ci / verify (pull_request) Failing after 3m45s
将构建链路中的 fast-uri 锁定到 3.1.4,修复 host confusion 高危公告,不改变应用运行时依赖。\n\n验证:pnpm install --frozen-lockfile;pnpm audit --audit-level high;pnpm lint;pnpm test;pnpm build。
24 lines
556 B
YAML
24 lines
556 B
YAML
packages:
|
|
- apps/web
|
|
- packages/*
|
|
|
|
allowBuilds:
|
|
esbuild: true
|
|
nx: true
|
|
|
|
overrides:
|
|
'@babel/core@<=7.29.0': 7.29.6
|
|
'axios@<1.18.0': 1.18.0
|
|
'brace-expansion@>=2.0.0 <2.1.2': 2.1.2
|
|
'dompurify@<=3.4.10': 3.4.11
|
|
'esbuild@>=0.27.3 <0.28.1': 0.28.1
|
|
'fast-uri@>=3.0.0 <3.1.4': 3.1.4
|
|
'form-data@>=4.0.0 <4.0.6': 4.0.6
|
|
'js-yaml@<4.3.0': 4.3.0
|
|
'mermaid@>=11.0.0-alpha.1 <=11.14.0': 11.15.0
|
|
'minimatch@>=9.0.0 <9.0.7': 9.0.7
|
|
'@nx/js>picomatch': 4.0.5
|
|
'@nx/vite>picomatch': 4.0.5
|
|
'@nx/workspace>picomatch': 4.0.5
|
|
'tmp@<0.2.7': 0.2.7
|