Repository navigation
Commit 5265aed
committed
fix: bump next to 16.3.8 to resolve critical RCE advisories
Что:
- Next.js 16.3.4 -> 16.3.8 в apps/dokploy плюс pin в root overrides (покрывает транзитивный next).
Зачем:
- Закрыть 3 critical (RCE в Image Optimization и next/og) и связанные high/moderate из bun audit.
Риски:
- Патч в пределах мажора; typecheck, build и lint проверены.
Проверки:
- bun audit по Next.js - 0 находок; typecheck 4/4 - passed; full build - passed; format-and-lint - exit 0.
What:
- Next.js 16.3.4 -> 16.3.8 plus root override pin; fixes 3 critical RCE advisories and related findings.
Checks: bun audit clean for Next.js; typecheck 4/4, full build, format-and-lint green.1 parent 09ced4e commit 5265aed
3 files changed
Lines changed: 17 additions & 313 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
110 | 110 | | |
111 | 111 | | |
112 | 112 | | |
113 | | - | |
| 113 | + | |
114 | 114 | | |
115 | 115 | | |
116 | 116 | | |
| |||
0 commit comments