mirror of
https://github.com/RayLabsHQ/gitea-mirror.git
synced 2026-03-17 00:31:37 +03:00
299659eca2
* fix: resolve CVEs, upgrade to Astro v6, and harden API security
Docker image CVE fixes:
- Install git-lfs v3.7.1 from GitHub releases (Go 1.25) instead of
Debian apt (Go 1.23.12), fixing CVE-2025-68121 and 8 other Go stdlib CVEs
- Strip build-only packages (esbuild, vite, rollup, svgo, tailwindcss)
from production image, eliminating 9 esbuild Go stdlib CVEs
Dependency upgrades:
- Astro v5 → v6 (includes Vite 7, Zod 4)
- Remove legacy content config (src/content/config.ts)
- Update HealthResponse type for simplified health endpoint
- npm overrides for fast-xml-parser ≥5.3.6, devalue ≥5.6.2,
node-forge ≥1.3.2, svgo ≥4.0.1, rollup ≥4.59.0
API security hardening:
- /api/auth/debug: dev-only, require auth, remove user-creation POST,
strip trustedOrigins/databaseConfig from response
- /api/auth/check-users: return boolean hasUsers instead of exact count
- /api/cleanup/auto: require authentication, remove per-user details
- /api/health: remove OS version, memory, uptime from response
- /api/config: validate Gitea URL protocol (http/https only)
- BETTER_AUTH_SECRET: log security warning when using insecure defaults
- generateRandomString: replace Math.random() with crypto.getRandomValues()
- hashValue: add random salt and timing-safe verification
* repositories: migrate table to tanstack
* Revert "repositories: migrate table to tanstack"
This reverts commit a544b29e6d.
* fixed lock file
129 lines
4.5 KiB
JSON
129 lines
4.5 KiB
JSON
{
|
|
"name": "gitea-mirror",
|
|
"type": "module",
|
|
"version": "3.12.6",
|
|
"engines": {
|
|
"bun": ">=1.2.9"
|
|
},
|
|
"scripts": {
|
|
"setup": "bun install && bun run manage-db init",
|
|
"dev": "bunx --bun astro dev",
|
|
"dev:clean": "bun run cleanup-db && bun run manage-db init && bunx --bun astro dev",
|
|
"build": "bunx --bun astro build",
|
|
"cleanup-db": "rm -f gitea-mirror.db data/gitea-mirror.db",
|
|
"manage-db": "bun scripts/manage-db.ts",
|
|
"init-db": "bun scripts/manage-db.ts init",
|
|
"check-db": "bun scripts/manage-db.ts check",
|
|
"fix-db": "bun scripts/manage-db.ts fix",
|
|
"reset-users": "bun scripts/manage-db.ts reset-users",
|
|
"reset-password": "bun scripts/manage-db.ts reset-password",
|
|
"db:generate": "bun drizzle-kit generate",
|
|
"db:migrate": "bun drizzle-kit migrate",
|
|
"db:push": "bun drizzle-kit push",
|
|
"db:pull": "bun drizzle-kit pull",
|
|
"db:check": "bun drizzle-kit check",
|
|
"db:studio": "bun drizzle-kit studio",
|
|
"startup-recovery": "bun scripts/startup-recovery.ts",
|
|
"startup-recovery-force": "bun scripts/startup-recovery.ts --force",
|
|
"startup-env-config": "bun scripts/startup-env-config.ts",
|
|
"test-recovery": "bun scripts/test-recovery.ts",
|
|
"test-recovery-cleanup": "bun scripts/test-recovery.ts --cleanup",
|
|
"test-shutdown": "bun scripts/test-graceful-shutdown.ts",
|
|
"test-shutdown-cleanup": "bun scripts/test-graceful-shutdown.ts --cleanup",
|
|
"preview": "bunx --bun astro preview",
|
|
"start": "bun dist/server/entry.mjs",
|
