Skip to content

WORKING -Image GPT and Grok #995

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 8 commits into
base: main
Choose a base branch
from
Draft

Conversation

lmarcelinoc
Copy link

No description provided.

Copy link

vercel bot commented May 8, 2025

@lmarcelinoc is attempting to deploy a commit to the Vercel Team on Vercel.

A member of the Team first needs to authorize it.

- Added public route handling in middleware for login, register, and guest access.
- Implemented role management for users, allowing differentiation between 'user' and 'admin'.
- Introduced registration status check in the registration page to conditionally allow new user sign-ups.
- Enhanced profile dialog to display user roles and added admin dialog for admin users.
- Updated database schema to include provider and system settings management.
- Added utility function to generate random passwords.
- Improved user settings form to handle optional fields and default values.
- Added Brave Search API integration for web search capabilities in the chatbot.
- Updated README with setup instructions for Brave Search API.
- Introduced new migration scripts to add `braveSearchApiKey` to the system settings.
- Enhanced chat API to support new AI SDK formats and improved error handling.
- Added new components for displaying search results and handling search queries.
- Updated model selection and provider management to accommodate new AI models.
- Refactored existing code for better organization and maintainability.
- Implemented a new user profile page that fetches and displays user documents.
- Added functionality to delete documents with confirmation.
- Introduced tabs for navigating between saved memories and profile settings.
- Updated database schema to ensure document IDs are unique.
- Integrated new UI components for better user experience.
- Updated TypeScript configuration reference link for better clarity.
- Removed deprecated `next.config.ts` file and adjusted package dependencies.
- Downgraded React and Next.js versions for compatibility.
- Refactored authentication components to streamline imports and improve code organization.
- Updated form handling in `AuthForm` and `SignOutForm` components for better user experience.
- Adjusted dummy password generation logic in constants for server-side rendering.
Copy link

socket-security bot commented May 10, 2025

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Action Severity Alert (click for details)
Block Critical
next@14.2.5 has a Critical CVE.

CVE: GHSA-f82v-jwr5-mffw Authorization Bypass in Next.js Middleware (CRITICAL)

Affected versions: >= 14.0.0, < 14.2.25

Patched version: 14.2.25

From: package.jsonnpm/next@14.2.5

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/next@14.2.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Block High
next@14.2.5 has a High CVE.

CVE: GHSA-gp8f-8m3g-qvj9 Next.js Cache Poisoning (HIGH)

Affected versions: >= 14.0.0, < 14.2.10

Patched version: 14.2.10

From: package.jsonnpm/next@14.2.5

ℹ Read more on: This package | This alert | What is a CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/next@14.2.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Block High
next@14.2.5 has a High CVE.

CVE: GHSA-7gfc-8cq8-jh5f Next.js authorization bypass vulnerability (HIGH)

Affected versions: >= 9.5.5, < 14.2.15

Patched version: 14.2.15

From: package.jsonnpm/next@14.2.5

ℹ Read more on: This package | This alert | What is a CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/next@14.2.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

…ndling

- Added new ESLint rules for improved code quality and error detection.
- Updated Next.js configuration to ignore ESLint and TypeScript errors during production builds.
- Refactored login and registration actions to handle errors more gracefully and provide user feedback.
- Enhanced login and registration pages with loading states and error messages for better user experience.
- Updated TypeScript configuration to include additional types for improved type safety.
- Added detailed logging throughout the authentication process for better debugging and monitoring.
- Updated the .env.example file to correct the Redis URL format.
- Introduced dynamic routing for several API endpoints to improve performance.
- Enhanced error handling in login actions and middleware for improved user feedback.
- Refactored authentication configuration to log settings on startup for easier troubleshooting.
@lmarcelinoc lmarcelinoc marked this pull request as draft May 12, 2025 03:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant