fix(security): Upgrade esbuild to fix CORS vulnerability

[WEIFENG2333]

• 使用 npm overrides 强制 esbuild >= 0.25.0
• 修复 esbuild 开发服务器 CORS 配置漏洞
• 现在所有依赖都使用安全版本的 esbuild

---

Note

Upgrade esbuild to >=0.25 and bump app/docs to v1.4.0; remove CI workflow.

• Dependencies:
  • Enforce esbuild >= 0.25.0 via docs/package.json overrides; lockfile updates bump esbuild to 0.25.12 (Node >=18).
• Versioning:
  • Bump app/docs version to v1.4.0 (app/config.py, JSON-LD softwareVersion in docs/.vitepress/config.mts, docs/package.json).
• CI:
  • Remove /.github/workflows/ci.yml.

^{Written by Cursor Bugbot for commit ae4d48d. This will update automatically on new commits. Configure here.}

[claude]

Claude encountered an error —— View job

---

I'll analyze this and get back to you.

[Copilot]

Pull Request Overview

This PR upgrades esbuild to version 0.25.12 to address a CORS vulnerability in the development server. The fix uses npm's overrides feature to enforce a minimum version of esbuild 0.25.0 across all dependencies, ensuring that the entire dependency tree uses the patched version.

Key Changes

• Added npm overrides configuration to force esbuild >= 0.25.0
• Upgraded esbuild from 0.21.5 to 0.25.12 with updated platform-specific packages
• Bumped application version from 1.3.3 to 1.4.0 across all files

Reviewed Changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
docs/package.json	Added overrides field to enforce esbuild ^0.25.0 and updated package version
docs/package-lock.json	Updated esbuild and all platform-specific packages to 0.25.12, including new platform support (netbsd-arm64, openbsd-arm64, openharmony-arm64)
docs/.vitepress/config.mts	Updated softwareVersion in structured data to match new version
app/config.py	Updated VERSION constant from v1.3.3 to v1.4.0
.github/workflows/ci.yml	Removed CI workflow file (unrelated to the security fix)

Files not reviewed (1)

• docs/package-lock.json: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.