v1.2.1 - Runtime Dependency Security Update

SteamGuard Web v1.2.1

Security patch release for runtime dependency vulnerabilities, including the critical protobufjs RCE advisory.

Security

• Updated protobufjs to patched 7.5.5.
• Overrode steam-appticket to 2.0.1 to remove the vulnerable transitive protobufjs@6.x path.
• Updated fastify to 5.8.5.
• Updated axios to 1.15.2.
• Updated follow-redirects to 1.16.0.
• Updated yaml to 2.8.3.

Validation

• Backend runtime audit passes:
  • npm audit --omit=dev --audit-level=high
• Frontend runtime audit passes:
  • npm audit --omit=dev --audit-level=high
• Backend build, lint, and tests pass.
• Frontend production build passes.

Upgrade

git pull
docker compose up -d --build

Notes

• No database migrations.
• No environment variable changes.