build(deps): SheetJS 0.20.3 resmi dağıtımdan vendor/ altına eklendi

npm 11 uzak tarball'ı indirmediği için paket depoya alındı
(sha256 8dc73fc3b00203e72d176e85b50938627c7b086e607c682e8d3c22c02bb99fe8);
Dockerfile deps aşaması vendor/ klasörünü kopyalar.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Dockerfile

@@ -11,6 +11,8 @@ FROM node:${NODE_VERSION}-alpine AS deps
 WORKDIR /app
 RUN apk add --no-cache libc6-compat
 COPY package.json package-lock.json ./
+# SheetJS resmi dağıtımdan vendor/ altında (npm uzak tarball indirmez).
+COPY vendor ./vendor
 RUN npm ci --no-audit --no-fund
 
 # 2) Build

package-lock.json

@@ -31,6 +31,7 @@
         "sonner": "^2.0.8",
         "tw-animate-css": "^1.4.0",
         "vaul": "^1.1.2",
+        "xlsx": "file:vendor/xlsx-0.20.3.tgz",
         "zod": "^4.6.7"
       },
       "devDependencies": {
@@ -13158,6 +13159,18 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/xlsx": {
+      "version": "0.20.3",
+      "resolved": "file:vendor/xlsx-0.20.3.tgz",
+      "integrity": "sha512-oLDq3jw7AcLqKWH2AhCpVTZl8mf6X2YReP+Neh0SJUzV/BdZYjth94tG5toiMB1PPrYtxOCfaoUCkvtuH+3AJA==",
+      "license": "Apache-2.0",
+      "bin": {
+        "xlsx": "bin/xlsx.njs"
+      },
+      "engines": {
+        "node": ">=0.8"
+      }
+    },
     "node_modules/yallist": {
       "version": "3.1.1",
       "resolved": "https://registry.npmjs.org/yallist/-/yallist-3.1.1.tgz",

package.json

@@ -51,6 +51,7 @@
     "sonner": "^2.0.8",
     "tw-animate-css": "^1.4.0",
     "vaul": "^1.1.2",
+    "xlsx": "file:vendor/xlsx-0.20.3.tgz",
     "zod": "^4.6.7"
   },
   "devDependencies": {