Commit Graph

132 Commits

Author SHA1 Message Date
Badr B.
7e7f3f8284 Merge pull request #89 from learnhouse/dependabot/npm_and_yarn/vercel/analytics-1.6.1
build(deps): bump @vercel/analytics from 1.5.0 to 1.6.1
2026-01-05 21:47:36 +01:00
dependabot[bot]
781b48f1fb build(deps): bump @vercel/analytics from 1.5.0 to 1.6.1
Bumps [@vercel/analytics](https://github.com/vercel/analytics/tree/HEAD/packages/web) from 1.5.0 to 1.6.1.
- [Release notes](https://github.com/vercel/analytics/releases)
- [Commits](https://github.com/vercel/analytics/commits/1.6.1/packages/web)

---
updated-dependencies:
- dependency-name: "@vercel/analytics"
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-01 17:06:50 +00:00
Badr B.
dbfc68a2ec Merge pull request #85 from learnhouse/vercel/react-flight-nextjs-rce-vulner-akjfwu
Fix React Server Components RCE vulnerability
2025-12-08 23:18:46 +01:00
Vercel
6336099f52 Update React Flight / Next.js RCE vulnerability
React Flight / Next.js RCE Advisory - Patch Applied

SUMMARY:
This project was affected by the React Flight / Next.js RCE advisory and has been successfully patched.

VULNERABILITY DETAILS:
- The project used Next.js 15.5.6 (vulnerable version in the 15.5.x line)
- Requirement: Upgrade to 15.5.7 (patched version)
- React Flight packages: Not used (not affected)
- React/React-DOM: Using 18.3.1 (not vulnerable 19.x versions)

CHANGES APPLIED:
1. Updated Next.js from ^15.5.6 to 15.5.7
   - File: package.json
   - Changed: "next": "^15.5.6" → "next": "15.5.7"
   - Reason: Fixed vulnerable caret dependency to pinned patched version

2. Updated lockfiles
   - pnpm-lock.yaml: Updated to reflect next@15.5.7
   - package-lock.json: Updated to reflect next@15.5.7

VERIFICATION:
✓ Next.js version: 15.5.7 (patched)
✓ React version: 18.3.1 (not vulnerable)
✓ React-DOM version: 18.3.1 (not vulnerable)
✓ No React Flight packages present
✓ Lockfiles correctly resolve to patched version

SECURITY STATUS: RESOLVED
The project now uses the patched version of Next.js 15.5.7 and is no longer vulnerable to the React Flight / Next.js RCE advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
2025-12-08 22:12:26 +00:00
Badr B.
d9b89b876b Fix typo in environment file copy command 2025-11-26 23:27:44 +01:00
swve
8d7f016cfa feat: new self hosting guide 2025-11-03 20:31:46 +01:00
swve
4dc4f27a0e chore: upgrade docs packages 2025-11-03 20:24:05 +01:00
Badr B.
5d57cc26a5 Merge pull request #76 from learnhouse/dependabot/npm_and_yarn/next-15.5.2
build(deps): bump next from 15.2.0 to 15.5.2
2025-09-07 18:42:45 +02:00
Badr B.
b682215d17 Merge pull request #70 from florianbussmann/self-hosting
docs: update login url
2025-09-07 18:42:29 +02:00
dependabot[bot]
3543dcc73b build(deps): bump next from 15.2.0 to 15.5.2
Bumps [next](https://github.com/vercel/next.js) from 15.2.0 to 15.5.2.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v15.2.0...v15.5.2)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 15.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-02 07:37:21 +00:00
Florian Bussmann
715cb5cf91 docs: update login url 2025-07-27 13:44:58 +02:00
Badr B.
2893e638e0 Merge pull request #56 from learnhouse/dependabot/npm_and_yarn/vercel/analytics-1.5.0 2025-03-01 19:11:49 +01:00
Badr B.
7ad412045f Merge pull request #58 from learnhouse/dependabot/npm_and_yarn/types/node-22.13.8 2025-03-01 19:11:41 +01:00
dependabot[bot]
276bb18283 build(deps): bump @vercel/analytics from 1.4.1 to 1.5.0
Bumps [@vercel/analytics](https://github.com/vercel/analytics/tree/HEAD/packages/web) from 1.4.1 to 1.5.0.
- [Release notes](https://github.com/vercel/analytics/releases)
- [Commits](https://github.com/vercel/analytics/commits/1.5.0/packages/web)

