Files
pushkinohistory-ru-v2/package-lock.json
striker d27b2f6719
All checks were successful
deploy / deploy (push) Successful in 1m5s
security / security (push) Successful in 2m41s
fix(security): npm audit fix + GitLeaks allowlist for indexnow.js
- npm audit fix: устранены 5 vulnerabilities (где возможно без --force):
  - path-to-regexp <0.1.13 (ReDoS, HIGH)
  - nodemailer 6.x patch
  - qs 6.7.x DoS (transitively через body-parser + express)

- .gitleaks.toml: расширен allowlist для scripts/indexnow.js* и
  scripts/indexnow-ping.sh — содержат публичный IndexNow KEY, не секрет.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-24 19:11:16 +03:00

178 KiB