Bruno Miiller
6a6f192942
Make build pass on Node 24 and reduce npm audit surface
Build fixes:
- tsconfig.json: moduleResolution "node" → "bundler" (resolves node-diff3
v3.2.0 exports-only package); add "es2021" to lib for AggregateError
- webpack.config.js: NormalModuleReplacementPlugin to strip "node:" URI
prefix so resolve.fallback browserify shims apply
- Remove "aggregate-error" import in src/main.ts, src/fsS3.ts,
pro/src/sync.ts — use native global AggregateError (Node 15+, Electron
98+, both satisfied by Obsidian runtime)
- .gitignore: ignore *.main.js webpack chunks
Audit reduction (22 → 4 low):
- Remove npm-check-updates devDep (use `npx ncu` ad-hoc) — kills 15 vulns
from transitive cacache/sigstore/tar/pacote chain
- Pin to versions ≥ 30 days old (supply-chain hygiene): @types/node 24.12.2,
c8 11.0.0, mocha 11.7.5, esbuild 0.28.0, crypto-browserify 3.12.1
- package.json overrides: elliptic@6.6.1, diff@9.0.0,
serialize-javascript@7.0.5 to push transitive fixes
- Remaining 4 lows are all elliptic (advisory marks all versions
vulnerable; no upstream fix available)
2026-05-19 22:57:29 -03:00
..
2024-11-10 18:14:16 +08:00
2026-05-19 22:12:40 -03:00
2024-06-11 00:01:36 +08:00
2026-05-19 22:12:40 -03:00
2024-07-13 16:31:09 +08:00
2024-09-01 17:17:08 +08:00
2026-05-19 22:12:40 -03:00
2024-09-01 16:15:17 +08:00
2026-05-19 22:12:40 -03:00
2024-09-01 16:15:17 +08:00
2026-05-19 22:12:40 -03:00
2024-09-01 16:15:17 +08:00
2024-09-01 16:15:17 +08:00
2024-06-15 23:06:41 +08:00
2024-05-27 00:33:49 +08:00
2024-06-09 13:37:55 +08:00
2024-06-22 21:03:43 +08:00
2024-06-09 13:37:55 +08:00
2024-07-14 17:04:05 +08:00
2024-09-29 08:59:14 +08:00
2024-06-15 23:06:41 +08:00
2024-06-23 17:44:02 +08:00
2024-06-14 01:26:14 +08:00
2024-07-13 23:03:55 +08:00
2024-06-11 00:01:36 +08:00
2026-05-19 22:57:29 -03:00
2024-06-11 00:01:36 +08:00