Deps: fix high-severity CVEs in Go and Node dependencies

.dockerignore

@@ -0,0 +1,4 @@
+# 后端镜像只需要 CI 产出的二进制与 swagger 文档，其余文件不进构建上下文
+*
+!credit-server-*
+!docs/**

.github/workflows/build_frontend.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "24"
           cache: 'pnpm'
           cache-dependency-path: frontend/pnpm-lock.yaml
 

.github/workflows/copilot-setup-steps.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "24"
           cache: "pnpm"
           cache-dependency-path: frontend/pnpm-lock.yaml
 

.github/workflows/eslint.yml

@@ -22,7 +22,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "24"
           cache: 'pnpm'
           cache-dependency-path: frontend/pnpm-lock.yaml
 

frontend/.dockerignore

@@ -0,0 +1,10 @@
+node_modules
+.next
+out
+.turbo
+.git
+.DS_Store
+*.log
+npm-debug.log*
+pnpm-debug.log*
+.env*.local

frontend/Dockerfile

@@ -1,5 +1,7 @@
 # ---- base stage ----
-FROM node:22-alpine AS base
+# node 版本与 mise.toml / CI workflows 保持一致；Node 25+ 已移除 corepack，
+# 升级到更高版本时需把下面的 corepack 换成 npm i -g pnpm@10.10.0
+FROM node:24-alpine AS base
 
 ENV PNPM_HOME="/pnpm"
 ENV PATH="$PNPM_HOME:$PATH"

frontend/package.json

@@ -39,7 +39,7 @@
     "@tabler/icons-react": "^3.35.0",
     "@tanstack/react-table": "^8.21.3",
     "@tanstack/react-virtual": "^3.13.16",
-    "axios": "1.18.0",
+    "axios": "1.20.0",
     "babel-plugin-react-compiler": "^1.0.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
@@ -50,7 +50,7 @@
     "jspdf": "^4.2.1",
     "lucide-react": "^0.552.0",
     "motion": "^12.23.24",
-    "next": "16.3.3",
+    "next": "16.3.8",
     "next-themes": "^0.4.6",
     "pinyin-match": "^1.2.10",
     "radix-ui": "^1.4.3",
@@ -74,7 +74,7 @@
     "@eslint/eslintrc": "^3",
     "@tailwindcss/postcss": "^4",
     "@tailwindcss/typography": "^0.5.19",
-    "@types/node": "^20",
+    "@types/node": "^24.19.2",
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "eslint": "^9",
@@ -91,12 +91,18 @@
       "js-yaml@>=4.0.0 <4.3.2": "4.3.2",
       "minimatch@>=3.0.0 <3.1.4": "3.1.4",
       "minimatch@>=9.0.0 <9.0.7": "9.0.9",
-      "brace-expansion@>=1.0.0 <1.1.20": "1.1.20",
-      "brace-expansion@>=2.0.0 <2.1.6": "2.1.6",
+      "brace-expansion@>=1.0.0 <1.1.21": "1.1.21",
+      "brace-expansion@>=2.0.0 <2.1.7": "2.1.7",
       "nanoid@>=3.0.0 <3.3.19": "3.3.19",
       "picomatch@>=2.0.0 <2.3.2": "2.3.2",
       "picomatch@>=4.0.0 <4.0.4": "4.0.4",
-      "postcss@>=8.0.0 <8.5.23": "8.5.23"
+      "postcss@>=8.0.0 <8.5.23": "8.5.23",
+      "follow-redirects@>=1.16.0 <1.16.1": "1.16.1",
+      "source-map-js@<1.2.2": "1.2.2",
+      "ajv@<6.14.0": "6.14.0",
+      "fflate@>=0.8.0 <0.8.3": "0.8.3",
+      "postcss-selector-parser@<7.1.6": "7.1.6",
+      "@humanfs/node@<0.16.8": "0.16.8"
     }
   },
   "packageManager": "pnpm@10.10.0+sha512.d615db246fe70f25dcfea6d8d73dee782ce23e2245e3c4f6f888249fb568149318637dca73c2c5c8ef2a4ca0d5657fb9567188bfab47f566d1ee6ce987815c39"