Merge pull request #37067 from iptv-org/patch-2026.04.3

Patch 2026.04.3

.github/workflows/check.yml

@@ -3,6 +3,8 @@ on:
   workflow_dispatch:
   pull_request:
     types: [opened, synchronize, reopened]
+permissions:
+  contents: read
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true

.github/workflows/format.yml

@@ -3,6 +3,8 @@ on:
   workflow_dispatch:
   # schedule:
   #   - cron: "0 12 * * *"
+permissions:
+  contents: read
 jobs:
   main:
     runs-on: ubuntu-latest

.github/workflows/update.yml

@@ -3,6 +3,8 @@ on:
   workflow_dispatch:
   schedule:
     - cron: '0 0 * * *'
+permissions:
+  contents: read
 jobs:
   main:
     runs-on: ubuntu-latest

package.json

@@ -55,7 +55,7 @@
     "@typescript-eslint/eslint-plugin": "^8.38.0",
     "@typescript-eslint/parser": "^8.38.0",
     "async": "^3.2.6",
-    "axios": "^1.11.0",
+    "axios": "^1.15.2",
     "chalk": "^5.4.1",
     "cli-progress": "^3.12.0",
     "commander": "^14.0.0",
@@ -79,6 +79,7 @@
     "tsx": "^4.20.3"
   },
   "overrides": {
-    "esbuild": "0.23.1"
+    "esbuild": "0.23.1",
+    "@xmldom/xmldom": ">=0.8.13 <1.0.0"
   }
 }