690319:2145 Update Backend & Frontend dep.

README.md

@@ -10,19 +10,19 @@
 
 ---
 
-## 📈 Current Status (As of 2026-03-16)
+## 📈 Current Status (As of 2026-03-19)
 
-**Version 1.8.1 (Patch) — UAT Ready**
+**Version 1.8.1 (Patch) — UAT Ready, Security Hardened**
 
-| Area                 | Status                   | หมายเหตุ                             |
-| -------------------- | ------------------------ | ------------------------------------ |
-| 🔧 **Backend**       | ✅ Production Ready      | NestJS 11, Express v5, 18 Modules    |
-| 🎨 **Frontend**      | ✅ 100% Complete         | Next.js 16, React 19, TanStack Query |
-| 💾 **Database**      | ✅ Schema v1.8.0 Stable  | MariaDB 11.8, No-migration Policy    |
-| 📘 **Documentation** | ✅ **10/10 Gaps Closed** | Product Vision → Release Policy      |
-| 🤖 **AI Migration**  | 🔄 Pre-migration Setup   | n8n + Ollama (ADR-017/018)           |
-| 🧪 **Testing**       | 🔄 UAT Preparation       | E2E + Acceptance Criteria ready      |
-| 🚀 **Deployment**    | 📋 Pending Go-Live Gate  | Blue-Green on QNAP Container Station |
+| Area                 | Status                   | หมายเหตุ                                 |
+| -------------------- | ------------------------ | ---------------------------------------- |
+| 🔧 **Backend**       | ✅ Production Ready      | NestJS 11, Express v5, 0 Vulnerabilities |
+| 🎨 **Frontend**      | ✅ 100% Complete         | Next.js 16.2.0, React 19.2.4, ESLint 9   |
+| 💾 **Database**      | ✅ Schema v1.8.0 Stable  | MariaDB 11.8, No-migration Policy        |
+| 📘 **Documentation** | ✅ **10/10 Gaps Closed** | Product Vision → Release Policy          |
+| 🤖 **AI Migration**  | 🔄 Pre-migration Setup   | n8n + Ollama (ADR-017/018)               |
+| 🧪 **Testing**       | 🔄 UAT Preparation       | E2E + Acceptance Criteria ready          |
+| 🚀 **Deployment**    | 📋 Pending Go-Live Gate  | Blue-Green on QNAP Container Station     |
 
 ---
 
@@ -62,12 +62,13 @@ LCBP3-DMS เป็นระบบบริหารจัดการเอก
   "orm": "TypeORM",
   "authentication": "JWT + Passport",
   "authorization": "CASL (RBAC)",
-  "search": "Elasticsearch",
+  "search": "Elasticsearch 9.3.4",
   "cache": "Redis",
   "queue": "BullMQ",
   "fileUpload": "Multer + ClamAV",
-  "notification": "Nodemailer + n8n (LINE)",
-  "documentation": "Swagger"
+  "notification": "Nodemailer 8.0.3 + n8n (LINE)",
+  "documentation": "Swagger",
+  "security": "0 vulnerabilities (as of 2026-03-19)"
 }
 ```
 
@@ -75,16 +76,17 @@ LCBP3-DMS เป็นระบบบริหารจัดการเอก
 
 ```typescript
 {
-  "framework": "Next.js 16 (App Router, proxy.ts)",
+  "framework": "Next.js 16.2.0 (App Router, proxy.ts)",
   "language": "TypeScript",
-  "styling": "Tailwind CSS",
+  "styling": "Tailwind CSS 4.2.2",
   "components": "shadcn/ui",
   "stateManagement": {
     "server": "TanStack Query (React Query)",
-    "forms": "React Hook Form + Zod",
+    "forms": "React Hook Form 7.71.2 + Zod 4.3.6",
     "ui": "useState/useReducer"
   },
-  "testing": "Vitest + Playwright"
+  "testing": "Vitest 4.1.0 + Playwright",
+  "linting": "ESLint 9.39.1"
 }
 ```
 
@@ -559,9 +561,9 @@ This project is **Internal Use Only** - ลิขสิทธิ์เป็น
 - ✅ Specs restructure เป็น 7 canonical layers
 - ✅ 17 ADRs ครอบคลุมทุก Architectural Decision
 
-### ✅ Version 1.8.1 Patch (Mar 2026) — Product Owner Documentation
+### ✅ Version 1.8.1 Patch (Mar 2026) — Product Owner Documentation & Security Hardening
 
-**10/10 Documentation Gaps Closed:**
+**10/10 Documentation Gaps Closed + 52 Security Vulnerabilities Fixed:**
 
 | Gap | เอกสาร                                     | สถานะ |
 | --- | ------------------------------------------ | ----- |
@@ -576,6 +578,13 @@ This project is **Internal Use Only** - ลิขสิทธิ์เป็น
 | 9   | Training Plan (per Role, 4 phases)         | ✅    |
 | 10  | Edge Cases & Business Rules (37 rules)     | ✅    |
 
+**Security Hardening (2026-03-19):**
+
+- ✅ All 52 vulnerabilities resolved (27 high + 20 moderate + 5 low)
+- ✅ Major package updates: Elasticsearch 9.3.4, Nodemailer 8.0.3, UUID 13.0.0
+- ✅ Security overrides applied via `pnpm audit --fix`
+- ✅ Current status: "No known vulnerabilities found"
+
 - ✅ ADR-018: AI Boundary (Ollama Isolation มี No Direct DB/Storage Access)
 - ✅ ADR-019: Hybrid Identifier Strategy (INT PK + UUIDv7 Public API)
 - ✅ Migration n8n Workflow + AI Isolation Plan