v1.1.3（2026-08-14）
调整
移除 3 个未使用的生产依赖（axios、canvas-confetti、@halo-dev/api-client），缩小依赖审计面与产物体积
通过 pnpm-workspace.yaml overrides 将间接依赖 glob（10.4.5 → 10.5.0）与 nanoid（3.3.17 → 3.3.18）升级到修复版本，pnpm audit --audit-level=high 结果归零
Gradle Wrapper 补充 distributionSha256Sum（Gradle 9.4.0 官方哈希）并开启 validateDistributionUrl=true，防止发行版被篡改
CI 发版流程新增依赖安全审计步骤（官方 registry），存在 high 级漏洞时阻止发版
验证
...
Click on the "Follow" button below and you'll get the latest news from Halo - 强大易用的开源建站工具 | 应用市场 | 版本发布 via email, mobile or you can read them on your personal news page on this site.
You can unsubscribe anytime you want easily.
You can also choose the topics or keywords that you're interested in, so you receive only what you want.
Halo - 强大易用的开源建站工具 | 应用市场 | 版本发布 title: Halo - 强大易用的开源建站工具