ArchitectUI Vue Admin Free - v2.2.1
🔒 Security Patch & Dependency Refresh
This release resolves a Dependabot security alert and refreshes dependencies across the toolchain.
Security
- Resolved GHSA-qjx8-664m-686j (high severity): per-instance prototype hijack in
js-cookie'sassign()enabling cookie-attribute injection. Upgraded transitivejs-cookiefrom3.0.5→3.0.7via@vue/test-utilsbump. npm audit: 2 vulnerabilities → 0 vulnerabilities.
Updated Dependencies
| Package | Previous | Current |
|---|---|---|
| bootstrap-vue-next | 0.44.2 | 0.45.4 |
| lint-staged | 16.4.0 | 17.0.5 |
| @vue/test-utils | 2.4.6 | 2.4.10 |
| vue | 3.5.32 | 3.5.34 |
| vue-router | 5.0.4 | 5.0.7 |
| vue-tsc | 3.2.6 | 3.3.1 |
| vite | 8.0.8 | 8.0.14 |
| vitest / @vitest/ui | 4.1.4 | 4.1.7 |
| @vitejs/plugin-vue | 6.0.6 | 6.0.7 |
| typescript | 6.0.2 | 6.0.3 |
| eslint | 10.2.0 | 10.4.0 |
| eslint-plugin-vue | 10.8.0 | 10.9.1 |
| @typescript-eslint/* | 8.58.2 | 8.59.4 |
| @types/node | 25.6.0 | 25.9.1 |
| jsdom | 29.0.2 | 29.1.1 |
| sass | 1.99.0 | 1.100.0 |
| postcss | 8.5.10 | 8.5.15 |
| perfect-scrollbar | 1.4.0 | 1.5.6 |
Verification
npm run type-check— cleannpm run build— succeeds, all chunks generatednpm run test:run— 8/8 tests passingnpm audit— 0 vulnerabilities
Upgrading
git pull
rm -rf node_modules package-lock.json
npm installFull Changelog: v2.1.0...v2.2.1