Skip to content

v1.3.4 — Dependency Security Hardening

Choose a tag to compare

@whoavidwivedi whoavidwivedi released this 21 Aug 10:58
· 18 commits to main since this release

Highlights

  • Updated Next.js and its lint integration to patched releases.
  • Updated the Bun lockfile and compatible dependencies.
  • Added targeted Bun overrides for vulnerable transitive packages.
  • Bumped the application version to 1.3.4.

Security

  • Resolved all high-severity findings reported by bun audit --audit-level high.
  • Verified the dependency graph with bun install --frozen-lockfile.
  • Kept the audit clean without relying on npm, yarn, or pnpm commands.

Validation

  • Typecheck passed.
  • Lint and formatting checks passed.
  • 22 tests passed.
  • Production build passed.

Deployment

  • Published from commit 6001a80 on main.