kitos 498536f3f1 fix(security): remediate CVE-2026-42043 — upgrade axios ^1.14.0 ...

- package.json: bump axios constraint from ^1.13.5 to ^1.14.0
- Dockerfile build stage: npm ci -> npm install so the semver range
  in package.json is honoured at build time (npm ci uses the lockfile
  exactly, bypassing the updated constraint)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-04 13:17:45 +02:00

1.2 KiB

Raw Blame History

View Raw