open-source/qinglong
1
0
Fork 0
mirror of https://github.com/whyour/qinglong.git synced 2026-10-17 07:20:51 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: apply minimal production dependency security patches

Browse Source
This commit is contained in:
whyour
2026-10-11 02:09:20 +08:00
parent 89c6355635
commit b06cb72334
2 changed files with 40 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files
package.json
+7 -5
View File
@@ -74,20 +74,22 @@
"overrides": { "overrides": {
"sqlite3": "npm:@whyour/sqlite3@1.1.2", "sqlite3": "npm:@whyour/sqlite3@1.1.2",
"@codemirror/state": "6.5.4", "@codemirror/state": "6.5.4",
"@codemirror/view": "6.39.16" "@codemirror/view": "6.39.16",
"proxy-addr": "2.0.8",
"websocket-driver": "0.7.5"
} }
}, },
"dependencies": { "dependencies": {
"@ant-design/plots": "^2.6.8", "@ant-design/plots": "^2.6.8",
"@bufbuild/protobuf": "^2.10.0", "@bufbuild/protobuf": "^2.10.0",
"@grpc/grpc-js": "^1.14.0", "@grpc/grpc-js": "1.14.5",
"@grpc/proto-loader": "^0.8.0", "@grpc/proto-loader": "^0.8.0",
"@keyv/sqlite": "^4.0.1", "@keyv/sqlite": "^4.0.1",
"@otplib/preset-default": "^12.0.1", "@otplib/preset-default": "^12.0.1",
"body-parser": "^1.20.3", "body-parser": "^1.20.3",
"celebrate": "^15.0.3", "celebrate": "^15.0.3",
"chokidar": "^4.0.1", "chokidar": "^4.0.1",
"compression": "^1.7.4", "compression": "1.8.2",
"cors": "^2.8.5", "cors": "^2.8.5",
"cron-parser": "^5.4.0", "cron-parser": "^5.4.0",
"cross-spawn": "^7.0.6", "cross-spawn": "^7.0.6",
@@ -106,7 +108,7 @@
"jsonwebtoken": "^9.0.2", "jsonwebtoken": "^9.0.2",
"keyv": "^5.2.3", "keyv": "^5.2.3",
"lodash": "^4.17.21", "lodash": "^4.17.21",
"multer": "2.1.1", "multer": "2.3.0",
"node-cron": "4.6.0", "node-cron": "4.6.0",
"nodemailer": "^8.0.1", "nodemailer": "^8.0.1",
"p-queue-cjs": "7.3.4", "p-queue-cjs": "7.3.4",
@@ -114,7 +116,7 @@
"ps-tree": "^1.2.0", "ps-tree": "^1.2.0",
"reflect-metadata": "^0.2.2", "reflect-metadata": "^0.2.2",
"request-ip": "3.3.0", "request-ip": "3.3.0",
"sequelize": "^6.37.5", "sequelize": "6.37.8",
"sockjs": "^0.3.24", "sockjs": "^0.3.24",
"sqlite3": "npm:@whyour/sqlite3@1.1.2", "sqlite3": "npm:@whyour/sqlite3@1.1.2",
"toad-scheduler": "^3.0.1", "toad-scheduler": "^3.0.1",
pnpm-lock.yaml
Generated
+33 -29
View File
@@ -4,6 +4,8 @@ overrides:
sqlite3: npm:@whyour/sqlite3@1.1.2 sqlite3: npm:@whyour/sqlite3@1.1.2
'@codemirror/state': 6.5.4 '@codemirror/state': 6.5.4
'@codemirror/view': 6.39.16 '@codemirror/view': 6.39.16
proxy-addr: 2.0.8
websocket-driver: 0.7.5
dependencies: dependencies:
'@ant-design/plots': '@ant-design/plots':
@@ -13,8 +15,8 @@ dependencies:
specifier: ^2.10.0 specifier: ^2.10.0
