chore: update dependencies and fix security vulnerabilities

Browse Source

- npm update for all semver-compatible packages (vite 8.1.5,
  concurrently 9.2.4, axios 1.18.1, better-sqlite3 12.11.1, ...)
- nodemailer 8 -> 9 (fixes GHSA-p6gq-j5cr-w38f and three further
  advisories: CRLF header injection, jsonTransport/raw file-access
  bypasses, OAuth2 TLS validation)
- override exceljs' nested uuid to ^11.1.1 (GHSA-w5hq-g745-h8pq)
  instead of the breaking exceljs downgrade npm audit suggests
- allow better-sqlite3 install script (npm allowScripts policy)

npm audit: 0 vulnerabilities

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

...

This commit is contained in:

Michelle

2026-07-17 09:15:28 +02:00

co-authored by Claude Fable 5

parent 69e901f145

commit e7c7dd28d3

2 changed files with 523 additions and 566 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

package-lock.json

Generated

+514 -565

File diff suppressed because it is too large Load Diff