Merge pull request #352 from xixu-me/security/dependabot-fixes

fix: update vulnerable dependencies

package.json

@@ -16,7 +16,7 @@
     "prettier": "^3.9.6",
     "simple-git-hooks": "^2.13.1",
     "typescript": "^7.0.2",
-    "vitest": "^4.1.10",
+    "vitest": "^4.1.11",
     "wrangler": "^4.110.0"
   },
   "name": "xget",
@@ -45,6 +45,11 @@
   },
   "type": "module",
   "overrides": {
-    "esbuild": "0.28.1"
+    "esbuild": "0.28.1",
+    "fast-uri": "^3.1.6",
+    "@vitest/mocker": "^4.1.11",
+    "sharp": "^0.35.4",
+    "js-yaml": "^4.3.2",
+    "undici": "^7.29.1"
   }
 }