fix: 依赖更新

Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto
Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write #106
@isaacs/brace-expansion has Uncontrolled Resource Consumption #107
jwt-go allows excessive memory allocation during header parsing #24
golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange #29
部分文件修复
This commit is contained in:
npc0-hue
2026-02-04 18:10:06 +08:00
parent 76d648245c
commit 8c9e7652ec
19 changed files with 322 additions and 95 deletions
+6 -6
View File
@@ -717,7 +717,7 @@ services:
# API service
api:
image: ccr.ccs.tencentyun.com/yfgaia/dify-plus-api:1.11.4-fix.1
image: ccr.ccs.tencentyun.com/yfgaia/dify-plus-api:1.11.4.fex.1.9
restart: always
environment:
# Use the shared environment variables.
@@ -761,7 +761,7 @@ services:
# worker service
# The Celery worker for processing all queues (dataset, workflow, mail, etc.)
worker:
image: ccr.ccs.tencentyun.com/yfgaia/dify-plus-api:1.11.4-fix.1
image: ccr.ccs.tencentyun.com/yfgaia/dify-plus-api:1.11.4.fex.1.9
restart: always
environment:
# Use the shared environment variables.
@@ -800,7 +800,7 @@ services:
# worker-gaia service
# The Celery worker-gaia for processing the queue.
worker-gaia:
image: ccr.ccs.tencentyun.com/yfgaia/dify-plus-api:1.11.4-fix.1
image: ccr.ccs.tencentyun.com/yfgaia/dify-plus-api:1.11.4.fex.1.9
restart: always
environment:
# Use the shared environment variables.
@@ -826,7 +826,7 @@ services:
# worker-dataset service
# The Celery worker-dataset for processing the queue.
worker-dataset:
image: ccr.ccs.tencentyun.com/yfgaia/dify-plus-api:1.11.4-fix.1
image: ccr.ccs.tencentyun.com/yfgaia/dify-plus-api:1.11.4.fex.1.9
restart: always
environment:
# Use the shared environment variables.
@@ -852,7 +852,7 @@ services:
# worker_beat service
# Celery beat for scheduling periodic tasks.
worker_beat:
image: ccr.ccs.tencentyun.com/yfgaia/dify-plus-api:1.11.4-fix.1
image: ccr.ccs.tencentyun.com/yfgaia/dify-plus-api:1.11.4.fex.1.9
restart: always
environment:
# Use the shared environment variables.
@@ -882,7 +882,7 @@ services:
# Frontend web application.
web:
image: ccr.ccs.tencentyun.com/yfgaia/dify-plus-web:1.11.4-fix.1
image: ccr.ccs.tencentyun.com/yfgaia/dify-plus-web:1.11.4.fex.3
restart: always
environment:
CONSOLE_API_URL: ${CONSOLE_API_URL:-}