shaw 0f9d460dc6 fix(deps): resolve frontend audit failures (vue, source-map-js, xlsx exceptions) ...

- Bump vue to ^3.5.43 so @vue/server-renderer is >= 3.5.42
  (GHSA-g2v6-rqmx-r4w6).
- Override source-map-js to >= 1.2.2 (GHSA-68fv-2mgg-jv7q).
- Renew the expired xlsx exceptions until 2027-01-06: xlsx has no patched
  release on npm and is only used for XLSX.write export in the admin usage
  view; both advisories require parsing a crafted file and no read path exists.

Lockfile regenerated with pnpm 9 to match CI.

2026-10-07 09:44:01 +08:00

..

release-tools

ci: point release helper tests at their final directory

2026-09-20 17:01:27 +08:00

workflows

Merge pull request #7361 from wucm667/feat/issue-7357-optional-default-groups

2026-09-22 18:13:18 +08:00

audit-exceptions.yml

fix(deps): resolve frontend audit failures (vue, source-map-js, xlsx exceptions)

2026-10-07 09:44:01 +08:00

SECURITY.md

docs(security): add dev@sub2api.org as fallback reporting email

2026-10-02 19:04:36 +08:00