fix(deps): 升级 vitest 和 tsup 修复 vite 漏洞

- vitest: 3.2.4 → 4.0.15 (vite-node 不再依赖旧版 vite)
- tsup: 8.5.0 → 8.5.1

修复 Dependabot 警报:
- #21 vite server.fs.deny bypass
- #18 vite public directory 文件泄露
- #17 vite HTML 文件未应用 server.fs 设置

Author: linshenkx

packages/core/package.json

@@ -25,9 +25,9 @@
   "devDependencies": {
     "@types/node": "^20.11.0",
     "dotenv": "^16.4.7",
-    "tsup": "^8.0.2",
+    "tsup": "^8.5.1",
     "typescript": "^5.3.3",
-    "vitest": "^3.0.2"
+    "vitest": "^4.0.15"
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.65.0",

packages/extension/package.json

@@ -32,6 +32,6 @@
     "tailwindcss": "^3.4.17",
     "typescript": "^5.0.0",
     "vite": "^7.2.7",
-    "vitest": "^3.0.2"
+    "vitest": "^4.0.15"
   }
 }

packages/mcp-server/package.json

@@ -39,9 +39,9 @@
     "@typescript-eslint/eslint-plugin": "^8.49.0",
     "@typescript-eslint/parser": "^8.49.0",
     "eslint": "^8.57.0",
-    "tsup": "^8.0.2",
+    "tsup": "^8.5.1",
     "typescript": "^5.3.3",
-    "vitest": "^3.0.2"
+    "vitest": "^4.0.15"
   },
   "engines": {
     "node": ">=18.0.0"

packages/ui/package.json

@@ -59,6 +59,6 @@
     "typescript": "^5.8.2",
     "vite": "^7.2.7",
     "vite-plugin-dts": "^4.5.3",
-    "vitest": "^3.0.7"
+    "vitest": "^4.0.15"
   }
 }

packages/web/package.json

@@ -31,6 +31,6 @@
     "postcss": "^8.5.1",
     "tailwindcss": "^3.4.17",
     "vite": "^7.2.7",
-    "vitest": "^3.0.2"
+    "vitest": "^4.0.15"
   }
 }