Skip to content

Commit 5265aed

Browse files
committed
fix: bump next to 16.3.8 to resolve critical RCE advisories
Что: - Next.js 16.3.4 -> 16.3.8 в apps/dokploy плюс pin в root overrides (покрывает транзитивный next). Зачем: - Закрыть 3 critical (RCE в Image Optimization и next/og) и связанные high/moderate из bun audit. Риски: - Патч в пределах мажора; typecheck, build и lint проверены. Проверки: - bun audit по Next.js - 0 находок; typecheck 4/4 - passed; full build - passed; format-and-lint - exit 0. What: - Next.js 16.3.4 -> 16.3.8 plus root override pin; fixes 3 critical RCE advisories and related findings. Checks: bun audit clean for Next.js; typecheck 4/4, full build, format-and-lint green.
1 parent 09ced4e commit 5265aed

3 files changed

Lines changed: 17 additions & 313 deletions

File tree

‎apps/dokploy/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -110,7 +110,7 @@
110110
"lucide-react": "^0.469.0",
111111
"micromatch": "4.0.8",
112112
"nanoid": "3.3.11",
113-
"next": "16.3.4",
113+
"next": "16.3.8",
114114
"next-themes": "^0.2.1",
115115
"nextjs-toploader": "^3.9.17",
116116
"node-os-utils": "2.0.1",

0 commit comments

Comments
 (0)