[fix] Proxy headers of GitHub & Lark API

[optimize] upgrade to Node.js 24 & other latest Upstream packages/actions

Author: github-actions[bot]

.github/workflows/deploy-production.yml

@@ -15,7 +15,7 @@ jobs:
       packages: write
       contents: read
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Inject Environment variables
         run: |
@@ -24,18 +24,18 @@ jobs:
           EOF
           cp .env.local .env.personal.local
 
-      - uses: docker/login-action@v3.5.0
+      - uses: docker/login-action@v3.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ github.token }}
 
-      - uses: docker/metadata-action@v5.8.0
+      - uses: docker/metadata-action@v5.10.0
         id: meta
         with:
           images: ghcr.io/${{ github.repository }}
 
-      - uses: docker/build-push-action@v6
+      - uses: docker/build-push-action@v6.18.0
         id: push
         with:
           context: .

.github/workflows/main.yml

@@ -11,7 +11,7 @@ jobs:
       VERCEL_PROJECT_ID: ${{ secrets.VERCEL_PROJECT_ID }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         if: ${{ env.VERCEL_TOKEN && env.VERCEL_ORG_ID && env.VERCEL_PROJECT_ID }}
         with:
           submodules: recursive
@@ -31,7 +31,7 @@ jobs:
           vercel-args: ${{ github.ref == 'refs/heads/main' && '--prod' || '' }}
 
       - name: Lark notification
-        uses: foxundermoon/feishu-action@v2
+        uses: Open-Source-Bazaar/feishu-action@v3
         with:
           url: ${{ secrets.LARK_CHATBOT_HOOK_URL }}
           msg_type: post

package.json

@@ -4,7 +4,7 @@
   "description": "React project scaffold based on TypeScript, Next.js, Bootstrap & Workbox.",
   "private": true,
   "engines": {
-    "node": "22.x"
+    "node": ">=22"
   },
   "dependencies": {
     "@emotion/cache": "^11.14.0",
@@ -13,12 +13,12 @@
     "@emotion/styled": "^11.14.1",
     "@giscus/react": "^3.1.0",
     "@koa/bodyparser": "^6.0.0",
-    "@mui/lab": "^7.0.1-beta.20",
-    "@mui/material": "^7.3.6",
-    "@mui/material-nextjs": "^7.3.6",
+    "@mui/lab": "^7.0.1-beta.21",
+    "@mui/material": "^7.3.7",
+    "@mui/material-nextjs": "^7.3.7",
     "@passwordless-id/webauthn": "^2.3.1",
-    "@sentry/nextjs": "^10.32.1",
-    "file-type": "^21.2.0",
+    "@sentry/nextjs": "^10.35.0",
+    "file-type": "^21.3.0",
     "idb-keyval": "^6.2.2",
     "jsonwebtoken": "^9.0.3",
     "koa": "^3.1.1",
@@ -30,11 +30,11 @@
     "mobx": "^6.15.0",
     "mobx-github": "^0.6.2",
     "mobx-i18n": "^0.7.2",
-    "mobx-lark": "^2.6.3",
+    "mobx-lark": "^2.6.4",
     "mobx-react": "^9.2.1",
     "mobx-react-helper": "^0.5.1",
     "mobx-restful": "^2.1.4",
-    "next": "^16.1.1",
+    "next": "^16.1.4",
     "next-pwa": "~5.6.0",
     "next-ssr-middleware": "^1.1.0",
     "react": "^19.2.3",
@@ -43,25 +43,25 @@
     "webpack": "^5.104.1"
   },
   "devDependencies": {
-    "@babel/plugin-proposal-decorators": "^7.28.0",
-    "@babel/plugin-transform-typescript": "^7.28.5",
+    "@babel/plugin-proposal-decorators": "^7.28.6",
+    "@babel/plugin-transform-typescript": "^7.28.6",
     "@babel/preset-react": "^7.28.5",
-    "@cspell/eslint-plugin": "^9.4.0",
+    "@cspell/eslint-plugin": "^9.6.0",
     "@eslint/js": "^9.39.2",
     "@idea2app/data-server": "^1.0.0-rc.9",
-    "@next/eslint-plugin-next": "^16.1.1",
-    "@stylistic/eslint-plugin": "^5.6.1",
+    "@next/eslint-plugin-next": "^16.1.4",
+    "@stylistic/eslint-plugin": "^5.7.0",
     "@tailwindcss/postcss": "^4.1.18",
     "@tailwindcss/typography": "^0.5.19",
     "@types/eslint-config-prettier": "^6.11.3",
     "@types/jsonwebtoken": "^9.0.10",
     "@types/koa": "^3.0.1",
     "@types/lodash.debounce": "^4.0.9",
     "@types/next-pwa": "^5.6.9",
-    "@types/node": "^22.19.3",
-    "@types/react": "^19.2.7",
+    "@types/node": "^24.10.9",
+    "@types/react": "^19.2.8",
     "eslint": "^9.39.2",
-    "eslint-config-next": "^16.1.1",
+    "eslint-config-next": "^16.1.4",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-react": "^7.37.5",
     "eslint-plugin-simple-import-sort": "^12.1.1",
@@ -71,12 +71,12 @@
     "jiti": "^2.6.1",
     "lint-staged": "^16.2.7",
     "postcss": "^8.5.6",
-    "prettier": "^3.7.4",
-    "prettier-plugin-css-order": "^2.1.2",
+    "prettier": "^3.8.0",
+    "prettier-plugin-css-order": "^2.2.0",
     "prettier-plugin-tailwindcss": "^0.7.2",
     "tailwindcss": "^4.1.18",
     "typescript": "~5.9.3",
-    "typescript-eslint": "^8.50.1"
+    "typescript-eslint": "^8.53.1"
   },
   "resolutions": {
     "mobx-github": "$mobx-github",

pages/api/GitHub/[...slug].ts

@@ -1,12 +1,12 @@
 import { createKoaRouter, withKoaRouter } from 'next-ssr-middleware';
 
-import { safeAPI } from '../core';
+import { safeAPI, verifyJWT } from '../core';
 import { proxyGitHubAll } from './core';
 
 export const config = { api: { bodyParser: false } };
 
 const router = createKoaRouter(import.meta.url);
 
-router.get('/{*slug}', safeAPI, proxyGitHubAll);
+router.get('/{*slug}', safeAPI, proxyGitHubAll).all('/{*slug}', safeAPI, verifyJWT, proxyGitHubAll);
 
 export default withKoaRouter(router);

pages/api/GitHub/core.ts

@@ -7,7 +7,7 @@ import { ProxyBaseURL, VERCEL } from '../../../models/configuration';
 export const proxyGithub = async <T>({
   method,
   url,
-  headers: { host, ...headers },
+  headers: { host, authorization, 'content-length': _, ...headers },
   request,
 }: Context) => {
   const path = url!.slice(`/api/GitHub/`.length),

pages/api/Lark/core.ts

@@ -8,7 +8,7 @@ export const lark = new LarkApp(LarkAppMeta);
 export const proxyLark = async <T extends LarkData>({
   method,
   url,
-  headers: { host, authorization, ...headers },
+  headers: { host, authorization, 'content-length': _, ...headers },
   request,
 }: Context) => {
   await lark.getAccessToken();