kitos 498536f3f1 fix(security): remediate CVE-2026-42043 — upgrade axios ^1.14.0 ...

- package.json: bump axios constraint from ^1.13.5 to ^1.14.0
- Dockerfile build stage: npm ci -> npm install so the semver range
  in package.json is honoured at build time (npm ci uses the lockfile
  exactly, bypassing the updated constraint)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-04 13:17:45 +02:00

..

public

feat(branding): replace logo with new Medusa shield emblem (PNG)

2026-05-29 17:04:39 +02:00

src

feat(campaigns): campaign start date — scheduled activation, Jira start_date

2026-06-03 16:57:06 +02:00

.dockerignore

fix: add .dockerignore files to exclude node_modules from build

2026-02-06 16:59:50 +01:00

.gitignore

feat: Phase 7 - Frontend scaffolding and auth (T-023, T-024, T-025)

2026-02-06 16:09:50 +01:00

Dockerfile

fix(security): remediate CVE-2026-42043 — upgrade axios ^1.14.0

2026-06-04 13:17:45 +02:00

index.html

feat(branding): replace logo with new Medusa shield emblem (PNG)

2026-05-29 17:04:39 +02:00

nginx.conf

fix(qa): CSP hash, remove pencil icon, fetch full template on modal open

2026-05-19 12:53:02 +02:00

package-lock.json

fix: upgrade axios to 1.13.5 to resolve DoS vulnerability

2026-02-11 09:13:02 +01:00

package.json

fix(security): upgrade axios to >=1.14.0 — CVE-2026-42043 (CVSS 10)

2026-06-04 10:16:41 +02:00

tsconfig.json

feat: Phase 7 - Frontend scaffolding and auth (T-023, T-024, T-025)

2026-02-06 16:09:50 +01:00

vite.config.ts

feat: Phase 7 - Frontend scaffolding and auth (T-023, T-024, T-025)

2026-02-06 16:09:50 +01:00