mirror of
https://github.com/iflytek/skillhub.git
synced 2026-09-27 01:23:30 +00:00
b7b8fd3d5d
Vitest <4.1.0 allows arbitrary file read/execution when the UI server is listening (GHSA-5xrq-8626-4rwp, severity: critical). Bumps vitest from 3.2.4 to 4.1.x, which also flows through to the bundled @vitest/* packages in pnpm-lock.yaml. Adjusts two tests for the stricter v4 mock contract: `new`-callable mocks must be backed by a `function`/`class` implementation rather than an arrow function (web/src/shared/lib/date-time.test.ts, web/src/app/providers.test.ts). Signed-off-by: dongmucat <1127093059@qq.com> |
||
|---|---|---|
| .. | ||
| components | ||
| hooks | ||
| lib | ||
| ui | ||