Badr B.
7e7f3f8284
Merge pull request #89 from learnhouse/dependabot/npm_and_yarn/vercel/analytics-1.6.1
...
build(deps): bump @vercel/analytics from 1.5.0 to 1.6.1
2026-01-05 21:47:36 +01:00
dependabot[bot]
781b48f1fb
build(deps): bump @vercel/analytics from 1.5.0 to 1.6.1
...
Bumps [@vercel/analytics](https://github.com/vercel/analytics/tree/HEAD/packages/web ) from 1.5.0 to 1.6.1.
- [Release notes](https://github.com/vercel/analytics/releases )
- [Commits](https://github.com/vercel/analytics/commits/1.6.1/packages/web )
---
updated-dependencies:
- dependency-name: "@vercel/analytics"
dependency-version: 1.6.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-01 17:06:50 +00:00
Badr B.
dbfc68a2ec
Merge pull request #85 from learnhouse/vercel/react-flight-nextjs-rce-vulner-akjfwu
...
Fix React Server Components RCE vulnerability
2025-12-08 23:18:46 +01:00
Vercel
6336099f52
Update React Flight / Next.js RCE vulnerability
...
React Flight / Next.js RCE Advisory - Patch Applied
SUMMARY:
This project was affected by the React Flight / Next.js RCE advisory and has been successfully patched.
VULNERABILITY DETAILS:
- The project used Next.js 15.5.6 (vulnerable version in the 15.5.x line)
- Requirement: Upgrade to 15.5.7 (patched version)
- React Flight packages: Not used (not affected)
- React/React-DOM: Using 18.3.1 (not vulnerable 19.x versions)
CHANGES APPLIED:
1. Updated Next.js from ^15.5.6 to 15.5.7
- File: package.json
- Changed: "next": "^15.5.6" → "next": "15.5.7"
- Reason: Fixed vulnerable caret dependency to pinned patched version
2. Updated lockfiles
- pnpm-lock.yaml: Updated to reflect next@15.5.7
- package-lock.json: Updated to reflect next@15.5.7
VERIFICATION:
✓ Next.js version: 15.5.7 (patched)
✓ React version: 18.3.1 (not vulnerable)
✓ React-DOM version: 18.3.1 (not vulnerable)
✓ No React Flight packages present
✓ Lockfiles correctly resolve to patched version
SECURITY STATUS: RESOLVED
The project now uses the patched version of Next.js 15.5.7 and is no longer vulnerable to the React Flight / Next.js RCE advisory.
Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
2025-12-08 22:12:26 +00:00
Badr B.
d9b89b876b
Fix typo in environment file copy command
2025-11-26 23:27:44 +01:00
swve
8d7f016cfa
feat: new self hosting guide
2025-11-03 20:31:46 +01:00
swve
4dc4f27a0e
chore: upgrade docs packages
2025-11-03 20:24:05 +01:00
Badr B.
5d57cc26a5
Merge pull request #76 from learnhouse/dependabot/npm_and_yarn/next-15.5.2
...
build(deps): bump next from 15.2.0 to 15.5.2
2025-09-07 18:42:45 +02:00
Badr B.
b682215d17
Merge pull request #70 from florianbussmann/self-hosting
...
docs: update login url
2025-09-07 18:42:29 +02:00
dependabot[bot]
3543dcc73b
build(deps): bump next from 15.2.0 to 15.5.2
...
Bumps [next](https://github.com/vercel/next.js ) from 15.2.0 to 15.5.2.
- [Release notes](https://github.com/vercel/next.js/releases )
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js )
- [Commits](https://github.com/vercel/next.js/compare/v15.2.0...v15.5.2 )
---
updated-dependencies:
- dependency-name: next
dependency-version: 15.5.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-02 07:37:21 +00:00
Florian Bussmann
715cb5cf91
docs: update login url
2025-07-27 13:44:58 +02:00
Badr B.
