From fc439a294e513e39dca2cad7d60f69c6be707973 Mon Sep 17 00:00:00 2001 From: dongjiang Date: Fri, 24 Jul 2026 11:35:18 +0800 Subject: [PATCH] fix(security): resolve 10 npm audit vulnerabilities (1 critical, 6 high, 3 moderate) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Upgrade astro 6.x → 7.1.3 (fixes 3 XSS: reflected, spread attr, transition directives) - Upgrade @astrojs/vercel 10.x → 11.0.3, @astrojs/mdx 6.x → 7.0.3 - Upgrade astro-compress 2.3.8 → 2.4.1 - Add npm overrides for svgo >=4.0.2 and sharp ^0.35.3 to force safe transitive deps - Remove conflicting vite ^7 override (Astro 7 requires Vite 8) - Wrap BasicScripts.astro top-level