chore(deps): take the patch-and-minor group, pdfjs-dist kept pinned

[Jerry-CodeHub]

接替被 dependabot 自动关闭的 #34（pdfjs-dist ignore 规则生效后连带关闭）。

内容

• 12 个 patch/minor bump：@umijs/max 4.7.22、cesium 1.146、dompurify 3.4.16、tinymce-i18n 26.9.28、vitest 5.0.3（+coverage）、eslint 10.12、stylelint 17.16、lint-staged 17.6、prettier 3.9.9、globals 17.13、typescript-eslint 8.71
• pdfjs-dist 保持 6.3.289（与 react-pdf 内置版本严格一致，repo-hygiene 门禁）

验证

• 基于 chore(deps): clear new high advisories via overrides, register unpatched ones #35 后的 master 重建 lockfile；pnpm audit 退出码 0
• pnpm vitest run scripts/repo-hygiene.test.ts 全过

Summary by CodeRabbit

• Chores
  • Updated versions of application, localization, and development tool dependencies.

[coderabbitai]

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 52 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 3133e3ea-41c6-4e4b-b65a-cf181f627558

📥 Commits

Reviewing files that changed from the base of the PR and between 7746316 and e1c029b.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (1)

• package.json

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 04de57a6-a560-4883-a94b-200febd2efb0

📥 Commits

Reviewing files that changed from the base of the PR and between 20361b6 and 7746316.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (1)

• package.json

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

package.json updates version ranges for four application dependencies and eight development tools. Other dependency versions remain unchanged.

Changes

Dependency updates

Layer / File(s)	Summary
Application dependency versions package.json	Version ranges change for @umijs/max, cesium, dompurify, and tinymce-i18n.
Development tool versions package.json	Version ranges change for @vitest/coverage-v8, eslint, globals, lint-staged, prettier, stylelint, typescript-eslint, and vitest.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 77463

This grouped dependency update has no concrete merge-blocking risk. The ESLint 10 and React plugin concern does not apply because the lint configuration sets the React version explicitly instead of using detection.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the grouped dependency updates and notes that pdfjs-dist remains pinned, which matches the pull request changes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cloudflare-workers-and-pages]

Deploying umi-react-admin with    Cloudflare Pages

Latest commit:	e1c029b
Status:	⚡️  Build in progress...

View logs