fix: remove vulnerable dependency chains

Replace build-time shell utilities with Node filesystem operations and retire the native sandbox example in favor of existing isolation options. Upgrade glob matching and worker-test dependencies and refresh the lockfiles.
This commit is contained in:
Armin Ronacher 2026-10-31 17:54:29 +01:00
parent 6de14ec098
commit b4c2e92acb
24 changed files with 260 additions and 857 deletions

View file

@ -123,7 +123,7 @@
"CHANGELOG.md"
],
"scripts": {
"clean": "shx rm -rf dist",
"clean": "node ../../scripts/package-files.mjs clean dist",
"build": "tsc -p tsconfig.build.json",
"test": "vitest --run && PI_DURABLE_DOCUMENT_RETENTION_MS=0 vitest --run && npm run test:store && npm run test:workers",
"test:store": "vitest --run --config vitest.store.config.ts",
@ -167,9 +167,8 @@
"typebox": "1.3.27"
},
"devDependencies": {
"@cloudflare/vitest-plugin": "1.4.4",
"@cloudflare/vitest-plugin": "1.4.10",
"fake-indexeddb": "6.2.6",
"shx": "0.3.4",
"vitest": "4.1.12"
}
}