* Initial plan
* Run npm audit fix to resolve auto-fixable vulnerabilities
Co-authored-by: onnwee <211922112+onnwee@users.noreply.github.com>
* Remove unused ipfs-http-client and enforce audit in CI
- Remove ipfs-http-client dependency (not used, has high-severity vulnerability)
- Add npm audit --audit-level=high to CI workflow
- Update secret-security workflow to enforce high-level audit
- All high-severity vulnerabilities now resolved (0 high)
Co-authored-by: onnwee <211922112+onnwee@users.noreply.github.com>
* Run npm audit fix on web package
- Fixed high-severity vulnerabilities in Next.js and qs
- Web package now has 0 high-severity vulnerabilities
Co-authored-by: onnwee <211922112+onnwee@users.noreply.github.com>
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: onnwee <211922112+onnwee@users.noreply.github.com>
c3a8c11a1d