Skip to content

Conversation

@minorcell
Copy link
Owner

@minorcell minorcell commented Dec 4, 2025

Summary

  • bump Next.js-related dependencies to 15.1.4 and align npm/pnpm lockfiles
  • standardize npm registry configuration on npmjs for consistent installs
  • add resilient GitHub contributor fetching with revalidation to avoid build failures when offline

Testing

  • CI=1 pnpm build

Codex Task

✨ PR Description

Purpose: Upgrade Next.js from 15.0.4 to 15.1.4 to patch RCE vulnerability and improve contributor fetch resilience with proper error handling.

Main changes:

  • Updated Next.js and @next/mdx dependencies to version 15.1.4 to address security vulnerability
  • Added comprehensive error handling in getContributors with try-catch and HTTP status validation
  • Configured .npmrc with explicit registry settings to prevent dependency confusion attacks
  • Implemented hourly revalidation cache strategy to reduce GitHub API rate limit pressure

Generated by LinearB AI and added by gitStream.
AI-generated content may contain inaccuracies. Please verify before using.
💡 Tip: You can customize your AI Description using Guidelines Learn how

@vercel
Copy link
Contributor

vercel bot commented Dec 4, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
perfedge Error Error Dec 5, 2025 7:43am

Copy link

@linearb linearb bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✨ PR Review

LGTM

Generated by LinearB AI and added by gitStream.
AI-generated content may contain inaccuracies. Please verify before using.
💡 Tip: You can customize your AI Review using Guidelines Learn how

@linearb linearb bot added the 1 min review label Dec 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants