chore(deps): bump the production group across 1 directory with 7 updates

apps/console/package.json

@@ -46,21 +46,21 @@
     "@internationalized/date": "^3.12.4",
     "@monaco-editor/loader": "^1.7.0",
     "@stomp/stompjs": "^7.5.0",
-    "@tabler/icons-vue": "^3.49.0",
+    "@tabler/icons-vue": "^3.50.0",
     "@tailwindcss/vite": "^4.3.3",
-    "@tanstack/vue-virtual": "^3.13.47",
+    "@tanstack/vue-virtual": "^3.13.49",
     "@unovis/ts": "^1.7.1",
     "@unovis/vue": "^1.7.1",
     "@vue-dnd-kit/core": "1.7.0",
     "@vueuse/core": "^14.4.0",
-    "axios": "^1.20.0",
+    "axios": "^1.21.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "dompurify": "^3.4.16",
     "echarts": "^6.1.0",
     "highlight.js": "^11.12.0",
     "idb": "^8.0.4",
-    "katex": "^0.19.0",
+    "katex": "^0.19.1",
     "monaco-editor": "^0.57.0",
     "pinia": "^4.1.0",
     "reka-ui": "^2.11.0",
@@ -74,7 +74,7 @@
     "vue-sonner": "^2.0.9",
     "workbox-window": "^7.4.1",
     "zod": "^4.6.6",
-    "@lucide/vue": "1.59.0"
+    "@lucide/vue": "1.63.0"
   },
   "devDependencies": {
     "@iconify-json/lucide": "^1.2.146",

apps/management/package.json

@@ -44,13 +44,13 @@
     "@dnd-kit/dom": "^0.1.21",
     "@dnd-kit/modifiers": "^9.0.0",
     "@internationalized/date": "^3.12.4",
-    "@tabler/icons-vue": "^3.49.0",
+    "@tabler/icons-vue": "^3.50.0",
     "@tailwindcss/vite": "^4.3.3",
     "@tanstack/vue-table": "^8.21.3",
     "@unovis/ts": "^1.7.1",
     "@unovis/vue": "^1.7.1",
     "@vueuse/core": "^14.4.0",
-    "axios": "^1.20.0",
+    "axios": "^1.21.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "date-fns": "^4.4.0",
@@ -59,7 +59,7 @@
     "echarts": "^6.1.0",
     "embla-carousel-vue": "^8.6.0",
     "highlight.js": "^11.12.0",
-    "katex": "^0.19.0",
+    "katex": "^0.19.1",
     "pinia": "^4.1.0",
     "reka-ui": "^2.11.0",
     "tailwind-merge": "^3.7.0",
@@ -73,7 +73,7 @@
     "vue-router": "^5.4.0",
     "vue-sonner": "^2.0.9",
     "zod": "^4.6.6",
-    "@lucide/vue": "1.59.0"
+    "@lucide/vue": "1.63.0"
   },
   "devDependencies": {
     "@playwright/test": "^1.64.1",

docs/DEVELOPMENT.md

@@ -347,6 +347,8 @@ Management forms use patched Zod 4 through `src/lib/toTypedSchema.ts`, which pre
 vee-validate 4 form contract for parsed values, defaults, field errors and required metadata.
 The published Zod 3 adapter is not used; production dependency audits retain the high-severity gate.
 
+Nacos 客户端使用官方 `pure` classifier，并显式引入同版本 `nacos-api`、`nacos-common`，由共享 RPC 模块提供给各 Owner/Worker；排除 Dubbo 引入的默认 shaded client，避免其内嵌依赖绕过 Maven 的安全版本管理。依赖升级须保留 protobuf 消息解析与 loopback gRPC 回归，并由镜像扫描及真实安装 CI 验证。Guava 升级不修复 Nacos 旧 protobuf 生成代码的资源放大风险；本地消息回归也不证明该风险已消除或线上可利用。
+
 后续变更必须保留以下基线契约：
 
 - Console 与 Management 保持各自路由、布局和权限边界，跨端行为归属现有 focused package；

package.json

@@ -2,7 +2,7 @@
   "dependencies": {
     "@letta-ai/letta-client": "^1.12.1",
     "@vitejs/plugin-vue": "^6.0.10",
-    "dotenv": "^18.0.8"
+    "dotenv": "^18.0.9"
   },
   "devDependencies": {
     "@vue/test-utils": "^2.5.1",

packages/auth-core/package.json

@@ -37,7 +37,7 @@
     "vue": "^3.5.44"
   },
   "dependencies": {
-    "axios": "^1.16.1",
+    "axios": "^1.21.0",
     "clsx": "^2.1.1",
     "tailwind-merge": "^3.7.0"
   },

packages/auth-ui/package.json

@@ -33,8 +33,8 @@
     "@ulticode/auth-core": "workspace:*",
     "clsx": "^2.1.1",
     "tailwind-merge": "^3.7.0",
-    "@lucide/vue": "1.59.0",
-    "@tabler/icons-vue": "^3.49.0",
+    "@lucide/vue": "1.63.0",
+    "@tabler/icons-vue": "^3.50.0",
     "@ulticode/design-system": "workspace:*",
     "@ulticode/theme": "workspace:*"
   },

packages/badge-config/package.json

@@ -36,6 +36,6 @@
   },
   "dependencies": {
     "@ulticode/design-system": "workspace:*",
-    "@lucide/vue": "1.59.0"
+    "@lucide/vue": "1.63.0"
   }
 }

packages/design-system/package.json

@@ -39,14 +39,14 @@
   },
   "dependencies": {
     "@internationalized/date": "^3.11.0",
-    "@lucide/vue": "1.59.0",
+    "@lucide/vue": "1.63.0",
     "@ulticode/theme": "workspace:*",
     "@unovis/ts": "^1.7.1",
     "@unovis/vue": "^1.7.1",
     "@vueuse/core": "^14.4.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
-    "katex": "^0.19.0",
+    "katex": "^0.19.1",
     "tailwind-merge": "^3.7.0",
     "tailwindcss": "^4.3.0",
     "tw-animate-css": "^1.4.0",

packages/http-client/package.json

@@ -17,7 +17,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "axios": "^1.13.2"
+    "axios": "^1.21.0"
   },
   "peerDependencies": {
     "@ulticode/auth-core": "workspace:*"

packages/markdown-utils/package.json

@@ -17,7 +17,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@mdit/plugin-katex": "^1.1.3",
+    "@mdit/plugin-katex": "^1.1.4",
     "dompurify": "^3.4.16",
     "highlight.js": "^11.11.1",
     "markdown-it": "^15.0.2"

packages/sidebar-menu/package.json

@@ -36,7 +36,7 @@
     "clsx": "^2.1.1",
     "tailwind-merge": "^3.7.0",
     "@ulticode/design-system": "workspace:*",
-    "@lucide/vue": "1.59.0"
+    "@lucide/vue": "1.63.0"
   },
   "devDependencies": {
     "@vitejs/plugin-vue": "^6.0.10",