fix(web): upgrade preact to 10.28.2 to fix JSON VNode injection vulnerability

Upgrade preact from 10.28.0 to 10.28.2 to address CVE-2026-22028, a high severity HTML injection vulnerability via JSON type confusion. Fixes https://github.com/langgenius/dify/security/dependabot/147
2026-01-12 16:51:16 +08:00
1 changed files with 7 additions and 7 deletions
@@ -7002,8 +7002,8 @@ packages:
    resolution: {integrity: sha512-3Ybi1tAuwAP9s0r1UQ2J4n5Y0G05bJkpUIO0/bI9MhwmD70S5aTWbXGBwxHrelT+XM1k6dM0pk+SwNkpTRN7Pg==}
    engines: {node: ^10 || ^12 || >=14}

-  [email protected].0:
-    resolution: {integrity: sha512-rytDAoiXr3+t6OIP3WGlDd0ouCUG1iCWzkcY3++Nreuoi17y6T5i/zRhe6uYfoVcxq6YU+sBtJouuRDsq8vvqA==}
+  [email protected].2:
+    resolution: {integrity: sha512-lbteaWGzGHdlIuiJ0l2Jq454m6kcpI1zNje6d8MlGAFlYvP2GO4ibnat7P74Esfz4sPTdM6UxtTwh/d3pwM9JA==}

  [email protected]:
    resolution: {integrity: sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==}
@@ -10795,10 +10795,10 @@ snapshots:

  '@preact/[email protected]': {}

-  '@preact/[email protected]([email protected].0)':
+  '@preact/[email protected]([email protected].2)':
    dependencies:
      '@preact/signals-core': 1.12.1
-      preact: 10.28.0
+      preact: 10.28.2

  '@radix-ui/[email protected]': {}

@@ -16095,7 +16095,7 @@ snapshots:
      picocolors: 1.1.1
      source-map-js: 1.2.1

-  [email protected].0: {}
+  [email protected].2: {}

  [email protected]:
    dependencies:
@@ -16350,7 +16350,7 @@ snapshots:
      '@clack/core': 0.3.5
      '@clack/prompts': 0.8.2
      '@pivanov/utils': 0.0.2([email protected]([email protected]))([email protected])
-      '@preact/signals': 1.3.2([email protected].0)
+      '@preact/signals': 1.3.2([email protected].2)
      '@rollup/pluginutils': 5.3.0([email protected])
      '@types/node': 20.19.26
      bippy: 0.3.34(@types/[email protected])([email protected])
@@ -16359,7 +16359,7 @@ snapshots:
      kleur: 4.1.5
      mri: 1.2.0
      playwright: 1.57.0
-      preact: 10.28.0
+      preact: 10.28.2
      react: 19.2.3
      react-dom: 19.2.3([email protected])
      tsx: 4.21.0