Commit 5077c54
committed
fix: resolve GitHub Actions build failure due to compromised stylus package
- Replace stylus npm dependency with official GitHub repo (v0.64.0)
to avoid compromised 0.0.1-security placeholder package
- Align VuePress dependencies to consistent 2.x versions (2.0.0-beta.61)
to fix module compatibility issues
- Update CI workflow to use --non-interactive flag to prevent
interactive prompts during yarn install
- Regenerate yarn.lock with secure dependencies
Fixes build errors in GitHub Actions where yarn couldn't find
valid stylus versions matching ^0.54.8 requirement.
The npm stylus package was compromised and replaced with a security
holding package, but our VuePress theme legitimately requires stylus
for .styl file processing.1 parent 57ff1e2 commit 5077c54
3 files changed
Lines changed: 1530 additions & 9708 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
22 | 22 | | |
23 | 23 | | |
24 | 24 | | |
25 | | - | |
| 25 | + | |
26 | 26 | | |
27 | 27 | | |
28 | 28 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
12 | 12 | | |
13 | 13 | | |
14 | 14 | | |
15 | | - | |
16 | | - | |
17 | | - | |
18 | | - | |
19 | | - | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
20 | 18 | | |
21 | 19 | | |
22 | 20 | | |
23 | | - | |
| 21 | + | |
24 | 22 | | |
25 | 23 | | |
26 | 24 | | |
27 | 25 | | |
28 | 26 | | |
29 | | - | |
| 27 | + | |
30 | 28 | | |
31 | 29 | | |
32 | 30 | | |
| |||
0 commit comments