3 Commits

Author	SHA1	Message	Date
Alexa	e6e5c9990f	chore(deps): pin Node 22.22+ for frontend builds ... CodeRabbit on PR #49: the Docker build stages still used node:20-alpine, which vite 7 (>=20.19/22.12) and react-router 8 (>=22.22) no longer support. Bump NODE_VERSION to 22 in both Dockerfiles and declare engines.node >=22.22.0 in both app manifests so local installs on an old Node fail loudly instead of at build time.	2026-08-02 01:05:49 +03:00
Alexa	bb04782e11	chore(deps): clear Dependabot alerts — React 19, react-router 8, Vite 7 ... Bumps both frontend apps (site, admin-ui): - vite 5.4 -> 7.3.6 (pulls esbuild 0.28, patched dev-server CVEs) - @vitejs/plugin-react 4 -> 5 (babel 7.29.7) - postcss 8.4 -> 8.5.25 - react-router-dom 6.27 -> react-router 8.3.0 (package renamed upstream in v8; imports swapped in src). Fixes the open-redirect advisories with no patched 6.x, plus the RSC CSRF advisory (GHSA-qwww-vcr4-c8h2) that only 8.3.0 patches. - react/react-dom 18.3 -> 19.2 (required by react-router 8) npm audit: 0 vulnerabilities in both apps. tsc + vite build clean.	2026-08-02 00:57:34 +03:00
Alexa	4edf25b2d5	Import december-2020-12-18 from private repo (scrubbed 2026-05-27) ... Targets Rec Room 2020.12.18 client. Re-import after adding: - DorkNet.ClientMod/dorknet-clientmod.json.template — config schema the launcher's manifest-driven patcher renders into UserData/. - tools/build-patcher-zip.ps1 — produces the dorknet-clientpatch-{key}.zip Release asset the launcher fetches. - .github/workflows/release.yml — auto-publishes both Release assets on v1-december-* tag push. Scrubbed via maintainer-side scrub-for-public.ps1: same drop rules as the prior import, plus build-patcher-zip.ps1 added to the tools/ allow-list so it survives the scrub.	2026-05-27 01:04:12 +03:00