opensource/dify
2
0
Fork 0
mirror of https://github.com/langgenius/dify.git synced 2026-04-29 20:48:01 +08:00
Code Issues Packages Projects Releases Wiki Activity

build: limit esbuild, glob, docker base version to avoid cve (#30848)

Browse Source
This commit is contained in:
Stephen Zhou 2026-01-12 15:33:20 +08:00 committed by GitHub
parent df938a4543
commit 00698e41b7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 187 additions and 445 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
web/Dockerfile
View File

@ -1,5 +1,5 @@
# base image # base image
FROM node:22-alpine3.21 AS base FROM node:22.21.1-alpine3.23 AS base
LABEL maintainer="takatost@gmail.com" LABEL maintainer="takatost@gmail.com"
# if you located in China, you can use aliyun mirror to speed up # if you located in China, you can use aliyun mirror to speed up

4
web/package.json
View File

@ -236,7 +236,8 @@
"brace-expansion@<2.0.2": "2.0.2", "brace-expansion@<2.0.2": "2.0.2",
"devalue@<5.3.2": "5.3.2", "devalue@<5.3.2": "5.3.2",
"es-iterator-helpers": "npm:@nolyfill/es-iterator-helpers@^1", "es-iterator-helpers": "npm:@nolyfill/es-iterator-helpers@^1",
"esbuild@<0.25.0": "0.25.0", "esbuild@<0.27.2": "0.27.2",
"glob@>=10.2.0,<10.5.0": "11.1.0",
"hasown": "npm:@nolyfill/hasown@^1", "hasown": "npm:@nolyfill/hasown@^1",
"is-arguments": "npm:@nolyfill/is-arguments@^1", "is-arguments": "npm:@nolyfill/is-arguments@^1",
"is-core-module": "npm:@nolyfill/is-core-module@^1", "is-core-module": "npm:@nolyfill/is-core-module@^1",
@ -278,7 +279,6 @@
"@types/react-dom": "~19.2.3", "@types/react-dom": "~19.2.3",
"brace-expansion": "~2.0", "brace-expansion": "~2.0",
"canvas": "^3.2.0", "canvas": "^3.2.0",
"esbuild": "~0.25.0",
"pbkdf2": "~3.1.3", "pbkdf2": "~3.1.3",
"prismjs": "~1.30", "prismjs": "~1.30",
"string-width": "~4.2.3" "string-width": "~4.2.3"

626
web/pnpm-lock.yaml generated
View File

File diff suppressed because it is too large Load Diff