DavidHLP · Oct 11, 2026 · Oct 10, 2026 · Oct 10, 2026 · Oct 10, 2026 · Oct 10, 2026
diff --git a/.github/workflows/_backend.yml b/.github/workflows/_backend.yml
@@ -24,7 +24,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Setup Node.js
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: '22.x'
 
@@ -131,7 +131,7 @@ jobs:
 
       - name: Upload test results on failure
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: test-results-backend
           path: |
@@ -229,7 +229,7 @@ jobs:
 
       - name: Upload test results on failure
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: test-results-backend-features-${{ matrix.features }}
           path: |
@@ -277,7 +277,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Setup mise for repository toolchain
-        uses: jdx/mise-action@7a4e45a543138629540c9a1616d08632b893e492 # v5.0.1
+        uses: jdx/mise-action@2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca # v5.1.1
 
       - name: Setup JDK 17 for registry contracts
         uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1

diff --git a/.github/workflows/_contract.yml b/.github/workflows/_contract.yml
@@ -209,7 +209,7 @@ jobs:
 
       - name: Upload japicmp reports
         if: ${{ always() && steps.baseline_contracts.outputs.has_standalone_contracts == 'true' && steps.baseline_contracts.outputs.breaking_release != 'true' }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: japicmp-reports
           path: |

diff --git a/.github/workflows/_docker.yml b/.github/workflows/_docker.yml
@@ -85,7 +85,7 @@ jobs:
 
       - name: Upload local Trivy report
         if: ${{ always() && steps.scan.outcome != 'skipped' && steps.scan.outcome != '' }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: trivy-verify-${{ matrix.service.name }}
           path: ${{ runner.temp }}/${{ matrix.service.name }}.trivy.json

diff --git a/.github/workflows/_frontend.yml b/.github/workflows/_frontend.yml
@@ -37,7 +37,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Setup Node.js
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: ${{ env.NODE_VERSION }}
 
@@ -68,7 +68,7 @@ jobs:
 
       - name: Setup Node.js
         if: steps.should-run.outputs.run == 'true'
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: 'pnpm'
@@ -112,7 +112,7 @@ jobs:
 
       - name: Setup Node.js
         if: steps.should-run.outputs.run == 'true'
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: 'pnpm'
@@ -156,7 +156,7 @@ jobs:
 
       - name: Setup Node.js
         if: steps.should-run.outputs.run == 'true'
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: 'pnpm'
@@ -193,7 +193,7 @@ jobs:
         run: corepack enable && corepack prepare pnpm@${{ env.PNPM_VERSION }} --activate
 
       - name: Setup Node.js
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: 'pnpm'
@@ -221,7 +221,7 @@ jobs:
         run: corepack enable && corepack prepare pnpm@${{ env.PNPM_VERSION }} --activate
 
       - name: Setup Node.js
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: 'pnpm'

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -66,12 +66,18 @@ jobs:
               - '.github/workflows/_backend.yml'
               - '.github/services-matrix.json'
             console:
+              - 'package.json'
+              - 'pnpm-lock.yaml'
+              - 'pnpm-workspace.yaml'
               - 'apps/console/**'
               - 'packages/**'
               - 'shared/**'
               - '.github/workflows/ci.yml'
               - '.github/workflows/_frontend.yml'
             management:
+              - 'package.json'
+              - 'pnpm-lock.yaml'
+              - 'pnpm-workspace.yaml'
               - 'apps/management/**'
               - 'packages/**'
               - 'shared/**'
@@ -87,6 +93,9 @@ jobs:
               - '.github/workflows/ci.yml'
               - '.github/workflows/_contract.yml'
             docker:
+              - 'package.json'
+              - 'pnpm-lock.yaml'
+              - 'pnpm-workspace.yaml'
               - 'services/**'
               - 'apps/console/Dockerfile'
               - 'apps/management/Dockerfile'

diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
@@ -113,7 +113,7 @@ jobs:
           version: v0.74.0
       - name: Upload candidate scan report
         if: ${{ always() && steps.scan.outcome != 'skipped' && steps.scan.outcome != '' }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: trivy-${{ matrix.service.name }}
           path: ${{ runner.temp }}/${{ matrix.service.name }}.trivy.json
@@ -165,7 +165,7 @@ jobs:
           printf '%s\n' "$SOURCE_SHA" > "$out/$SERVICE.source-commit"
           jq -n --arg service "$SERVICE" --arg image "$IMAGE_REF" '{service:$service,image_ref:$image}' > "$out/$SERVICE.release.json"
       - name: Upload candidate evidence
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: candidate-evidence-${{ matrix.service.name }}
           path: ${{ runner.temp }}/candidate-evidence-${{ matrix.service.name }}/
@@ -181,7 +181,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Download this run's candidate evidence
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           pattern: candidate-evidence-*
           path: ${{ runner.temp }}/candidate-evidence
@@ -200,7 +200,7 @@ jobs:
       - name: Validate candidates and promote release tags
         run: scripts/runbooks/promote-release.sh "$RUNNER_TEMP/candidate-evidence" "${GITHUB_SHA}" ghcr.io/davidhlp/ulticode --execute
       - name: Upload complete release manifest and evidence
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: release-manifest
           path: |