|
"start:fresh": "bun run cleanup-db && bun run manage-db init && bun dist/server/entry.mjs",
|
|
"test": "bun test",
|
|
"test:watch": "bun test --watch",
|
|
"test:coverage": "bun test --coverage",
|
|
"test:e2e": "bash tests/e2e/run-e2e.sh",
|
|
"test:e2e:ci": "bash tests/e2e/run-e2e.sh --ci",
|
|
"test:e2e:keep": "bash tests/e2e/run-e2e.sh --keep",
|
|
"test:e2e:cleanup": "bash tests/e2e/cleanup.sh",
|
|
"astro": "bunx --bun astro"
|
|
},
|
|
"overrides": {
|
|
"@esbuild-kit/esm-loader": "npm:tsx@^4.21.0",
|
|
"devalue": "^5.6.4",
|
|
"fast-xml-parser": "^5.5.5",
|
|
"node-forge": "^1.3.3",
|
|
"svgo": "^4.0.1",
|
|
"rollup": ">=4.59.0"
|
|
},
|
|
"dependencies": {
|
|
"@astrojs/check": "^0.9.7",
|
|
"@astrojs/mdx": "5.0.0",
|
|
"@astrojs/node": "10.0.1",
|
|
"@astrojs/react": "^5.0.0",
|
|
"@better-auth/sso": "1.5.5",
|
|
"@octokit/plugin-throttling": "^11.0.3",
|
|
"@octokit/rest": "^22.0.1",
|
|
"@radix-ui/react-accordion": "^1.2.12",
|
|
"@radix-ui/react-avatar": "^1.1.11",
|
|
"@radix-ui/react-checkbox": "^1.3.3",
|
|
"@radix-ui/react-collapsible": "^1.1.12",
|
|
"@radix-ui/react-dialog": "^1.1.15",
|
|
"@radix-ui/react-dropdown-menu": "^2.1.16",
|
|
"@radix-ui/react-hover-card": "^1.1.15",
|
|
"@radix-ui/react-label": "^2.1.8",
|
|
"@radix-ui/react-popover": "^1.1.15",
|
|
"@radix-ui/react-progress": "^1.1.8",
|
|
"@radix-ui/react-radio-group": "^1.3.8",
|
|
"@radix-ui/react-scroll-area": "^1.2.10",
|
|
"@radix-ui/react-select": "^2.2.6",
|
|
"@radix-ui/react-separator": "^1.1.8",
|
|
"@radix-ui/react-slot": "^1.2.4",
|
|
"@radix-ui/react-switch": "^1.2.6",
|
|
"@radix-ui/react-tabs": "^1.1.13",
|
|
"@radix-ui/react-tooltip": "^1.2.8",
|
|
"@tailwindcss/vite": "^4.2.1",
|
|
"@tanstack/react-table": "^8.21.3",
|
|
"@tanstack/react-virtual": "^3.13.19",
|
|
"@types/canvas-confetti": "^1.9.0",
|
|
"@types/react": "^19.2.14",
|
|
"@types/react-dom": "^19.2.3",
|
|
"astro": "^6.0.4",
|
|
"bcryptjs": "^3.0.3",
|
|
"better-auth": "1.5.5",
|
|
"buffer": "^6.0.3",
|
|
"canvas-confetti": "^1.9.4",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"cmdk": "^1.1.1",
|
|
"dotenv": "^17.3.1",
|
|
"drizzle-orm": "^0.45.1",
|
|
"fuse.js": "^7.1.0",
|
|
"jsonwebtoken": "^9.0.3",
|
|
"lucide-react": "^0.577.0",
|
|
"nanoid": "^5.1.6",
|
|
"next-themes": "^0.4.6",
|
|
"react": "^19.2.4",
|
|
"react-dom": "^19.2.4",
|
|
"react-icons": "^5.5.0",
|
|
"sonner": "^2.0.7",
|
|
"tailwind-merge": "^3.5.0",
|
|
"tailwindcss": "^4.2.1",
|
|
"tw-animate-css": "^1.4.0",
|
|
"typescript": "^5.9.3",
|
|
"uuid": "^13.0.0",
|
|
"vaul": "^1.1.2",
|
|
"zod": "^4.3.6"
|
|
},
|
|
"devDependencies": {
|
|
"@playwright/test": "^1.58.2",
|
|
"@testing-library/jest-dom": "^6.9.1",
|
|
"@testing-library/react": "^16.3.2",
|
|
"@types/bcryptjs": "^3.0.0",
|
|
"@types/bun": "^1.3.10",
|
|
"@types/jsonwebtoken": "^9.0.10",
|
|
"@types/node": "^25.5.0",
|
|
"@types/uuid": "^11.0.0",
|
|
"@vitejs/plugin-react": "^6.0.1",
|
|
"drizzle-kit": "^0.31.9",
|
|
"jsdom": "^28.1.0",
|
|
"tsx": "^4.21.0",
|
|
"vitest": "^4.1.0"
|
|
},
|
|
"packageManager": "bun@1.3.10"
|
|
}
|