security(deps): update dependencies and rebuild kepubify with go 1.27.2

Bump every direct dependency to its newest same-major release and move the
node base image to 26.11.1, which invalidates the cached apk layer and picks
up tiff 4.7.2 for CVE-2026-4775. Rebuild all six kepubify binaries from the
pinned upstream commit with Go 1.27.2 for CVE-2026-78667, CVE-2026-78669 and
CVE-2026-97031, keeping v4-dev so rendition hashes stay stable.
This commit is contained in:
neon
2026-10-11 05:19:04 +00:00
parent e4843e4aa1
commit c37821782a
12 changed files with 1793 additions and 1844 deletions
+24 -24
View File
@@ -62,67 +62,67 @@
"@embedpdf/plugin-zoom": "2.15.1",
"@fontsource-variable/fraunces": "^5.3.0",
"@fontsource-variable/inter": "^5.3.0",
"@formatjs/icu-messageformat-parser": "^3.5.20",
"@lucide/vue": "1.48.0",
"@formatjs/icu-messageformat-parser": "^3.5.21",
"@lucide/vue": "1.54.0",
"@tailwindcss/vite": "^4.3.3",
"@tanstack/vue-virtual": "^3.13.39",
"@tiptap/extension-link": "^3.31.3",
"@tiptap/pm": "^3.31.3",
"@tiptap/starter-kit": "^3.31.3",
"@tiptap/vue-3": "^3.31.3",
"@tanstack/vue-virtual": "^3.13.40",
"@tiptap/extension-link": "^3.31.4",
"@tiptap/pm": "^3.31.4",
"@tiptap/starter-kit": "^3.31.4",
"@tiptap/vue-3": "^3.31.4",
"@types/howler": "^2.2.13",
"@vueuse/core": "^15.0.0",
"canvas-confetti": "^1.9.4",
"class-variance-authority": "^0.7.1",
"clsx": "^2.1.1",
"cronstrue": "^3.27.0",
"cronstrue": "^3.31.0",
"dompurify": "^3.4.16",
"driver.js": "^1.8.0",
"driver.js": "^1.9.0",
"echarts": "^6.1.0",
"howler": "^2.2.4",
"intl-messageformat": "^12.1.2",
"intl-messageformat": "^12.1.3",
"pinia": "^4.0.3",
"reka-ui": "^2.10.5",
"reka-ui": "^2.11.0",
"socket.io-client": "^4.8.4",
"tailwind-merge": "^3.7.0",
"tailwindcss": "^4.3.3",
"vite-plugin-pwa": "^1.3.0",
"vue": "^3.5.43",
"vue-draggable-plus": "^0.6.1",
"vue-echarts": "8.3.1",
"vue-i18n": "^11.4.12",
"vue-router": "^5.3.1",
"vue-echarts": "8.3.2",
"vue-i18n": "^11.4.13",
"vue-router": "^5.4.0",
"vue-sonner": "^2.0.9",
"vue-virtual-scroller": "^3.0.5"
},
"devDependencies": {
"@intlify/message-compiler": "^11.4.12",
"@intlify/message-compiler": "^11.4.13",
"@tsconfig/node24": "^24.0.5",
"@types/canvas-confetti": "^1.9.0",
"@types/jsdom": "^30.0.0",
"@types/node": "^26.6.3",
"@types/node": "^26.6.5",
"@vite-pwa/assets-generator": "^2.0.0",
"@vitejs/plugin-vue": "^6.0.9",
"@vitest/coverage-v8": "^5.0.2",
"@vitest/coverage-v8": "^5.0.3",
"@vitest/eslint-plugin": "^1.6.27",
"@vue/eslint-config-typescript": "^14.9.0",
"@vue/test-utils": "^2.5.1",
"@vue/tsconfig": "^0.9.1",
"eslint": "^10.11.0",
"eslint": "^10.12.0",
"eslint-config-prettier": "^10.1.8",
"eslint-plugin-oxlint": "~1.86.0",
"eslint-plugin-oxlint": "~1.87.0",
"eslint-plugin-vue": "~10.11.1",
"jiti": "^2.7.0",
"jsdom": "~30.1.1",
"jsdom": "~30.1.2",
"npm-run-all2": "^9.0.3",
"oxlint": "~1.86.0",
"oxlint": "~1.87.0",
"prettier": "3.9.9",
"tw-animate-css": "^1.4.0",
"typescript": "~6.0.3",
"vite": "^8.3.1",
"vite": "^8.3.4",
"vite-plugin-vue-devtools": "^8.2.1",
"vitest": "^5.0.2",
"vue-tsc": "^3.3.11"
"vitest": "^5.0.3",
"vue-tsc": "^3.3.12"
},
"engines": {
"node": "^20.19.0 || >=22.12.0"