2893e638e0
Merge pull request #56 from learnhouse/dependabot/npm_and_yarn/vercel/analytics-1.5.0
2025-03-01 19:11:49 +01:00
Badr B.
7ad412045f
Merge pull request #58 from learnhouse/dependabot/npm_and_yarn/types/node-22.13.8
2025-03-01 19:11:41 +01:00
dependabot[bot]
276bb18283
build(deps): bump @vercel/analytics from 1.4.1 to 1.5.0
...
Bumps [@vercel/analytics](https://github.com/vercel/analytics/tree/HEAD/packages/web ) from 1.4.1 to 1.5.0.
- [Release notes](https://github.com/vercel/analytics/releases )
- [Commits](https://github.com/vercel/analytics/commits/1.5.0/packages/web )
---
updated-dependencies:
- dependency-name: "@vercel/analytics"
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-03-01 17:59:57 +00:00
dependabot[bot]
fb8c85a263
build(deps-dev): bump @types/node from 22.13.0 to 22.13.8
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 22.13.0 to 22.13.8.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-03-01 17:59:39 +00:00
Badr B.
211273b275
Merge pull request #57 from learnhouse/dependabot/npm_and_yarn/typescript-5.8.2
2025-03-01 18:58:37 +01:00
Badr B.
474a776174
Merge pull request #55 from learnhouse/dependabot/npm_and_yarn/next-15.2.0
2025-03-01 18:58:22 +01:00
dependabot[bot]
6120853e27
build(deps-dev): bump typescript from 5.7.3 to 5.8.2
...
Bumps [typescript](https://github.com/microsoft/TypeScript ) from 5.7.3 to 5.8.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases )
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml )
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.7.3...v5.8.2 )
---
updated-dependencies:
- dependency-name: typescript
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-03-01 17:57:41 +00:00
dependabot[bot]
1ae3984fa9
build(deps): bump next from 15.1.6 to 15.2.0
...
Bumps [next](https://github.com/vercel/next.js ) from 15.1.6 to 15.2.0.
- [Release notes](https://github.com/vercel/next.js/releases )
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js )
- [Commits](https://github.com/vercel/next.js/compare/v15.1.6...v15.2.0 )
---
updated-dependencies:
- dependency-name: next
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-03-01 17:56:58 +00:00
swve
88c445a799
docs: Replace Poetry with uv for Python dependency management
2025-02-21 20:49:46 +01:00
Badr B.
e16f0e60f9
Merge pull request #52 from learnhouse/dependabot/npm_and_yarn/types/node-22.13.0
...
build(deps-dev): bump @types/node from 22.10.3 to 22.13.0
2025-02-02 08:59:23 +01:00
dependabot[bot]
39228ca024
build(deps-dev): bump @types/node from 22.10.3 to 22.13.0
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 22.10.3 to 22.13.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-02-02 07:58:15 +00:00
Badr B.
8207c76a6e
Merge pull request #53 from learnhouse/dependabot/npm_and_yarn/typescript-5.7.3
...
build(deps-dev): bump typescript from 5.7.2 to 5.7.3
2025-02-02 08:57:11 +01:00
Badr B.
7814ac2ec2
Merge pull request #54 from learnhouse/dependabot/npm_and_yarn/next-15.1.6
...
build(deps): bump next from 15.1.3 to 15.1.6
2025-02-02 08:57:05 +01:00
dependabot[bot]
5c7404ade0
build(deps): bump next from 15.1.3 to 15.1.6
...
Bumps [next](https://github.com/vercel/next.js ) from 15.1.3 to 15.1.6.
- [Release notes](https://github.com/vercel/next.js/releases )
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js )
- [Commits](https://github.com/vercel/next.js/compare/v15.1.3...v15.1.6 )
---
updated-dependencies:
- dependency-name: next
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-02-01 17:59:21 +00:00
dependabot[bot]
f69ae12340
build(deps-dev): bump typescript from 5.7.2 to 5.7.3
...
