XAOSTECH b5726cd2f6 fix(security): patch undici CVEs, restore discord.js@14, sync license in lockfile ...

- npm audit fix --force had silently installed discord.js@13 (deprecated)
  despite package.json declaring ^14.25.0; restored to 14.25.1
- Added overrides.undici >=7.24.4 to patch GHSA-g9mf, GHSA-f269,
  GHSA-2mjp, GHSA-vrm6, GHSA-v9p9, GHSA-4992 without breaking changes
- package-lock.json license field corrected ISC -> AGPL-3.0-only
  to match package.json (lockfile was out of sync from project init)

2026-03-16 23:55:38 +01:00

40 KiB

Raw Blame History

View Raw