What's Changed
- Remove 17 unused packages (antd, sequelize, passport, passport-jwt, github-api, axios-cache-interceptor, http-proxy-middleware, config, dns-cache, dottie, randomcolor, semver, react-scripts, check-valid-url, dottie, and @testing-library/* leftovers from CRA template)
- Replace github-api (abandoned, bundled axios@0.21.4 CVE) with direct axios call to GitHub Contents API — resolves 1 high severity vulnerability
- Upgrade to Vite 8 + @vitejs/plugin-react-swc@4, rewrite vite.config.js with rolldown-compatible manualChunks function and loadEnv for JS_BASE_URL
- Update Dockerfile to node:26-bookworm-slim with apt-get upgrade, reducing image CVEs from 3 high to 2 high
- Drop CRA boilerplate: App.test.jsx, setupTests.js, eslintConfig block
#530
New Contributors
Full Changelog: 1.1.10...1.1.11