europa-tech-srl/adami-site
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[CL-DEPS] Полное обновление зависимостей: vite 8.0.16 (security), eslint 10, TS 6 #8

Merged
andrei merged 2 commits from feature/claude-dep-update-20260611 into main 2026-06-11 12:43:48 +00:00
Conversation 0 Commits 2 Files changed 3 +671 -835
andrei commented 2026-06-11 11:24:46 +00:00
Owner
Copy link

Что сделано

ncu -u до latest: vite ^8.0.16, eslint 10.4.1, typescript 6.0.3 (+ tsconfig миграция baseUrl→relative paths), tailwind 4.3, @types/node 25, react 19.2.7, minor/patch хвост.

Зачем

HIGH vite path traversal (GHSA-4w7w-66w2-5vf9) + server.fs.deny bypass в lockfile; postcss XSS; brace-expansion DoS. После: npm audit 0.

План тестирования

tsc -b + vite build чисто; eslint: No issues; playwright-тестов в репо нет (Total: 0).

Где могу ошибаться

eslint 10 и TS 6 — major; CI на push прогонит eslint+build ещё раз в Linux.

## Что сделано ncu -u до latest: vite ^8.0.16, eslint 10.4.1, typescript 6.0.3 (+ tsconfig миграция baseUrl→relative paths), tailwind 4.3, @types/node 25, react 19.2.7, minor/patch хвост. ## Зачем HIGH vite path traversal (GHSA-4w7w-66w2-5vf9) + server.fs.deny bypass в lockfile; postcss XSS; brace-expansion DoS. После: npm audit 0. ## План тестирования tsc -b + vite build чисто; eslint: No issues; playwright-тестов в репо нет (Total: 0). ## Где могу ошибаться eslint 10 и TS 6 — major; CI на push прогонит eslint+build ещё раз в Linux.
[CL-DEPS] chore(deps): полное обновление зависимостей до latest
Some checks failed
Forgejo Smoke Test / Smoke (pull_request) Successful in 2s
Details
Adami Site CI / lint-and-build (pull_request) Failing after 41s
Details
d31c5c888a 
vite ^8.0.16 (HIGH path traversal в optimized deps .map +
server.fs.deny bypass в lockfile), postcss/brace-expansion fixes,
eslint 9->10, typescript 5.9->6.0 (migrate: baseUrl убран, paths
относительные — TS5101), @types/node 24->25, остальное minor/patch.

npm audit: 0 vulnerabilities; tsc -b + vite build чисто; eslint: 0.
[CL-DEPS] fix(lock): лок сгенерирован в node:22-bookworm (идентично CI)
All checks were successful
Forgejo Smoke Test / Smoke (pull_request) Successful in 1s
Details
Adami Site CI / lint-and-build (pull_request) Successful in 14s
Details
78844b501f 
npm ci на Linux-раннере падал EUSAGE 'Missing @emnapi/*' — Windows
npm не пишет optional wasi-деревья чужих платформ.
andrei merged commit dd3a8b99a6 into main 2026-06-11 12:43:48 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
europa-tech-srl/adami-site!8
No description provided.