---
updated-dependencies:
- dependency-name: "@vercel/analytics"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-01 17:59:57 +00:00
dependabot[bot]
fb8c85a263 build(deps-dev): bump @types/node from 22.13.0 to 22.13.8
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.13.0 to 22.13.8.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-01 17:59:39 +00:00
Badr B.
211273b275 Merge pull request #57 from learnhouse/dependabot/npm_and_yarn/typescript-5.8.2 2025-03-01 18:58:37 +01:00
Badr B.
474a776174 Merge pull request #55 from learnhouse/dependabot/npm_and_yarn/next-15.2.0 2025-03-01 18:58:22 +01:00
dependabot[bot]
6120853e27 build(deps-dev): bump typescript from 5.7.3 to 5.8.2
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.7.3 to 5.8.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.7.3...v5.8.2)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-01 17:57:41 +00:00
dependabot[bot]
1ae3984fa9 build(deps): bump next from 15.1.6 to 15.2.0
Bumps [next](https://github.com/vercel/next.js) from 15.1.6 to 15.2.0.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v15.1.6...v15.2.0)

---
updated-dependencies:
- dependency-name: next
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-01 17:56:58 +00:00
swve
88c445a799 docs: Replace Poetry with uv for Python dependency management 2025-02-21 20:49:46 +01:00
Badr B.
e16f0e60f9 Merge pull request #52 from learnhouse/dependabot/npm_and_yarn/types/node-22.13.0
build(deps-dev): bump @types/node from 22.10.3 to 22.13.0
2025-02-02 08:59:23 +01:00
dependabot[bot]
39228ca024 build(deps-dev): bump @types/node from 22.10.3 to 22.13.0
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.10.3 to 22.13.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-02 07:58:15 +00:00
Badr B.
8207c76a6e Merge pull request #53 from learnhouse/dependabot/npm_and_yarn/typescript-5.7.3
build(deps-dev): bump typescript from 5.7.2 to 5.7.3
2025-02-02 08:57:11 +01:00
Badr B.
7814ac2ec2 Merge pull request #54 from learnhouse/dependabot/npm_and_yarn/next-15.1.6
build(deps): bump next from 15.1.3 to 15.1.6
2025-02-02 08:57:05 +01:00
dependabot[bot]
5c7404ade0 build(deps): bump next from 15.1.3 to 15.1.6
Bumps [next](https://github.com/vercel/next.js) from 15.1.3 to 15.1.6.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v15.1.3...v15.1.6)

---
updated-dependencies:
- dependency-name: next
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-01 17:59:21 +00:00
dependabot[bot]
f69ae12340 build(deps-dev): bump typescript from 5.7.2 to 5.7.3
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.7.2 to 5.7.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.7.2...v5.7.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-01 17:58:50 +00:00
Badr B.
0e8c22ab01 Merge pull request #50 from learnhouse/dependabot/npm_and_yarn/next-15.1.3
build(deps): bump next from 15.0.3 to 15.1.3
2025-01-01 22:13:24 +01:00
Badr B.
eb400d7822 Merge pull request #51 from learnhouse/dependabot/npm_and_yarn/types/node-22.10.3
build(deps-dev): bump @types/node from 22.10.1 to 22.10.3
2025-01-01 22:13:22 +01:00
dependabot[bot]
c59d3b0d89 build(deps-dev): bump @types/node from 22.10.1 to 22.10.3
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.10.1 to 22.10.3.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-01 17:41:55 +00:00
dependabot[bot]
80f6991ce6 build(deps): bump next from 15.0.3 to 15.1.3
Bumps [next](https://github.com/vercel/next.js) from 15.0.3 to 15.1.3.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v15.0.3...v15.1.3)

---
updated-dependencies:
- dependency-name: next
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-01 17:41:46 +00:00
Badr B.
b04fc2912b Merge pull request #48 from learnhouse/dependabot/npm_and_yarn/vercel/analytics-1.4.1
build(deps): bump @vercel/analytics from 1.3.2 to 1.4.1
2024-12-01 20:10:20 +01:00
Badr B.
e3690a54be Merge pull request #45 from learnhouse/dependabot/npm_and_yarn/types/node-22.10.1
build(deps-dev): bump @types/node from 22.8.6 to 22.10.1
2024-12-01 20:10:12 +01:00
dependabot[bot]
0ea756dc39 build(deps-dev): bump @types/node from 22.8.6 to 22.10.1
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.8.6 to 22.10.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-01 19:09:47 +00:00
dependabot[bot]
db6eb36efd build(deps): bump @vercel/analytics from 1.3.2 to 1.4.1
Bumps [@vercel/analytics](https://github.com/vercel/analytics/tree/HEAD/packages/web) from 1.3.2 to 1.4.1.
- [Release notes](https://github.com/vercel/analytics/releases)
- [Commits](https://github.com/vercel/analytics/commits/1.4.1/packages/web)

