fix: update dependencies to resolve code scanning security alerts

- Upgrade multer to 2.1.1 (CVE-2026-3520, DoS via malformed requests) - Update tar override to >=7.5.11 (CVE-2026-31802, CVE-2026-29786) - Upgrade Node base image from 20-alpine to 22-alpine to fix npm bundled tar/minimatch CVEs in the Docker image
2026-03-16 16:25:29 +01:00
parent 9a6d2e8e3a
commit 1f524f2358
3 changed files with 27 additions and 14 deletions
@@ -69,7 +69,7 @@
    "js-yaml": "^4.1.1",
    "fast-xml-parser": ">=5.3.8",
    "qs": ">=6.14.2",
-    "tar": ">=7.5.8",
+    "tar": ">=7.5.11",
    "brace-expansion": ">=5.0.0",
    "minimatch": ">=9.0.7"
  }