.7)
vitest:
specifier: ^3.2.4
version: 3.2.4(@types/debug@4.1.12)(jiti@1.21.7)(jsdom@29.1.1)
@ -1205,7 +1212,7 @@ packages:
resolution: {integrity: sha512-gUu9hwfWvvEDBBmgtAowQCojwZmJ5mcLn3aufeCsitijs3+f2NsrPtlAWIR6OPiqljl96GVCUbLe0HyqIpVaoA==}
engines: {node: ^14.18.0 || >=16.0.0}
peerDependencies:
vite: ^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0
vite: ^6.4.2
'@vitest/expect@3.2.4':
resolution: {integrity: sha512-Io0yyORnB6sikFlt8QW5K7slY4OjqNX9jmJQ02QDda8lyM6B5oNgVWoSoKPac8/kgnCUzuHQKrSLtu/uOqqrig==}
@ -1214,7 +1221,7 @@ packages:
resolution: {integrity: sha512-46ryTE9RZO/rfDd7pEqFl7etuyzekzEhUbTW3BvmeO/BcCMEgq59BKhek3dXDWgAj4oMK6OZi+vRr1wPW6qjEQ==}
peerDependencies:
msw: ^2.4.9
vite: ^5.0.0 || ^6.0.0 || ^7.0.0-0
vite: ^6.4.2
peerDependenciesMeta:
msw:
optional: true
@ -1306,7 +1313,7 @@ packages:
engines: {node: ^10 || ^12 || >=14}
hasBin: true
peerDependencies:
postcss: ^8.1.0
postcss: ^8.5.10
babel-plugin-macros@3.1.0:
resolution: {integrity: sha512-Cg7TFGpIr01vOQNODXOOaGz2NpCU5gl8x1qJFbb6hbZxR7XrcE2vtbAsTAbJ7/xwJtUuJEw8K8Zr/AE0LHlesg==}
@ -1621,7 +1628,7 @@ packages:
resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==}
engines: {node: '>=12.0.0'}
peerDependencies:
picomatch: ^3 || ^4
picomatch: ^4.0.4
peerDependenciesMeta:
picomatch:
optional: true
@ -1649,8 +1656,8 @@ packages:
resolution: {integrity: sha512-CYcENa+FtcUKLmhhqyctpclsq7QF38pKjZHsGNiSQF5r4FtoKDWabFDl3hzaEQMvT1LHEysw5twgLvpYYb4vbw==}
engines: {node: ^10.12.0 || >=12.0.0}
flatted@3.4.1:
resolution: {integrity: sha512-IxfVbRFVlV8V/yRaGzk0UVIcsKKHMSfYw66T/u4nTwlWteQePsxe//LjudR1AMX4tZW3WFCh3Zqa/sjlqpbURQ==}
flatted@3.4.2:
resolution: {integrity: sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==}
format@0.2.2:
resolution: {integrity: sha512-wzsgA6WOq+09wrU1tsJ09udeR/YZRaeArL9e1wPbFg3GG2yDnC2ldKpxs4xunpFF9DgqCqOIra3bc1HWrJ37Ww==}
@ -2114,8 +2121,8 @@ packages:
mz@2.7.0:
resolution: {integrity: sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==}
nanoid@3.3.11:
resolution: {integrity: sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==}
nanoid@3.3.12:
resolution: {integrity: sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==}
engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
hasBin: true
@ -2211,12 +2218,12 @@ packages:
picocolors@1.1.1:
resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==}
picomatch@2.3.1:
resolution: {integrity: sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==}
picomatch@2.3.2:
resolution: {integrity: sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==}
engines: {node: '>=8.6'}
picomatch@4.0.3:
resolution: {integrity: sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==}
picomatch@4.0.4:
resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==}
engines: {node: '>=12'}
pify@2.3.0:
@ -2245,20 +2252,20 @@ packages:
resolution: {integrity: sha512-hpr+J05B2FVYUAXHeK1YyI267J/dDDhMU6B6civm8hSY1jYJnBXxzKDKDswzJmtLHryrjhnDjqqp/49t8FALew==}
engines: {node: '>=14.0.0'}
peerDependencies:
postcss: ^8.0.0
postcss: ^8.5.10
postcss-js@4.1.0:
resolution: {integrity: sha512-oIAOTqgIo7q2EOwbhb8UalYePMvYoIeRY2YKntdpFQXNosSu3vLrniGgmH9OKs/qAkfoj5oB3le/7mINW1LCfw==}
engines: {node: ^12 || ^14 || >= 16}
peerDependencies:
postcss: ^8.4.21
postcss: ^8.5.10
postcss-load-config@6.0.1:
resolution: {integrity: sha512-oPtTM4oerL+UXmx+93ytZVN82RrlY/wPUV8IeDxFrzIjXOLF1pN+EmKPLbubvKHT2HC20xXsCAH2Z+CKV6Oz/g==}
engines: {node: '>= 18'}
peerDependencies:
jiti: '>=1.21.0'
postcss: '>=8.0.9'
postcss: ^8.5.10
tsx: ^4.8.1
yaml: ^2.4.2
peerDependenciesMeta:
@ -2275,7 +2282,7 @@ packages:
resolution: {integrity: sha512-HQbt28KulC5AJzG+cZtj9kvKB93CFCdLvog1WFLf1D+xmMvPGlBstkpTEZfK5+AN9hfJocyBFCNiqyS48bpgzQ==}
engines: {node: '>=12.0'}
peerDependencies:
postcss: ^8.2.14
postcss: ^8.5.10
postcss-selector-parser@6.1.2:
resolution: {integrity: sha512-Q8qQfPiZ+THO/3ZrOrO0cJJKfpYCagtMUkXbnEfmgUjwXg6z/WBeOyS9APBBPCTSiDV+s4SwQGu8yFsiMRIudg==}
@ -2284,8 +2291,8 @@ packages:
postcss-value-parser@4.2.0:
resolution: {integrity: sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==}
postcss@8.5.8:
resolution: {integrity: sha512-OW/rX8O/jXnm82Ey1k44pObPtdblfiuWnrd8X7GJ7emImCOstunGbXUpp7HdBrFQX6rJzn3sPT397Wp5aCwCHg==}
postcss@8.5.15:
resolution: {integrity: sha512-FfR8sjd4em2T6fb3I2MwAJU7HWVMr9zba+enmQeeWFfCbm+UOC/0X4DS8XtpUTMwWMGbjKYP7xjfNekzyGmB3A==}
engines: {node: ^10 || ^12 || >=14}
prelude-ls@1.2.1:
@ -2734,8 +2741,8 @@ packages:
engines: {node: ^18.0.0 || ^20.0.0 || >=22.0.0}
hasBin: true
vite@6.4.1:
resolution: {integrity: sha512-+Oxm7q9hDoLMyJOYfUYBuHQo+dkAloi33apOPP56pzj+vsdJDzr+j1NISE5pyaAuKL4A3UD34qd0lx5+kfKp2g==}
vite@6.4.2:
resolution: {integrity: sha512-2N/55r4JDJ4gdrCvGgINMy+HH3iRpNIz8K6SFwVsA+JbQScLiC+clmAxBgwiSPgcG9U15QmvqCGWzMbqda5zGQ==}
engines: {node: ^18.0.0 || ^20.0.0 || >=22.0.0}
hasBin: true
peerDependencies:
@ -3885,7 +3892,7 @@ snapshots:
'@ungap/structured-clone@1.3.0': {}
