Repository navigation
Next.js 16.4.3 (T-0891, weekly security scan) - #93
Merged
Merged
Conversation
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Helme-Agent: toiuuram project agent Helme-Account: claude-wp Helme-Model: claude-sonnet-5-5 Helme-Session: 2e3872d5-31f3-456f-a346-45c6f5bd78b7
Bugbot is paused — your team has an unpaid invoiceBugbot is paused because your team has an unpaid invoice. Pay it from the billing page in the Cursor dashboard and Bugbot resumes automatically. (requestId: 2c85731c-0d96-4680-9401-0e663e2b180b) |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Next.js and eslint-config-next 16.4.2 to 16.4.3 (exact pins;
package.jsonandpackage-lock.jsononly). Ticket T-0891, from the weekly security scan.Why
16.4.3 is the current patched release (the line fixed in SafeScript PR #52). Staying on the newest patch keeps the project clear of the Next.js advisories that block builds on older 16.x.
Checked
npm audit --omit=dev: before 0 critical, 1 high (zod < 4.6.6, GHSA-mrhx-c7xc-m3w5); after 0 critical, 1 high (samezod). The zod finding is not touched by this change.npx tsc --noEmit: clean.npm test: 1503 tests, 1500 passed, 3 skipped, 0 failed.npx eslint: 177 errors, 49 warnings. The same count as before the bump on the same code (178/49 on the language-pages branch before and after), so none come from this change.npm run buildthree times in a row: exit 0 each time, no security warning. Built with placeholder public Supabase values, since the sandbox has no.env.git grep).package-lock.jsonalso gained six optional@emnapi/*entries under@tailwindcss/oxide-wasm32-wasi(npm filled in missing lockfile entries; dev only).Undo: revert this one commit.
🤖 Generated with Claude Code