diff --git a/apps/console/package.json b/apps/console/package.json
@@ -77,33 +77,33 @@
     "@lucide/vue": "1.50.0"
   },
   "devDependencies": {
-    "@iconify-json/lucide": "^1.2.137",
+    "@iconify-json/lucide": "^1.2.140",
     "@iconify-json/radix-icons": "^1.2.6",
     "@tailwindcss/typography": "^0.5.19",
     "@tsconfig/node22": "^22.0.6",
     "@types/katex": "^0.16.7",
-    "@types/node": "^26.6.3",
+    "@types/node": "^26.6.4",
     "@types/sockjs-client": "^1.5.4",
     "@vitejs/plugin-vue": "^6.0.9",
     "@vitejs/plugin-vue-jsx": "^5.1.6",
-    "@vitest/coverage-v8": "^5.0.2",
+    "@vitest/coverage-v8": "^5.0.3",
     "@vue/eslint-config-prettier": "^10.2.0",
     "@vue/eslint-config-typescript": "^14.9.0",
     "@vue/test-utils": "^2.5.1",
     "@vue/tsconfig": "^0.9.1",
-    "eslint": "^10.11.0",
+    "eslint": "^10.12.0",
     "eslint-plugin-vue": "^10.11.1",
     "jiti": "^2.7.0",
-    "jsdom": "^30.1.1",
-    "knip": "^6.38.0",
+    "jsdom": "^30.1.2",
+    "knip": "^6.40.0",
     "npm-run-all2": "^9.0.3",
     "prettier": "3.9.9",
     "typescript": "~6.0.3",
     "unplugin-icons": "^24.0.0",
-    "vite": "^8.3.1",
-    "vite-plugin-pwa": "^1.3.0",
+    "vite": "^8.3.3",
+    "vite-plugin-pwa": "^2.0.0",
     "vite-plugin-vue-devtools": "^8.2.1",
-    "vitest": "^5.0.2",
-    "vue-tsc": "^3.3.11"
+    "vitest": "^5.0.3",
+    "vue-tsc": "^3.3.12"
   }
 }
diff --git a/apps/management/package.json b/apps/management/package.json
@@ -79,26 +79,26 @@
   "devDependencies": {
     "@playwright/test": "^1.63.0",
     "@tsconfig/node24": "^24.0.5",
-    "@types/node": "^26.6.3",
+    "@types/node": "^26.6.4",
     "@vitejs/plugin-vue": "^6.0.9",
-    "@vitest/coverage-v8": "^5.0.2",
-    "@vitest/ui": "^5.0.2",
+    "@vitest/coverage-v8": "^5.0.3",
+    "@vitest/ui": "^5.0.3",
     "@vue/eslint-config-prettier": "^10.2.0",
     "@vue/eslint-config-typescript": "^14.9.0",
     "@vue/test-utils": "^2.5.1",
     "@vue/tsconfig": "^0.9.1",
-    "eslint": "^10.11.0",
+    "eslint": "^10.12.0",
     "eslint-plugin-vue": "~10.11.1",
     "jiti": "^2.7.0",
-    "jsdom": "^30.1.1",
-    "knip": "^6.38.0",
+    "jsdom": "^30.1.2",
+    "knip": "^6.40.0",
     "npm-run-all2": "^9.0.3",
     "prettier": "3.9.9",
     "tw-animate-css": "^1.4.0",
     "typescript": "~6.0.3",
-    "vite": "^8.3.1",
+    "vite": "^8.3.3",
     "vite-plugin-vue-devtools": "^8.2.1",
-    "vitest": "^5.0.2",
-    "vue-tsc": "^3.3.11"
+    "vitest": "^5.0.3",
+    "vue-tsc": "^3.3.12"
   }
 }
diff --git a/apps/management/src/composables/useRemoteTable.ts b/apps/management/src/composables/useRemoteTable.ts
@@ -5,6 +5,7 @@ import {
   shallowRef,
   toValue,
   type ComputedRef,
+  type WritableComputedRef,
   type DeepReadonly,
   type MaybeRefOrGetter,
 } from 'vue'
@@ -64,8 +65,8 @@ export interface UseRemoteTableOptions<TData, TFilters, TParams> {
 
 export interface UseRemoteTableReturn<TData, TFilters> {
   query: ComputedRef<DeepReadonly<RemoteTableQuery<TFilters>>>
-  searchQuery: ComputedRef<string>
-  tablePagination: ComputedRef<PaginationState>
+  searchQuery: WritableComputedRef<string>
+  tablePagination: WritableComputedRef<PaginationState>
   loading: ComputedRef<boolean>
   data: ComputedRef<TData[]>
   total: ComputedRef<number>

diff --git a/apps/management/src/views/problems/components/CodeForm.vue b/apps/management/src/views/problems/components/CodeForm.vue
@@ -253,7 +253,7 @@ defineExpose({
             }}</Label>
             <Textarea
               :model-value="lang.starterCode"
-              @update:model-value="(v) => updateStarterCode(index, String(v))"
+              @update:model-value="updateStarterCode(index, String($event))"
               rows="12"
               :placeholder="`// Starter code for ${lang.language}...`"
               class="font-mono text-sm bg-background"

