chore: update version to 2.5.0

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

package.json

@@ -1,7 +1,7 @@
 {
   "name": "redlight",
   "private": true,
-  "version": "2.4.1",
+  "version": "2.5.0",
   "license": "GPL-3.0-or-later",
   "type": "module",
   "scripts": {
@@ -19,7 +19,6 @@
     "concurrently": "^9.0.0",
     "cors": "^2.8.5",
     "dotenv": "^17.3.1",
-    "exceljs": "^4.4.0",
     "express": "^5.2.1",
     "express-rate-limit": "^8.5.2",
     "flatpickr": "^4.6.13",
@@ -38,6 +37,7 @@
     "react-hot-toast": "^2.4.0",
     "react-router-dom": "^7.15.1",
     "uuid": "^14.0.0",
+    "write-excel-file": "^4.1.1",
     "xml2js": "^0.6.0"
   },
   "devDependencies": {
@@ -49,11 +49,6 @@
     "tailwindcss": "^4.3.0",
     "vite": "^8.0.0"
   },
-  "overrides": {
-    "exceljs": {
-      "uuid": "^11.1.1"
-    }
-  },
   "allowScripts": {
     "better-sqlite3@12.11.1": true
   }

server/routes/analytics.js

@@ -1,6 +1,6 @@
 import { Router, json } from 'express';
 import crypto from 'crypto';
-import ExcelJS from 'exceljs';
+import writeXlsxFile from 'write-excel-file/node';
 import PDFDocument from 'pdfkit';
 import { getDb } from '../config/database.js';
 import { authenticateToken } from '../middleware/auth.js';
@@ -246,26 +246,24 @@ router.get('/:id/export/:format', authenticateToken, async (req, res) => {
 
     if (format === 'xlsx') {
       // Prefix-escape strings that would otherwise be evaluated as formulas.
-      const sanitizeXlsx = (r) => {
-        const out = {};
-        for (const k of Object.keys(r)) {
-          const v = r[k];
-          out[k] = (typeof v === 'string' && /^[=+\-@\t\r]/.test(v)) ? "'" + v : v;
-        }
-        return out;
-      };
-      const workbook = new ExcelJS.Workbook();
-      const sheet = workbook.addWorksheet('Analytics');
-      sheet.columns = COLUMNS;
-      rows.forEach(r => sheet.addRow(sanitizeXlsx(r)));
-      // Style header row
-      sheet.getRow(1).font = { bold: true };
-      sheet.getRow(1).fill = { type: 'pattern', pattern: 'solid', fgColor: { argb: 'FFE0E0E0' } };
+      const sanitizeXlsx = (v) =>
+        (typeof v === 'string' && /^[=+\-@\t\r]/.test(v)) ? "'" + v : v;
+
+      const headerRow = COLUMNS.map(c => ({
+        value: c.header,
+        fontWeight: 'bold',
+        backgroundColor: '#e0e0e0',
+      }));
+      const dataRows = rows.map(r => COLUMNS.map(c => ({ value: sanitizeXlsx(r[c.key]) })));
+
+      const buffer = await writeXlsxFile([headerRow, ...dataRows], {
+        columns: COLUMNS.map(c => ({ width: c.width })),
+        sheet: 'Analytics',
+      }).toBuffer();
 
       res.setHeader('Content-Type', 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet');
       res.setHeader('Content-Disposition', `attachment; filename="${safeName}.xlsx"`);
-      await workbook.xlsx.write(res);
-      return res.end();
+      return res.send(buffer);
     }
 
     if (format === 'pdf') {

server/routes/federation.js

@@ -41,7 +41,7 @@ export function wellKnownHandler(req, res) {
         federation_api: '/api/federation',
         public_key: getPublicKey(),
         software: 'Redlight',
-        version: '2.4.1',
+        version: '2.5.0',
     });
 }