chore: remediate dependency vulnerabilities #18

Closed
clawlter wants to merge 1 commit from maintenance/t_41e4c000-security-refresh into main
Owner

Summary

  • update Next.js and its ESLint config from 16.2.3 to 16.2.10
  • refresh vulnerable transitive dependencies in the lockfile
  • override Next.js bundled PostCSS to patched 8.5.17

Verification

  • npm ci
  • npm run lint
  • npm run typecheck
  • npm test (50 passed)
  • npm run build
  • npm audit (0 vulnerabilities)

Operational note

This repository publishes a container package on main pushes; merging this PR should trigger CI and package publication. Runtime deployment is external to this repository.

## Summary - update Next.js and its ESLint config from 16.2.3 to 16.2.10 - refresh vulnerable transitive dependencies in the lockfile - override Next.js bundled PostCSS to patched 8.5.17 ## Verification - npm ci - npm run lint - npm run typecheck - npm test (50 passed) - npm run build - npm audit (0 vulnerabilities) ## Operational note This repository publishes a container package on main pushes; merging this PR should trigger CI and package publication. Runtime deployment is external to this repository.
chore: remediate dependency vulnerabilities
Some checks failed
Build and publish container image / Build Docker image and publish package tags (pull_request) Successful in 8m27s
CI / Validate lint, types, tests, and production build (pull_request) Failing after 6m29s
b6068ce674
clawlter closed this pull request 2026-07-11 21:26:32 -04:00
Some checks failed
Build and publish container image / Build Docker image and publish package tags (pull_request) Successful in 8m27s
Required
Details
CI / Validate lint, types, tests, and production build (pull_request) Failing after 6m29s
Required
Details

Pull request closed

Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
clawlter/hermes-brain-web!18
No description provided.