weichen
a61bd70399
Why: GHSA-82fw-gwwq-j7x9 (path traversal / arbitrary file read via @vitest/mocker redirect mock) affects vitest 2.1.0-4.1.10; the locked 3.x toolchain was inside the range. Dev-only dependency, but the fix is a routine bump — follow-up to the 2026-09-30 dependency CVE inventory. Evidence: vitest and @vitest/mocker now at 4.1.11 (first fixed release); npm audit reports 0 vulnerabilities; npx vitest run 33/33 green on vitest 4. Impact: package.json/package-lock.json devDependency bump only; no production dependency or source change. Refs: Dev-side task fix/dep-vuln-bumps (gitlink pin follows after combined verification)
26 lines
539 B
JSON
26 lines
539 B
JSON
{
|
|
"name": "agent-system-frontend",
|
|
"private": true,
|
|
"version": "0.1.0",
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "tsc -b && vite build",
|
|
"test": "vitest run",
|
|
"preview": "vite preview"
|
|
},
|
|
"dependencies": {
|
|
"marked": "^15.0.7",
|
|
"react": "^19.2.0",
|
|
"react-dom": "^19.2.0"
|
|
},
|
|
"devDependencies": {
|
|
"@types/react": "^19.2.0",
|
|
"@types/react-dom": "^19.2.0",
|
|
"@vitejs/plugin-react": "^4.3.4",
|
|
"typescript": "^5.7.3",
|
|
"vite": "^6.0.11",
|
|
"vitest": "^4.1.11"
|
|
}
|
|
}
|