version: 2.10.0 version: 2.10.0
'@grpc/grpc-js': '@grpc/grpc-js':
specifier: ^1.14.0 specifier: 1.14.5
version: 1.14.0 version: 1.14.5
'@grpc/proto-loader': '@grpc/proto-loader':
specifier: ^0.8.0 specifier: ^0.8.0
version: 0.8.0 version: 0.8.0
@@ -34,8 +36,8 @@ dependencies:
specifier: ^4.0.1 specifier: ^4.0.1
version: 4.0.1 version: 4.0.1
compression: compression:
specifier: ^1.7.4 specifier: 1.8.2
version: 1.7.5 version: 1.8.2
cors: cors:
specifier: ^2.8.5 specifier: ^2.8.5
version: 2.8.5 version: 2.8.5
@@ -91,8 +93,8 @@ dependencies:
specifier: ^4.17.21 specifier: ^4.17.21
version: 4.17.21 version: 4.17.21
multer: multer:
specifier: 2.1.1 specifier: 2.3.0
version: 2.1.1 version: 2.3.0
node-cron: node-cron:
specifier: 4.6.0 specifier: 4.6.0
version: 4.6.0 version: 4.6.0
@@ -115,8 +117,8 @@ dependencies:
specifier: 3.3.0 specifier: 3.3.0
version: 3.3.0 version: 3.3.0
sequelize: sequelize:
specifier: ^6.37.5 specifier: 6.37.8
version: 6.37.5(@whyour/sqlite3@1.1.2) version: 6.37.8(@whyour/sqlite3@1.1.2)
sockjs: sockjs:
specifier: ^0.3.24 specifier: ^0.3.24
version: 0.3.24 version: 0.3.24
@@ -2962,8 +2964,8 @@ packages:
deprecated: the package is rather renamed to @formatjs/ecma-abstract with some changes in functionality (primarily selectUnit is removed and we don't plan to make any further changes to this package deprecated: the package is rather renamed to @formatjs/ecma-abstract with some changes in functionality (primarily selectUnit is removed and we don't plan to make any further changes to this package
dev: true dev: true
/@grpc/grpc-js@1.14.0: /@grpc/grpc-js@1.14.5:
resolution: {integrity: sha512-N8Jx6PaYzcTRNzirReJCtADVoq4z7+1KQ4E70jTg/koQiMoUSN1kbNjPOqpPbhMFhfU1/l7ixspPl8dNY+FoUg==} resolution: {integrity: sha512-7VZM+SVdEcUUqSQeNI3zM8Qs/BhQKZndPo2h5VkYkAM8Iz0wJIa8mKV5ekQGqG8UUsnkQ0NMxIxwkIHYvj0qOw==}
engines: {node: '>=12.10.0'} engines: {node: '>=12.10.0'}
dependencies: dependencies:
'@grpc/proto-loader': 0.8.0 '@grpc/proto-loader': 0.8.0
@@ -4940,7 +4942,7 @@ packages:
'@umijs/bundler-utils': 4.4.4 '@umijs/bundler-utils': 4.4.4
'@umijs/mako': 0.11.1 '@umijs/mako': 0.11.1
chalk: 4.1.2 chalk: 4.1.2
compression: 1.7.5 compression: 1.8.2
connect-history-api-fallback: 2.0.0 connect-history-api-fallback: 2.0.0
cors: 2.8.5 cors: 2.8.5
express: 4.21.2 express: 4.21.2
@@ -6828,15 +6830,16 @@ packages:
serialize-javascript: 6.0.2 serialize-javascript: 6.0.2
dev: true dev: true
/compression@1.7.5: /compression@1.8.2:
resolution: {integrity: sha512-bQJ0YRck5ak3LgtnpKkiabX5pNF7tMUh1BSy2ZBOTh0Dim0BUu6aPPwByIns6/A5Prh8PufSPerMDUklpzes2Q==} resolution: {integrity: sha512-o8vI5RE5A6EVVOd9o41jKp41aJom+QTEO/Bx8MYNjexMo/Bv2WOjUfZr+aL0WnYSgymUy6zeguqLTsIhV0gMvQ==}
