Repository navigation
fix(deps): 배포를 차단한 의존성 취약점 수정 - #4
Merged
Merged
Conversation
Update undici, vite, zod and fast-uri within their existing dependency ranges so the high-severity audit gate passes again. Validated npm ci, high-severity audit, 353 unit tests, content checks, Astro checks, clean-output build and artifact budgets. Browser smoke tests are delegated to the PR CI runner. AI-Agent: Codex AI-Model: GPT-6 AI-Reasoning: unknown Co-authored-by: Codex <codex@openai.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
병합 후 Pages 실행이
npm audit --audit-level=high에서 실패하여 글 검사·빌드·배포가 시작되지 않았습니다. 기존 버전 범위 안에서 잠금 파일의 undici 8.11.2→8.12.3, vite 8.3.1→8.3.5, zod 4.6.5→4.6.7, fast-uri 3.1.8→3.1.9 및 필요한 하위 의존성을 갱신합니다. 보안 검사 기준과 글 내용은 유지합니다.검증: npm ci, npm audit --audit-level=high 통과(high/critical 0, KaTeX 관련 low 4건 잔존), 단위 테스트 353개 통과, 콘텐츠 검사 통과(기존 경고 7), Astro 검사 오류 0, 새 출력 경로에서 강제 빌드 및 산출물 검사 통과(517개 글·992 HTML·8,152 링크). prettier와 git diff --check 통과.
기존 dist를 재사용한 로컬 실행에서는 잔여 이미지로 크기 제한이 초과되어, 새 출력 디렉터리의 빌드로 다시 검증했습니다. 브라우저 smoke 검사는 PR CI에서 확인합니다. 로컬 Node 24.22.1 사용. CI의 기존 Node 22.12.0/의존성 engine 경고는 이번 변경 범위에서 유지됩니다.