From 52fb1e71803c1341470c5a0c57949ea79c9569a3 Mon Sep 17 00:00:00 2001 From: Zyy Date: Wed, 21 Oct 2026 10:47:57 +0800 Subject: [PATCH] fix(deps): update vulnerable redirect and TLS dependencies Update follow-redirects, rustls-webpki, and webpki-roots to patched releases so frontend and backend security audits pass. Co-authored-by: Codex --- backend/Cargo.lock | 8 ++++---- frontend/pnpm-lock.yaml | 8 ++++---- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/backend/Cargo.lock b/backend/Cargo.lock index b6e98668f..d1b84a3f3 100644 --- a/backend/Cargo.lock +++ b/backend/Cargo.lock @@ -3833,9 +3833,9 @@ dependencies = [ [[package]] name = "rustls-webpki" -version = "0.103.15" +version = "0.103.16" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2" +checksum = "4443b1b6d39d7c663139942cc4558262562d2c84123bb6282ef177009ca8b281" dependencies = [ "aws-lc-rs", "ring", @@ -5223,9 +5223,9 @@ dependencies = [ [[package]] name = "webpki-roots" -version = "1.0.5" +version = "1.0.10" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "12bed680863276c63889429bfd6cab3b99943659923822de1c8a39c49e4d722c" +checksum = "1c1c8e20c8a38fc7d65abfe74eb7280e4aa667e8eec8bc84996d2874810748d9" dependencies = [ "rustls-pki-types", ] diff --git a/frontend/pnpm-lock.yaml b/frontend/pnpm-lock.yaml index 58d5ff63d..1a2396048 100644 --- a/frontend/pnpm-lock.yaml +++ b/frontend/pnpm-lock.yaml @@ -1819,8 +1819,8 @@ packages: flatted@3.4.4: resolution: {integrity: sha512-5+ybhBZANEJxaH3X5evAFatUxLfEHSr7n6kYJ+1Qd0mUqr4eu9gIf6GDbWHf8RJijHrjjO8G+la14SlL2SeS1Q==} - follow-redirects@1.16.0: - resolution: {integrity: sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==} + follow-redirects@1.16.1: + resolution: {integrity: sha512-FNvFGzoMLWmE6Yj9spb/zjd7yiNCHiAW9/Tg9CXrQ8wuu32HtlJOwWO11OJafl5FfY3DxTdQ0vj42zU1kvv5jg==} engines: {node: '>=4.0'} peerDependencies: debug: '*' @@ -3707,7 +3707,7 @@ snapshots: axios@1.20.0(debug@4.4.3): dependencies: - follow-redirects: 1.16.0(debug@4.4.3) + follow-redirects: 1.16.1(debug@4.4.3) form-data: 4.0.6 https-proxy-agent: 5.0.1 proxy-from-env: 2.1.0 @@ -4243,7 +4243,7 @@ snapshots: flatted@3.4.4: {} - follow-redirects@1.16.0(debug@4.4.3): + follow-redirects@1.16.1(debug@4.4.3): optionalDependencies: debug: 4.4.3