engines: {node: '>= 0.8.0'} engines: {node: '>= 0.8.0'}
dependencies: dependencies:
bytes: 3.1.2 bytes: 3.1.2
compressible: 2.0.18 compressible: 2.0.18
debug: 2.6.9 debug: 2.6.9
destroy: 1.2.0
negotiator: 0.6.4 negotiator: 0.6.4
on-headers: 1.0.2 on-headers: 1.1.0
safe-buffer: 5.2.1 safe-buffer: 5.2.1
vary: 1.1.2 vary: 1.1.2
transitivePeerDependencies: transitivePeerDependencies:
@@ -7731,6 +7734,7 @@ packages:
/dottie@2.0.6: /dottie@2.0.6:
resolution: {integrity: sha512-iGCHkfUc5kFekGiqhe8B/mdaurD+lakO9txNnTvKtA6PISrw86LgqHvRzWYPyoE2Ph5aMIrCw9/uko6XHTKCwA==} resolution: {integrity: sha512-iGCHkfUc5kFekGiqhe8B/mdaurD+lakO9txNnTvKtA6PISrw86LgqHvRzWYPyoE2Ph5aMIrCw9/uko6XHTKCwA==}
deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
dev: false dev: false
/dprint-node@1.0.8: /dprint-node@1.0.8:
@@ -8527,7 +8531,7 @@ packages:
on-finished: 2.4.1 on-finished: 2.4.1
parseurl: 1.3.3 parseurl: 1.3.3
path-to-regexp: 0.1.12 path-to-regexp: 0.1.12
proxy-addr: 2.0.7 proxy-addr: 2.0.8
qs: 6.13.0 qs: 6.13.0
range-parser: 1.2.1 range-parser: 1.2.1
safe-buffer: 5.2.1 safe-buffer: 5.2.1
@@ -8611,7 +8615,7 @@ packages:
resolution: {integrity: sha512-CzbClwlXAuiRQAlUyfqPgvPoNKTckTPGfwZV4ZdAhVcP2lh9KUxJg2b5GkE7XbjKQ3YJnQ9z6D9ntLAlB+tP8g==} resolution: {integrity: sha512-CzbClwlXAuiRQAlUyfqPgvPoNKTckTPGfwZV4ZdAhVcP2lh9KUxJg2b5GkE7XbjKQ3YJnQ9z6D9ntLAlB+tP8g==}
engines: {node: '>=0.8.0'} engines: {node: '>=0.8.0'}
dependencies: dependencies:
websocket-driver: 0.7.4 websocket-driver: 0.7.5
/fb-watchman@2.0.2: /fb-watchman@2.0.2:
resolution: {integrity: sha512-p5161BqbuCaSnB8jIbzQHOlpgsPmK5rJVDfDKO91Axs5NC1uu3HRQm6wt9cd9/+GtQQIO53JdGXXoyDpTAsgYA==} resolution: {integrity: sha512-p5161BqbuCaSnB8jIbzQHOlpgsPmK5rJVDfDKO91Axs5NC1uu3HRQm6wt9cd9/+GtQQIO53JdGXXoyDpTAsgYA==}
@@ -10751,8 +10755,8 @@ packages:
/ms@2.1.3: /ms@2.1.3:
resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==} resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
/multer@2.1.1: /multer@2.3.0:
resolution: {integrity: sha512-mo+QTzKlx8R7E5ylSXxWzGoXoZbOsRMpyitcht8By2KHvMbf3tjwosZ/Mu/XYU6UuJ3VZnODIrak5ZrPiPyB6A==} resolution: {integrity: sha512-cjNbm3sttszgZeGfJR124D+jFEfkXCVAsoPBmFn9X7UxmDSFHWqE2CoEj0vrmSpuAFnqWR1Szcm9QTsiHr60Xw==}
engines: {node: '>= 10.16.0'} engines: {node: '>= 10.16.0'}
dependencies: dependencies:
append-field: 1.0.0 append-field: 1.0.0
@@ -11140,8 +11144,8 @@ packages:
dependencies: dependencies:
ee-first: 1.1.1 ee-first: 1.1.1
/on-headers@1.0.2: /on-headers@1.1.0:
resolution: {integrity: sha512-pZAE+FJLoyITytdqK0U5s+FIpjN0JP3OzFi/u8Rx+EV5/W+JTWGXG8xFzevE7AjBfDqHv/8vL8qQsIhHnqRkrA==} resolution: {integrity: sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A==}
engines: {node: '>= 0.8'} engines: {node: '>= 0.8'}
/once@1.4.0: /once@1.4.0:
@@ -12177,8 +12181,8 @@ packages:
long: 5.2.3 long: 5.2.3
dev: false dev: false
/proxy-addr@2.0.7: /proxy-addr@2.0.8:
resolution: {integrity: sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==} resolution: {integrity: sha512-5nnx0yGyVUcY6t9RnWcARWtwT9F1D8O9rt08htPvnd49W1IgZtmLkhu9WfMzQj1cFxjHIO6connUNVW5k7AVyQ==}
engines: {node: '>= 0.10'} engines: {node: '>= 0.10'}
dependencies: dependencies:
forwarded: 0.2.0 forwarded: 0.2.0
@@ -13910,8 +13914,8 @@ packages:
engines: {node: '>= 10.0.0'} engines: {node: '>= 10.0.0'}
dev: false dev: false
/sequelize@6.37.5(@whyour/sqlite3@1.1.2): /sequelize@6.37.8(@whyour/sqlite3@1.1.2):
resolution: {integrity: sha512-10WA4poUb3XWnUROThqL2Apq9C2NhyV1xHPMZuybNMCucDsbbFuKg51jhmyvvAUyUqCiimwTZamc3AHhMoBr2Q==} resolution: {integrity: sha512-HJ0IQFqcTsTiqbEgiuioYFMSD00TP6Cz7zoTti+zVVBwVe9fEhev9cH6WnM3XU31+ABS356durAb99ZuOthnKw==}
engines: {node: '>=10.0.0'} engines: {node: '>=10.0.0'}
peerDependencies: peerDependencies:
ibm_db: '*' ibm_db: '*'
@@ -13945,7 +13949,7 @@ packages:
dependencies: dependencies:
'@types/debug': 4.1.12 '@types/debug': 4.1.12
'@types/validator': 13.12.2 '@types/validator': 13.12.2
debug: 4.3.7(supports-color@5.5.0) debug: 4.4.3
dottie: 2.0.6 dottie: 2.0.6
inflection: 1.13.4 inflection: 1.13.4
lodash: 4.17.21 lodash: 4.17.21
@@ -13953,7 +13957,7 @@ packages:
moment-timezone: 0.5.46 moment-timezone: 0.5.46
pg-connection-string: 2.7.0 pg-connection-string: 2.7.0
retry-as-promised: 7.0.4 retry-as-promised: 7.0.4
semver: 7.6.3 semver: 7.7.4
sequelize-pool: 7.1.0 sequelize-pool: 7.1.0
sqlite3: /@whyour/sqlite3@1.1.2 sqlite3: /@whyour/sqlite3@1.1.2
toposort-class: 1.0.1 toposort-class: 1.0.1
@@ -14123,7 +14127,7 @@ packages:
dependencies: dependencies:
faye-websocket: 0.11.4 faye-websocket: 0.11.4
uuid: 8.3.2 uuid: 8.3.2
websocket-driver: 0.7.4 websocket-driver: 0.7.5
dev: false dev: false
/sonic-boom@2.8.0: /sonic-boom@2.8.0:
@@ -15528,8 +15532,8 @@ packages:
javascript-stringify: 2.1.0 javascript-stringify: 2.1.0
dev: true dev: true
/websocket-driver@0.7.4: /websocket-driver@0.7.5:
resolution: {integrity: sha512-b17KeDIQVjvb0ssuSDF2cYXSg2iztliJ4B9WdsuB6J952qCPKmnVq4DyW5motImXHDC1cBT/1UezrJVsKw5zjg==} resolution: {integrity: sha512-ZL2+3c7kMBdIRCMz6l8jQMHyGVxj+UL+xVk74Ombiciboca8rHa15L86B19E5oh1pL9Ii/uj54gtsIrZGMo6zA==}
engines: {node: '>=0.8.0'} engines: {node: '>=0.8.0'}
dependencies: dependencies:
http-parser-js: 0.5.8 http-parser-js: 0.5.8