fix(frontend): 升级 Next→15.5.20 + React 19.2.7 修 RCE/补丁 + 版本下界守卫（CR-C1）

Browse Source

- next/eslint-config-next 15.1.3→15.5.20（backport 安全维护线），react/react-dom 19.0.0→19.2.7
- @types/react(-dom) →^19.2.0；pnpm audit --prod 无 next/react/react-dom 高危/严重告警
- 新增 lib/security/dependencyFloors 守卫 + 回归测试锁定安全下界
- 连带修 useDraftStream.test noUncheckedIndexedAccess（重锁失效增量缓存后暴露，对齐 useReviewStream 既有 ! 约定）

...

This commit is contained in:

Yaojia Wang

2026-07-08 11:04:55 +02:00

parent baa41d370b

commit f4c2c4e8ec

5 changed files with 390 additions and 280 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

554

apps/web/pnpm-lock.yaml generated

File diff suppressed because it is too large Load Diff