fix(create): lock ccc and testtool version (#307)

* fix(create): lock ccc and testtool version

* fix(v3): js-script-next-js deps audit overrides

Author: RetricSu

src/templates/config.ts

@@ -19,8 +19,8 @@ export const TEMPLATE_CONFIG: TemplateDependencies = {
     dotenv: '^17.2.1',
   },
   devDependencies: {
-    'ckb-testtool': '~1.0.3',
-    '@ckb-ccc/core': '~1.5.3', // Pin to version compatible with ckb-testtool
+    'ckb-testtool': '1.0.3',
+    '@ckb-ccc/core': '1.5.3', // lock to version compatible with ckb-testtool
     esbuild: '~0.25.8',
     jest: '~29.7.0',
     prettier: '^3.5.3',

templates/v3/js-script-next-js/package.json

@@ -18,6 +18,13 @@
   "pnpm": {
     "onlyBuiltDependencies": [
       "esbuild"
-    ]
+    ],
+    "overrides": {
+      "brace-expansion@>=1.0.0 <=1.1.11": ">=1.1.12",
+      "brace-expansion@>=2.0.0 <=2.0.1": ">=2.0.2",
+      "axios@>=1.0.0 <1.12.0": ">=1.12.0",
+      "sha.js@<=2.4.11": ">=2.4.12",
+      "form-data@>=4.0.0 <4.0.4": ">=4.0.4"
+    }
   }
 }