Bumps [typescript](https://github.com/microsoft/TypeScript ) from 5.7.2 to 5.7.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases )
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml )
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.7.2...v5.7.3 )
---
updated-dependencies:
- dependency-name: typescript
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-02-01 17:58:50 +00:00
Badr B.
0e8c22ab01
Merge pull request #50 from learnhouse/dependabot/npm_and_yarn/next-15.1.3
...
build(deps): bump next from 15.0.3 to 15.1.3
2025-01-01 22:13:24 +01:00
Badr B.
eb400d7822
Merge pull request #51 from learnhouse/dependabot/npm_and_yarn/types/node-22.10.3
...
build(deps-dev): bump @types/node from 22.10.1 to 22.10.3
2025-01-01 22:13:22 +01:00
dependabot[bot]
c59d3b0d89
build(deps-dev): bump @types/node from 22.10.1 to 22.10.3
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 22.10.1 to 22.10.3.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-01 17:41:55 +00:00
dependabot[bot]
80f6991ce6
build(deps): bump next from 15.0.3 to 15.1.3
...
Bumps [next](https://github.com/vercel/next.js ) from 15.0.3 to 15.1.3.
- [Release notes](https://github.com/vercel/next.js/releases )
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js )
- [Commits](https://github.com/vercel/next.js/compare/v15.0.3...v15.1.3 )
---
updated-dependencies:
- dependency-name: next
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-01 17:41:46 +00:00
Badr B.
b04fc2912b
Merge pull request #48 from learnhouse/dependabot/npm_and_yarn/vercel/analytics-1.4.1
...
build(deps): bump @vercel/analytics from 1.3.2 to 1.4.1
2024-12-01 20:10:20 +01:00
Badr B.
e3690a54be
Merge pull request #45 from learnhouse/dependabot/npm_and_yarn/types/node-22.10.1
...
build(deps-dev): bump @types/node from 22.8.6 to 22.10.1
2024-12-01 20:10:12 +01:00
dependabot[bot]
0ea756dc39
build(deps-dev): bump @types/node from 22.8.6 to 22.10.1
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 22.8.6 to 22.10.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-01 19:09:47 +00:00
dependabot[bot]
db6eb36efd
build(deps): bump @vercel/analytics from 1.3.2 to 1.4.1
...
Bumps [@vercel/analytics](https://github.com/vercel/analytics/tree/HEAD/packages/web ) from 1.3.2 to 1.4.1.
- [Release notes](https://github.com/vercel/analytics/releases )
- [Commits](https://github.com/vercel/analytics/commits/1.4.1/packages/web )
---
updated-dependencies:
- dependency-name: "@vercel/analytics"
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-01 19:09:40 +00:00
Badr B.
030ab8a5af
Merge pull request #46 from learnhouse/dependabot/npm_and_yarn/react-aria/ssr-3.9.7
...
build(deps): bump @react-aria/ssr from 3.9.6 to 3.9.7
2024-12-01 20:08:39 +01:00
Badr B.
34fc62b882
Merge pull request #47 from learnhouse/dependabot/npm_and_yarn/typescript-5.7.2
...
build(deps-dev): bump typescript from 5.6.3 to 5.7.2
2024-12-01 20:08:28 +01:00
Badr B.
956d1ea420
Merge pull request #49 from learnhouse/dependabot/npm_and_yarn/next-15.0.3
...
build(deps): bump next from 15.0.2 to 15.0.3
2024-12-01 20:08:17 +01:00
dependabot[bot]
7178f207b8
build(deps): bump next from 15.0.2 to 15.0.3
...
Bumps [next](https://github.com/vercel/next.js ) from 15.0.2 to 15.0.3.
- [Release notes](https://github.com/vercel/next.js/releases )
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js )
- [Commits](https://github.com/vercel/next.js/compare/v15.0.2...v15.0.3 )
---
updated-dependencies:
- dependency-name: next
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-01 18:01:07 +00:00
dependabot[bot]
79ef311748
build(deps-dev): bump typescript from 5.6.3 to 5.7.2
...
Bumps [typescript](https://github.com/microsoft/TypeScript ) from 5.6.3 to 5.7.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases )
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml )
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.6.3...v5.7.2 )
---
updated-dependencies:
- dependency-name: typescript
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-01 18:00:31 +00:00
dependabot[bot]
4f8e8163e7
build(deps): bump @react-aria/ssr from 3.9.6 to 3.9.7
...
Bumps [@react-aria/ssr](https://github.com/adobe/react-spectrum ) from 3.9.6 to 3.9.7.
- [Release notes](https://github.com/adobe/react-spectrum/releases )
- [Commits](https://github.com/adobe/react-spectrum/compare/@react-aria/ssr@3.9.6...@react-aria/ssr@3.9.7 )
---
updated-dependencies:
- dependency-name: "@react-aria/ssr"
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-01 18:00:15 +00:00
Badr B.
1f974731e8
Merge pull request #43 from learnhouse/dependabot/npm_and_yarn/types/node-22.8.6
...
build(deps-dev): bump @types/node from 22.7.4 to 22.8.6
2024-11-01 20:15:36 +01:00
dependabot[bot]
add911333b
build(deps-dev): bump @types/node from 22.7.4 to 22.8.6
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 22.7.4 to 22.8.6.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-01 19:15:25 +00:00
Badr B.
196dc626db
Merge pull request #42 from learnhouse/dependabot/npm_and_yarn/next-15.0.2
...
build(deps): bump next from 14.2.7 to 15.0.2
2024-11-01 20:14:37 +01:00
Badr B.
f1fd1caee8
Merge pull request #41 from learnhouse/dependabot/npm_and_yarn/typescript-5.6.3
...
build(deps-dev): bump typescript from 5.6.2 to 5.6.3
2024-11-01 20:14:29 +01:00
dependabot[bot]
5549ff20e1
build(deps-dev): bump typescript from 5.6.2 to 5.6.3
...
Bumps [typescript](https://github.com/microsoft/TypeScript ) from 5.6.2 to 5.6.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases )
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml )
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.6.2...v5.6.3 )
---
updated-dependencies:
- dependency-name: typescript
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-01 19:14:16 +00:00
dependabot[bot]
99d01a8315
build(deps): bump next from 14.2.7 to 15.0.2
...
Bumps [next](https://github.com/vercel/next.js ) from 14.2.7 to 15.0.2.
- [Release notes](https://github.com/vercel/next.js/releases )
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js )
- [Commits](https://github.com/vercel/next.js/compare/v14.2.7...v15.0.2 )
---
updated-dependencies:
- dependency-name: next
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-01 19:13:45 +00:00
Badr B.
6f626d5c68
Merge pull request #40 from learnhouse/dependabot/npm_and_yarn/vercel/analytics-1.3.2
...
build(deps): bump @vercel/analytics from 1.3.1 to 1.3.2
2024-11-01 20:12:45 +01:00
dependabot[bot]
ceeeddc47a
build(deps): bump @vercel/analytics from 1.3.1 to 1.3.2
...
Bumps [@vercel/analytics](https://github.com/vercel/analytics/tree/HEAD/packages/web ) from 1.3.1 to 1.3.2.
- [Release notes](https://github.com/vercel/analytics/releases )
- [Commits](https://github.com/vercel/analytics/commits/1.3.2/packages/web )
---
updated-dependencies:
- dependency-name: "@vercel/analytics"
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-01 17:41:35 +00:00
swve
43fbe9f7f0
chore: upgrade packages
2024-10-23 20:36:42 +02:00
Badr B.
5a0a7072e3
Merge pull request #38 from chrishollandaise/chore/update-dev-docs
...
chore: container disclaimer, add missing env for smooth setup
2024-10-14 23:59:15 +02:00