'@vitejs/plugin-react@4.7.0(vite@6.4.1(jiti@1.21.7))':
'@vitejs/plugin-react@4.7.0(vite@6.4.2(jiti@1.21.7))':
dependencies:
'@babel/core': 7.29.0
'@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.0)
@ -3893,7 +3900,7 @@ snapshots:
'@rolldown/pluginutils': 1.0.0-beta.27
'@types/babel__core': 7.20.5
react-refresh: 0.17.0
vite: 6.4.1(jiti@1.21.7)
vite: 6.4.2(jiti@1.21.7)
transitivePeerDependencies:
- supports-color
@ -3905,13 +3912,13 @@ snapshots:
chai: 5.3.3
tinyrainbow: 2.0.0
'@vitest/mocker@3.2.4(vite@6.4.1(jiti@1.21.7))':
'@vitest/mocker@3.2.4(vite@6.4.2(jiti@1.21.7))':
dependencies:
'@vitest/spy': 3.2.4
estree-walker: 3.0.3
magic-string: 0.30.21
optionalDependencies:
vite: 6.4.1(jiti@1.21.7)
vite: 6.4.2(jiti@1.21.7)
'@vitest/pretty-format@3.2.4':
dependencies:
@ -3969,7 +3976,7 @@ snapshots:
anymatch@3.1.3:
dependencies:
normalize-path: 3.0.0
picomatch: 2.3.1
picomatch: 2.3.2
arg@5.0.2: {}
@ -3989,13 +3996,13 @@ snapshots:
attr-accept@2.2.5: {}
autoprefixer@10.4.27(postcss@8.5.8):
autoprefixer@10.4.27(postcss@8.5.15):
dependencies:
browserslist: 4.28.1
caniuse-lite: 1.0.30001777
fraction.js: 5.3.4
picocolors: 1.1.1
postcss: 8.5.8
postcss: 8.5.15
postcss-value-parser: 4.2.0
babel-plugin-macros@3.1.0:
@ -4335,9 +4342,9 @@ snapshots:
dependencies:
format: 0.2.2
fdir@6.5.0(picomatch@4.0.3):
fdir@6.5.0(picomatch@4.0.4):
optionalDependencies:
picomatch: 4.0.3
picomatch: 4.0.4
file-entry-cache@6.0.1:
dependencies:
@ -4360,11 +4367,11 @@ snapshots:
flat-cache@3.2.0:
dependencies:
flatted: 3.4.1
flatted: 3.4.2
keyv: 4.5.4
rimraf: 3.0.2
flatted@3.4.1: {}
flatted@3.4.2: {}
format@0.2.2: {}
@ -5031,7 +5038,7 @@ snapshots:
micromatch@4.0.8:
dependencies:
braces: 3.0.3
picomatch: 2.3.1
picomatch: 2.3.2
minimatch@3.1.5:
dependencies:
@ -5053,7 +5060,7 @@ snapshots:
object-assign: 4.1.1
thenify-all: 1.6.0
nanoid@3.3.11: {}
nanoid@3.3.12: {}
natural-compare@1.4.0: {}
@ -5149,9 +5156,9 @@ snapshots:
picocolors@1.1.1: {}
picomatch@2.3.1: {}
picomatch@2.3.2: {}
picomatch@4.0.3: {}
picomatch@4.0.4: {}
pify@2.3.0: {}
@ -5167,28 +5174,28 @@ snapshots:
pluralize@8.0.0: {}
postcss-import@15.1.0(postcss@8.5.8):
postcss-import@15.1.0(postcss@8.5.15):
dependencies:
postcss: 8.5.8
postcss: 8.5.15
postcss-value-parser: 4.2.0
read-cache: 1.0.0
resolve: 1.22.11
postcss-js@4.1.0(postcss@8.5.8):
postcss-js@4.1.0(postcss@8.5.15):
dependencies:
camelcase-css: 2.0.1
postcss: 8.5.8
postcss: 8.5.15
postcss-load-config@6.0.1(jiti@1.21.7)(postcss@8.5.8):
