Skip to content

v0.6.7 — dependency security pass

Choose a tag to compare

View all tags
@paulojorge1963 paulojorge1963 released this 12 Oct 09:23
· 44 commits to main since this release
v0.6.7
c0dc843

Dependency security pass (dependency-only; no schema/code changes).

  • npm audit 18 → 8 (0 critical / 8 high / 0 moderate). Fixed the critical Next 15.5.23 → 15.5.27, plus overrides for deepmerge-ts, postcss-selector-parser and braces.
  • Remaining 8 highs are build/lint-time or non-reachable with no patch short of framework majors: the braces→micromatch→fast-glob→chokidar→tailwindcss→eslint-config-next chain (braces has no fixed version), and image-size (pptxgenjs/CVR export, which only embeds trusted PNG/JPEG).
  • Long-term remediation is the deliberate Next 16 + Tailwind 4 upgrade (shipped in v0.7.0).
Assets 2
Loading