SnapOtter 20ab04c5bd fix(security): revert archiver v8 and @fastify/static v9 upgrades ...

archiver v8 changed its default export, breaking all ZIP-producing
tools (pdf-to-image, split, batch, favicon, bulk-rename, svg-to-raster).
Reverted to v7 -- the lodash vulnerability via archiver is _.template
which is never called directly.

@fastify/static v9 has breaking changes incompatible with the current
static file serving setup. Reverted to v8 -- the path traversal CVEs
in v8 are mitigated by the existing path traversal guards in files.ts.

Updated edge-cases test to expect 400 for >64KB settings payloads
(new security limit).

2026-05-14 16:59:40 +08:00

..

benchmark

chore: deploy to Cloudflare Pages and update branding

2026-04-24 18:06:29 +08:00

e2e

refactor: remove content-aware-crop tool

2026-05-13 17:55:01 +08:00

e2e-analytics

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

e2e-docker

fix: QA sweep -- settings dialog a11y, help button contrast, test expectation fixes

2026-05-09 21:50:46 +08:00

e2e-docs

fix: update tool count to 51, refresh hero copy and login page

2026-05-10 22:18:11 +08:00

e2e-editor

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

e2e-landing

fix: update tool count to 51, refresh hero copy and login page

2026-05-10 22:18:11 +08:00

fixtures

fix(security): comprehensive security audit and hardening

2026-05-13 21:33:50 +08:00

integration

fix(security): revert archiver v8 and @fastify/static v9 upgrades

2026-05-14 16:59:40 +08:00

unit

fix(security): comprehensive security audit and hardening

2026-05-13 21:33:50 +08:00