diff --git a/docs/DEVELOPMENT.md b/docs/DEVELOPMENT.md
@@ -637,6 +637,8 @@ pnpm --dir packages/auth-core test:coverage
 dependabot-core 当作 support file 丢弃，PR 只改 manifest，必然过不了 CI 的五处
 `pnpm install --frozen-lockfile`，update job 还会按成员 manifest 报 `misconfigured_tooling`。
 这个根 block 同时覆盖 `packages/*` 与根 manifest。
+根 `package.json`、`pnpm-lock.yaml` 或 `pnpm-workspace.yaml` 变化会触发 Console、Management
+以及 Docker CI 门禁，覆盖共享依赖更新及其镜像安装验证。
 
 ### Optional external Adapters
 

diff --git a/package.json b/package.json
@@ -2,12 +2,12 @@
   "dependencies": {
     "@letta-ai/letta-client": "^1.12.1",
     "@vitejs/plugin-vue": "^6.0.9",
-    "dotenv": "^17.4.2"
+    "dotenv": "^18.0.6"
   },
   "devDependencies": {
     "@vue/test-utils": "^2.5.1",
-    "jsdom": "^30.1.1",
+    "jsdom": "^30.1.2",
     "playwright": "1.63.0",
-    "vitest": "^5.0.2"
+    "vitest": "^5.0.3"
   }
 }
diff --git a/packages/app-bootstrap/package.json b/packages/app-bootstrap/package.json
@@ -21,7 +21,7 @@
   },
   "devDependencies": {
     "typescript": "~5.9.3",
-    "vitest": "^5.0.2",
+    "vitest": "^5.0.3",
     "vue": "^3.5.43"
   }
 }
diff --git a/packages/auth-core/package.json b/packages/auth-core/package.json
@@ -42,9 +42,9 @@
     "tailwind-merge": "^3.7.0"
   },
   "devDependencies": {
-    "@vitest/coverage-v8": "^5.0.2",
+    "@vitest/coverage-v8": "^5.0.3",
     "typescript": "~5.9.3",
-    "vitest": "^5.0.2",
+    "vitest": "^5.0.3",
     "vue": "^3.5.43"
   }
 }
diff --git a/packages/auth-ui/package.json b/packages/auth-ui/package.json
@@ -39,12 +39,12 @@
     "@vitejs/plugin-vue": "^6.0.9",
     "@vue/test-utils": "^2.5.1",
     "@vue/tsconfig": "^0.9.1",
-    "jsdom": "^30.1.1",
+    "jsdom": "^30.1.2",
     "typescript": "~5.9.3",
-    "vite": "^8.3.1",
-    "vitest": "^5.0.2",
+    "vite": "^8.3.3",
+    "vitest": "^5.0.3",
     "vue": "^3.5.43",
     "vue-router": "^5.0.0",
-    "vue-tsc": "^3.3.11"
+    "vue-tsc": "^3.3.12"
   }
 }
diff --git a/packages/datetime-utils/package.json b/packages/datetime-utils/package.json
@@ -17,8 +17,8 @@
     "test:watch": "vitest"
   },
   "devDependencies": {
-    "@types/node": "^26.6.3",
+    "@types/node": "^26.6.4",
     "typescript": "~5.9.3",
-    "vitest": "^5.0.2"
+    "vitest": "^5.0.3"
   }
 }
diff --git a/packages/design-system/package.json b/packages/design-system/package.json
@@ -62,8 +62,8 @@
     "@vitejs/plugin-vue": "^6.0.9",
     "@vue/tsconfig": "^0.9.1",
     "typescript": "~5.9.3",
-    "vite": "^8.3.1",
+    "vite": "^8.3.3",
     "vue": "^3.5.43",
-    "vue-tsc": "^3.3.11"
+    "vue-tsc": "^3.3.12"
   }
 }
diff --git a/packages/domain-types/package.json b/packages/domain-types/package.json
@@ -17,6 +17,6 @@
   },
   "devDependencies": {
     "typescript": "~5.9.3",
-    "vitest": "^5.0.2"
+    "vitest": "^5.0.3"
   }
 }
diff --git a/packages/http-client/package.json b/packages/http-client/package.json
@@ -23,8 +23,8 @@
     "@ulticode/auth-core": "workspace:*"
   },
   "devDependencies": {
-    "@types/node": "^26.6.3",
+    "@types/node": "^26.6.4",
     "typescript": "~5.9.3",
-    "vitest": "^5.0.2"
+    "vitest": "^5.0.3"
   }
 }
diff --git a/packages/i18n-completeness/package.json b/packages/i18n-completeness/package.json
@@ -17,8 +17,8 @@
     "test:watch": "vitest"
   },
   "devDependencies": {
-    "@types/node": "^26.6.3",
+    "@types/node": "^26.6.4",
     "typescript": "~5.9.3",
-    "vitest": "^5.0.2"
+    "vitest": "^5.0.3"
   }
 }