opensource/dify
2
0
Fork 0
mirror of https://github.com/langgenius/dify.git synced 2026-09-08 11:04:27 +08:00
Code Issues Packages Projects Releases Wiki Activity

test(knowledge-fs): track patched fast-uri version

Browse Source
This commit is contained in:
Stephen Zhou 2026-09-03 11:48:20 +08:00
parent 1279b4008f
commit 8901daa517
No known key found for this signature in database
2 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
knowledge-fs/.harness/changes/2026-09-03-fast-uri-security-upgrade.md
View File

@ -13,6 +13,7 @@ first patched 3.x release, and the KnowledgeFS production-dependency audit block
## Verification
- `pnpm security:dependencies`: passed.
- `pnpm ci:workflow:test`: passed.
- `pnpm --filter @knowledge/api typecheck`: passed.
- `git diff --check`: passed.

6
knowledge-fs/scripts/github-actions-workflow.test.mjs
View File

@ -203,11 +203,11 @@ test("root workflow runs explicit local security gates", () => {
test("production dependency security fixes stay locked", () => {
assert.equal(apiPackageJson.dependencies.sharp, "^0.35.3");
assert.equal(packageJson.pnpm.overrides["fast-uri"], "3.1.5");
assert.equal(packageJson.pnpm.overrides["fast-uri"], "3.1.6");
assert.equal(packageJson.pnpm.overrides["ip-address"], "10.3.1");
assert.equal(packageJson.pnpm.overrides.sharp, "0.35.3");
assert.match(lockfile, /^ {2}fast-uri@3\.1\.5:$/m);
assert.doesNotMatch(lockfile, /^ {2}fast-uri@3\.1\.4:$/m);
assert.match(lockfile, /^ {2}fast-uri@3\.1\.6:$/m);
assert.doesNotMatch(lockfile, /^ {2}fast-uri@3\.1\.5:$/m);
assert.match(lockfile, /^ {2}ip-address@10\.3\.1:$/m);
assert.doesNotMatch(lockfile, /^ {2}ip-address@10\.2\.0:$/m);
assert.match(lockfile, /^ {2}sharp@0\.35\.3:$/m);