fix: settle security issue

SgLy · SgLy · commit c5191a7b944e · 2026-02-25T20:35:09.000+08:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,6 @@
+## 2026-02-25 v3.8.18
+- 解决依赖安全问题
+
 ## 2026-02-12 v3.8.17
 - 更新 API 定义到 3.14.2
 
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
@@ -1,2 +1,6 @@
 overrides:
   brace-expansion@>=1.0.0 <=1.1.11: '>=1.1.12'
+  js-yaml@>=4.0.0 <4.1.1: '>=4.1.1 <5.0.0'
+  ajv@<6.14.0: '>=6.14.0 <7.0.0'
+  minimatch@<3.1.3: '>=3.1.3 <4.0.0'
+  minimatch@>=9.0.0 <9.0.6: '>=9.0.6 <10.0.0'