---
updated-dependencies:
- dependency-name: "@vercel/analytics"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-01 19:09:40 +00:00
Badr B.
030ab8a5af Merge pull request #46 from learnhouse/dependabot/npm_and_yarn/react-aria/ssr-3.9.7
build(deps): bump @react-aria/ssr from 3.9.6 to 3.9.7
2024-12-01 20:08:39 +01:00
Badr B.
34fc62b882 Merge pull request #47 from learnhouse/dependabot/npm_and_yarn/typescript-5.7.2
build(deps-dev): bump typescript from 5.6.3 to 5.7.2
2024-12-01 20:08:28 +01:00
Badr B.
956d1ea420 Merge pull request #49 from learnhouse/dependabot/npm_and_yarn/next-15.0.3
build(deps): bump next from 15.0.2 to 15.0.3
2024-12-01 20:08:17 +01:00
dependabot[bot]
7178f207b8 build(deps): bump next from 15.0.2 to 15.0.3
Bumps [next](https://github.com/vercel/next.js) from 15.0.2 to 15.0.3.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v15.0.2...v15.0.3)

---
updated-dependencies:
- dependency-name: next
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-01 18:01:07 +00:00
dependabot[bot]
79ef311748 build(deps-dev): bump typescript from 5.6.3 to 5.7.2
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.6.3 to 5.7.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.6.3...v5.7.2)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-01 18:00:31 +00:00
dependabot[bot]
4f8e8163e7 build(deps): bump @react-aria/ssr from 3.9.6 to 3.9.7
Bumps [@react-aria/ssr](https://github.com/adobe/react-spectrum) from 3.9.6 to 3.9.7.
- [Release notes](https://github.com/adobe/react-spectrum/releases)
- [Commits](https://github.com/adobe/react-spectrum/compare/@react-aria/ssr@3.9.6...@react-aria/ssr@3.9.7)

---
updated-dependencies:
- dependency-name: "@react-aria/ssr"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-01 18:00:15 +00:00
Badr B.
1f974731e8 Merge pull request #43 from learnhouse/dependabot/npm_and_yarn/types/node-22.8.6
build(deps-dev): bump @types/node from 22.7.4 to 22.8.6
2024-11-01 20:15:36 +01:00
dependabot[bot]
add911333b build(deps-dev): bump @types/node from 22.7.4 to 22.8.6
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.7.4 to 22.8.6.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-01 19:15:25 +00:00
Badr B.
196dc626db Merge pull request #42 from learnhouse/dependabot/npm_and_yarn/next-15.0.2
build(deps): bump next from 14.2.7 to 15.0.2
2024-11-01 20:14:37 +01:00
Badr B.
f1fd1caee8 Merge pull request #41 from learnhouse/dependabot/npm_and_yarn/typescript-5.6.3
build(deps-dev): bump typescript from 5.6.2 to 5.6.3
2024-11-01 20:14:29 +01:00
dependabot[bot]
5549ff20e1 build(deps-dev): bump typescript from 5.6.2 to 5.6.3
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.6.2 to 5.6.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.6.2...v5.6.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-01 19:14:16 +00:00
dependabot[bot]
99d01a8315 build(deps): bump next from 14.2.7 to 15.0.2
Bumps [next](https://github.com/vercel/next.js) from 14.2.7 to 15.0.2.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v14.2.7...v15.0.2)

---
updated-dependencies:
- dependency-name: next
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-01 19:13:45 +00:00
Badr B.
6f626d5c68 Merge pull request #40 from learnhouse/dependabot/npm_and_yarn/vercel/analytics-1.3.2
build(deps): bump @vercel/analytics from 1.3.1 to 1.3.2
2024-11-01 20:12:45 +01:00
dependabot[bot]
ceeeddc47a build(deps): bump @vercel/analytics from 1.3.1 to 1.3.2
Bumps [@vercel/analytics](https://github.com/vercel/analytics/tree/HEAD/packages/web) from 1.3.1 to 1.3.2.
- [Release notes](https://github.com/vercel/analytics/releases)
- [Commits](https://github.com/vercel/analytics/commits/1.3.2/packages/web)

---
updated-dependencies:
- dependency-name: "@vercel/analytics"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-01 17:41:35 +00:00
swve
43fbe9f7f0 chore: upgrade packages 2024-10-23 20:36:42 +02:00
Badr B.
5a0a7072e3 Merge pull request #38 from chrishollandaise/chore/update-dev-docs
chore: container disclaimer, add missing env for smooth setup
2024-10-14 23:59:15 +02:00