Fix axios security vulnerability (supply-chain attack)

https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan
This commit is contained in:
Luis Merino
2026-03-31 12:46:27 +02:00
parent 47e59db375
commit a52a0fc67f
6 changed files with 10 additions and 3 deletions
+1 -1
View File
@@ -18,7 +18,7 @@ jobs:
- name: Install npm
uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
with:
node-version: '20'
node-version: '22'
- name: Run hugo
run: bash -x ./install-and-build.sh
- name: Link Checker
+1 -1
View File
@@ -19,7 +19,7 @@ jobs:
- name: Install npm
uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
with:
node-version: '20'
node-version: '22'
- name: Run hugo
run: |
bash -x ./install-and-build.sh
+1 -1
View File
@@ -5,7 +5,7 @@ command = "bash -x ./install-and-build.sh"
[build.environment]
HUGO_VERSION = "0.141.0"
DART_SASS_VERSION = "1.70.0"
NODE_VERSION = "20.10.0"
NODE_VERSION = "22.22.2"
HUGO_PARAMS_segmentWriteKey = "UOgPyE2GbtD4lletUP2uWfBGQQSfkzf1"
HUGO_PARAMS_onetrustScriptId = "0196246a-3663-7350-9a45-b65f645d6314"
+1
View File
@@ -0,0 +1 @@
ignore-scripts = true
+3
View File
@@ -21,6 +21,9 @@
"prettier-plugin-go-template": "^0.0.15",
"webpack": "^5.90.1",
"webpack-cli": "^5.1.4"
},
"engines": {
"node": ">=22.x"
}
},
"node_modules/@ampproject/remapping": {
+3
View File
@@ -16,6 +16,9 @@
"webpack-cli": "qdrant-2024"
}
},
"engines": {
"node": ">=22.x"
},
"dependencies": {
"@splidejs/splide": "^4.1.4",
"anchor-js": "^5.0.0",