fix: resolve critical fast-xml-parser vulnerability and block deploy on audit

- Override fast-xml-parser to ^5.3.6 (fixes CVE-2026-25896, CVE-2026-26278, CVE-2026-25128) - Add security-audit to deploy job dependencies in quality-gate workflow
2026-04-22 03:17:56 +00:00 · 2026-02-23 18:23:55 +03:00
parent b7c4937122
commit aa3a49f0f6
3 changed files with 2071 additions and 1458 deletions
@@ -117,7 +117,7 @@ jobs:
  deploy:
    name: Deploy Web
    runs-on: ubuntu-latest
-    needs: [web, mobile]
+    needs: [web, mobile, security-audit]
    if: github.ref == 'refs/heads/main' && github.event_name == 'push'

    steps: