Brenno de Winter f08055c7ae Upgrade vendored JS and add deps-check CVE gate (#3) ... Upgrade the JavaScript bundles inlined into the offline HTML export: DOMPurify 3.1.7 -> 3.4.9 (clears 10 OSV advisories), marked 12.0.2 -> 18.0.5, highlight.js 11.9.0 -> 11.11.1. mermaid 10.9.6 and MathJax 3.2.2 are kept (no known CVEs) and now guarded rather than chased. Pin every bundle in assets/web_export/MANIFEST.json (npm name, version, source, sha256, licence) and add tool/check_bundled_js.dart: it verifies each file still matches the manifest hash and queries the OSV database for known vulnerabilities. Wired as `make deps-check`, into `check-full`, and into CI next to the licence check. THIRD_PARTY_NOTICES.md updated for the now-standalone DOMPurify bundle. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-06-11 22:16:29 +02:00
..
check_bundled_js.dart	Upgrade vendored JS and add deps-check CVE gate (#3)	2026-06-11 22:16:29 +02:00
check_licenses.dart	Add project docs, EUPL licence, and open-source licence check	2026-06-07 12:19:56 +02:00