[fix] Proxy headers of GitHub & Lark API

[optimize] upgrade to Node.js 24 & other latest Upstream packages/actions

Author: github-actions[bot]

.github/workflows/main.yml

@@ -13,7 +13,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         if: ${{ env.VERCEL_TOKEN && env.VERCEL_ORG_ID && env.VERCEL_PROJECT_ID }}
 
       - name: Deploy to Vercel
@@ -29,7 +29,7 @@ jobs:
           vercel-args: ${{ github.ref == 'refs/heads/main' && ' --prod' || '' }}
 
       - name: Lark notification
-        uses: foxundermoon/feishu-action@v2
+        uses: Open-Source-Bazaar/feishu-action@v3
         with:
           url: ${{ secrets.LARK_CHATBOT_HOOK_URL }}
           msg_type: post

package.json

@@ -18,7 +18,7 @@
     "@koa/router": "^15.2.0",
     "@mdx-js/loader": "^3.1.1",
     "@mdx-js/react": "^3.1.1",
-    "@next/mdx": "^16.1.1",
+    "@next/mdx": "^16.1.4",
     "core-js": "^3.47.0",
     "echarts-jsx": "^0.6.0",
     "file-type": "^21.3.0",
@@ -39,7 +39,7 @@
     "mobx-restful": "^2.1.4",
     "mobx-restful-table": "^2.6.3",
     "mobx-strapi": "^0.8.1",
-    "next": "^16.1.1",
+    "next": "^16.1.4",
     "next-pwa": "^5.6.0",
     "next-ssr-middleware": "^1.1.0",
     "open-react-map": "^0.9.1",
@@ -53,24 +53,24 @@
     "yaml": "^2.8.2"
   },
   "devDependencies": {
-    "@babel/plugin-proposal-decorators": "^7.28.0",
-    "@babel/plugin-transform-typescript": "^7.28.5",
+    "@babel/plugin-proposal-decorators": "^7.28.6",
+    "@babel/plugin-transform-typescript": "^7.28.6",
     "@babel/preset-react": "^7.28.5",
-    "@cspell/eslint-plugin": "^9.4.0",
+    "@cspell/eslint-plugin": "^9.6.0",
     "@eslint/js": "^9.39.2",
-    "@next/eslint-plugin-next": "^16.1.1",
+    "@next/eslint-plugin-next": "^16.1.4",
     "@open-source-bazaar/china-ngo-database": "^0.6.0",
     "@softonus/prettier-plugin-duplicate-remover": "^1.1.2",
-    "@stylistic/eslint-plugin": "^5.6.1",
+    "@stylistic/eslint-plugin": "^5.7.0",
     "@types/eslint-config-prettier": "^6.11.3",
     "@types/jsonwebtoken": "^9.0.10",
     "@types/koa": "^3.0.1",
     "@types/next-pwa": "^5.6.9",
-    "@types/node": "^22.19.3",
-    "@types/react": "^19.2.7",
+    "@types/node": "^24.10.9",
+    "@types/react": "^19.2.8",
     "@types/react-dom": "^19.2.3",
     "eslint": "^9.39.2",
-    "eslint-config-next": "^16.1.1",
+    "eslint-config-next": "^16.1.4",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-react": "^7.37.5",
     "eslint-plugin-simple-import-sort": "^12.1.1",
@@ -81,11 +81,11 @@
     "less-loader": "^12.3.0",
     "lint-staged": "^16.2.7",
     "next-with-less": "^3.0.1",
-    "prettier": "^3.7.4",
+    "prettier": "^3.8.0",
     "prettier-plugin-css-order": "^2.2.0",
-    "sass": "^1.97.1",
+    "sass": "^1.97.2",
     "typescript": "~5.9.3",
-    "typescript-eslint": "^8.51.0"
+    "typescript-eslint": "^8.53.1"
   },
   "resolutions": {
     "mobx-react-helper": "$mobx-react-helper",

pages/api/GitHub/[...slug].ts

@@ -1,12 +1,12 @@
 import { createKoaRouter, withKoaRouter } from 'next-ssr-middleware';
 
-import { safeAPI } from '../core';
+import { safeAPI, verifyJWT } from '../core';
 import { proxyGitHubAll } from './core';
 
 export const config = { api: { bodyParser: false } };
 
 const router = createKoaRouter(import.meta.url);
 
-router.get('/*slug', safeAPI, proxyGitHubAll);
+router.get('/{*slug}', safeAPI, proxyGitHubAll).all('/{*slug}', safeAPI, verifyJWT, proxyGitHubAll);
 
 export default withKoaRouter(router);

pages/api/GitHub/core.ts

@@ -7,7 +7,7 @@ import { ProxyBaseURL, VERCEL } from '../../../models/configuration';
 export const proxyGithub = async <T>({
   method,
   url,
-  headers: { host, ...headers },
+  headers: { host, authorization, 'content-length': _, ...headers },
   request,
 }: Context) => {
   const path = url!.slice(`/api/GitHub/`.length),

pages/api/Lark/core.ts

@@ -1,11 +1,6 @@
 import { Context, Middleware } from 'koa';
 import { marked } from 'marked';
-import {
-  LarkApp,
-  LarkData,
-  normalizeTextArray,
-  TableCellText,
-} from 'mobx-lark';
+import { LarkApp, LarkData, normalizeTextArray, TableCellText } from 'mobx-lark';
 
 import { LarkAppMeta } from '../../../models/configuration';
 
@@ -17,7 +12,7 @@ export const normalizeMarkdownArray = (list: TableCellText[]) =>
 export const proxyLark = async <T extends LarkData>({
   method,
   url,
-  headers: { host, authorization, ...headers },
+  headers: { host, authorization, 'content-length': _, ...headers },
   request,
 }: Context) => {
   await lark.getAccessToken();