fix: CVE-2025-64756 (#47)

* fix: CVE-2025-64756

* chore: deps

* chore: implicit deps

* release: 1.9.4

Author: BCsabaEngine

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.9.4] - 2025-11-18
+
+### Changed
+
+- Solve CVE-2025-64756 glob vulnerability
+
 ## [1.9.3] - 2025-11-01
 
 ### Added
@@ -218,6 +224,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - CLI interface with `-s`, `-e`, `-o` options
 - `index.html` automatic default route handling
 
+[1.9.4]: https://github.com/BCsabaEngine/svelteesp32/compare/v1.9.3...v1.9.4
 [1.9.3]: https://github.com/BCsabaEngine/svelteesp32/compare/v1.9.2...v1.9.3
 [1.9.2]: https://github.com/BCsabaEngine/svelteesp32/compare/v1.9.1...v1.9.2
 [1.9.1]: https://github.com/BCsabaEngine/svelteesp32/compare/v1.9.0...v1.9.1

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "svelteesp32",
-  "version": "1.9.3",
+  "version": "1.9.4",
   "description": "Convert Svelte (or any frontend) JS application to serve it from ESP32 webserver (PsychicHttp)",
   "author": "BCsabaEngine",
   "license": "ISC",
@@ -59,8 +59,8 @@
   "devDependencies": {
     "@types/mime-types": "^3.0.1",
     "@types/node": "^24.10.1",
-    "@typescript-eslint/eslint-plugin": "^8.46.4",
-    "@typescript-eslint/parser": "^8.46.4",
+    "@typescript-eslint/eslint-plugin": "^8.47.0",
+    "@typescript-eslint/parser": "^8.47.0",
     "eslint": "^9.39.1",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-simple-import-sort": "^12.1.1",
@@ -72,7 +72,7 @@
     "typescript": "^5.9.3"
   },
   "dependencies": {
-    "glob": "^11.0.3",
+    "glob": "^12.0.0",
     "handlebars": "^4.7.8",
     "mime-types": "^3.0.1",
     "ts-command-line-args": "^2.5.1"