Repository navigation
docs(roadmap): 依赖漏洞回潮登记——38 条(14 high)明细+方案待拍板 - #110
Merged
Merged
Conversation
pnpm audit(官方源)38 条 vs 10-05 基线 16 条;14 high 全在传递依赖 (devalue×4/vite/zod/sharp/undici 等)。建议 v2.22.0 A 层先例 overrides 一批收;安全相关批按铁律等人工确认,本 PR 只登记事实与方案
Deploying anvilwiki with
|
| Latest commit: |
17af8e5
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://f8138ac5.anvilwiki.pages.dev |
| Branch Preview URL: | https://docs-audit-resurgence-2026-1.anvilwiki.pages.dev |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
动机
每日体检顺带跑
pnpm audit(官方源),发现依赖漏洞自 10-05 基线 16 条回潮至 38 条(14 high/19 moderate/5 low)——新披露批量入库。安全相关批按任务铁律不动手修,本 PR 只登记事实+方案,等主理人拍板。明细(14 high 全传递依赖)
建议方案(待拍板,不在本 PR 执行)
v2.22.0 A 层先例:pnpm-workspace.yaml overrides 钉补丁线一批收——
验证
纯文档批:check-content / test 全绿,无代码变更。
建议版本号
纯 docs 登记,无需发版;修复批(若批准)建议 v2.39.x 独立小版本,与 #105 的 v2.39.0 建议合并考虑。