postcss-load-config@6.0.1(jiti@1.21.7)(postcss@8.5.15):
dependencies:
lilconfig: 3.1.3
optionalDependencies:
jiti: 1.21.7
postcss: 8.5.8
postcss: 8.5.15
postcss-nested@6.2.0(postcss@8.5.8):
postcss-nested@6.2.0(postcss@8.5.15):
dependencies:
postcss: 8.5.8
postcss: 8.5.15
postcss-selector-parser: 6.1.2
postcss-selector-parser@6.1.2:
@ -5198,9 +5205,9 @@ snapshots:
postcss-value-parser@4.2.0: {}
postcss@8.5.8:
postcss@8.5.15:
dependencies:
nanoid: 3.3.11
nanoid: 3.3.12
picocolors: 1.1.1
source-map-js: 1.2.1
@ -5320,7 +5327,7 @@ snapshots:
readdirp@3.6.0:
dependencies:
picomatch: 2.3.1
picomatch: 2.3.2
rehype-highlight@7.0.2:
dependencies:
@ -5533,11 +5540,11 @@ snapshots:
normalize-path: 3.0.0
object-hash: 3.0.0
picocolors: 1.1.1
postcss: 8.5.8
postcss-import: 15.1.0(postcss@8.5.8)
postcss-js: 4.1.0(postcss@8.5.8)
postcss-load-config: 6.0.1(jiti@1.21.7)(postcss@8.5.8)
postcss-nested: 6.2.0(postcss@8.5.8)
postcss: 8.5.15
postcss-import: 15.1.0(postcss@8.5.15)
postcss-js: 4.1.0(postcss@8.5.15)
postcss-load-config: 6.0.1(jiti@1.21.7)(postcss@8.5.15)
postcss-nested: 6.2.0(postcss@8.5.15)
postcss-selector-parser: 6.1.2
resolve: 1.22.11
sucrase: 3.35.1
@ -5565,8 +5572,8 @@ snapshots:
tinyglobby@0.2.15:
dependencies:
fdir: 6.5.0(picomatch@4.0.3)
picomatch: 4.0.3
fdir: 6.5.0(picomatch@4.0.4)
picomatch: 4.0.4
tinypool@1.1.1: {}
@ -5703,7 +5710,7 @@ snapshots:
debug: 4.4.3(supports-color@10.2.2)
es-module-lexer: 1.7.0
pathe: 2.0.3
vite: 6.4.1(jiti@1.21.7)
vite: 6.4.2(jiti@1.21.7)
transitivePeerDependencies:
- '@types/node'
- jiti
@ -5718,12 +5725,12 @@ snapshots:
- tsx
- yaml
vite@6.4.1(jiti@1.21.7):
vite@6.4.2(jiti@1.21.7):
dependencies:
esbuild: 0.25.12
fdir: 6.5.0(picomatch@4.0.3)
picomatch: 4.0.3
postcss: 8.5.8
fdir: 6.5.0(picomatch@4.0.4)
picomatch: 4.0.4
postcss: 8.5.15
rollup: 4.59.0
tinyglobby: 0.2.15
optionalDependencies:
@ -5734,7 +5741,7 @@ snapshots:
dependencies:
'@types/chai': 5.2.3
'@vitest/expect': 3.2.4
'@vitest/mocker': 3.2.4(vite@6.4.1(jiti@1.21.7))
'@vitest/mocker': 3.2.4(vite@6.4.2(jiti@1.21.7))
'@vitest/pretty-format': 3.2.4
'@vitest/runner': 3.2.4
'@vitest/snapshot': 3.2.4
@ -5745,14 +5752,14 @@ snapshots:
expect-type: 1.3.0
magic-string: 0.30.21
pathe: 2.0.3
picomatch: 4.0.3
picomatch: 4.0.4
std-env: 3.10.0
tinybench: 2.9.0
tinyexec: 0.3.2
tinyglobby: 0.2.15
tinypool: 1.1.1
tinyrainbow: 2.0.0
vite: 6.4.1(jiti@1.21.7)
vite: 6.4.2(jiti@1.21.7)
vite-node: 3.2.4(jiti@1.21.7)
why-is-node-running: 2.3.0
optionalDependencies: