Changed
- Updated the production dependencies:
better-sqlite3-multiple-ciphersto 13, plusexpress-rate-limit,nodemailerandgoogleapis. The database binding is now a Node-API build that ships its own prebuilt binaries, so the Docker image neither downloads nor compiles one. The development-onlypuppeteermoved along with them, and theallowScriptsbuild-script pins were realigned to match. (#720, #721) package-lock.jsonnow carries a download URL and an integrity hash for every entry. 184 of 238 had neither, which leftnpm ciwith nothing to verify what it had downloaded against. (#725)- Dependabot no longer proposes Node major versions for the Docker image. Those stay manual until a new line reaches LTS, so an install never moves from a supported Node to a short-lived one on its own. (#724)