Merge pull request #364 from antalike/hotfix/security

fix(security): patch vulnerabilities via pnpm overrides

Author: CarltonXiang

package.json

@@ -24,7 +24,7 @@
     "@nuxtjs/i18n": "^9.5.6",
     "@nuxtjs/mdc": "^0.19.2",
     "@rollup/plugin-yaml": "^4.1.2",
-    "better-sqlite3": "^12.2.0",
+    "better-sqlite3": "^12.6.2",
     "defu": "^6.1.4",
     "devalue": "^5.3.2",
     "node-fetch": "^3.3.2",
@@ -37,7 +37,7 @@
   "devDependencies": {
     "@nuxt/eslint": "^1.4.1",
     "eslint": "^9.28.0",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.1.1",
     "typescript": "^5.8.3",
     "vue-tsc": "^2.2.10"
   },
@@ -51,7 +51,13 @@
     ],
     "ignoredBuiltDependencies": [
       "vue-demi"
-    ]
+    ],
+    "overrides": {
+      "h3": "1.15.5",
+      "node-forge": "1.3.2",
+      "mdast-util-to-hast": "13.2.1",
+      "lodash": "4.17.23"
+    }
   },
   "packageManager": "pnpm@10.12.1"
 }