forked from EduCraft/curriculum-project-hub
9c5021f8ed
npm audit --omit=dev --audit-level=high (audit:production, enforced in the deploy-admin fleet workflow) was failing on high-severity advisories in fast-uri (3.1.4) and ip-address (10.2.0), plus moderate hono and @hono/node-server. All fixes resolve within existing ^ ranges, so a plain npm audit fix regenerated the lock only (package.json untouched): fast-uri 3.1.4 -> 3.1.5, ip-address 10.2.0 -> 10.4.0, hono 4.12.28 -> 4.13.0. audit:production now reports 0 vulnerabilities.