Skip to content

Patch Next.js security vulnerabilities - #693

Merged
redreceipt merged 1 commit into
mainfrom
fix/next-security-patch
Oct 23, 2026
Merged

redreceipt merged 1 commit into
mainfrom
fix/next-security-patch

Conversation

@redreceipt

@redreceipt redreceipt commented Oct 23, 2026 •

Copy link
Copy Markdown
Member

Summary

Validation

  • Type/lint checks, all 95 tests, production build, and all 8 deterministic browser tests pass.
  • npm audit --omit=dev: zero vulnerabilities.
  • Existing dev-only braces advisory remains outside this production patch.

Proof

Local production build served real dashboard, sign-in, navigation, and health requests using the documented no-secrets path. Browser screenshots attached; no external posts or data changes.

CI and Vercel Preview passed. One Chromium package-download timeout passed on retry; optional Luna suite was not scheduled.

Sign-in page served by the Next.js 16.4.2 production build

Mobile reviews page served by the patched production build

@vercel

vercel Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
bug-board Ready Ready Preview Oct 23, 2026 1:01pm UTC

Request Review

@github-actions

Copy link
Copy Markdown

🟢 e2e: 8 passed

All 8 tests in 1 file
Test Time
🟢 tests/dashboard.e2e.ts · 8 passed 7.8s
🟢 dashboard navigation and no-secrets rendering 1.3s
🟢 preset and custom date windows survive navigation 828ms
🟢 review and DAG filters use URL state 1.5s
🟢 mobile navigation stays usable 2.2s
🟢 sign-in card has room around its action on phones and desktop 546ms
🟢 health is public, API and cron remain closed without authentication 361ms
🟢 legacy dashboard URLs still resolve 364ms
🟢 review filters stay in sync after Back and reload 633ms

e2e 0.21.2 · 9.2s · web · run artifacts

@redreceipt
redreceipt marked this pull request as ready for review October 23, 2026 13:14
@redreceipt
redreceipt merged commit 58bd2aa into main Oct 23, 2026
5 of 6 checks passed
@redreceipt
redreceipt deleted the fix/next-security-patch branch October 23, 2026 13:14
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-23T13:15:19.892284Z 37a7a6c Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

This branch was successfully deployed

1 active deployment
Preview — 37a7a6c0 Deployed Oct 23, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant