From d37b38ea93bbc7f860b32f5134f57fe16dc21b9b Mon Sep 17 00:00:00 2001 From: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com> Date: Sun, 3 Aug 2025 16:55:48 +0700 Subject: [PATCH 1/3] Add .circleci/config.yml --- .circleci/config.yml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 .circleci/config.yml diff --git a/.circleci/config.yml b/.circleci/config.yml new file mode 100644 index 0000000..6229170 --- /dev/null +++ b/.circleci/config.yml @@ -0,0 +1,31 @@ +# Use the latest 2.1 version of CircleCI pipeline process engine. +# See: https://circleci.com/docs/configuration-reference +version: 2.1 + +# Define a job to be invoked later in a workflow. +# See: https://circleci.com/docs/jobs-steps/#jobs-overview & https://circleci.com/docs/configuration-reference/#jobs +jobs: + say-hello: + # Specify the execution environment. You can specify an image from Docker Hub or use one of our convenience images from CircleCI's Developer Hub. + # See: https://circleci.com/docs/executor-intro/ & https://circleci.com/docs/configuration-reference/#executor-job + docker: + # Specify the version you desire here + # See: https://circleci.com/developer/images/image/cimg/base + - image: cimg/base:current + + # Add steps to the job + # See: https://circleci.com/docs/jobs-steps/#steps-overview & https://circleci.com/docs/configuration-reference/#steps + steps: + # Checkout the code as the first step. + - checkout + - run: + name: "Say hello" + command: "echo Hello, World!" + +# Orchestrate jobs using workflows +# See: https://circleci.com/docs/workflows/ & https://circleci.com/docs/configuration-reference/#workflows +workflows: + say-hello-workflow: # This is the name of the workflow, feel free to change it to better match your workflow. + # Inside the workflow, you define the jobs you want to run. + jobs: + - say-hello \ No newline at end of file From 1eb76b7919ba8b98fb866868e2f75f238eaa3e63 Mon Sep 17 00:00:00 2001 From: Vercel Date: Mon, 12 Jan 2026 00:59:38 +0000 Subject: [PATCH 2/3] Fix React Server Components CVE vulnerabilities Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- package-lock.json | 16 ++++++++-------- package.json | 2 +- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/package-lock.json b/package-lock.json index 75509df..c3a087c 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "@hookform/resolvers": "5.1.1", "@nosecone/next": "1.0.0-beta.9", "@oddbird/css-anchor-positioning": "0.6.1", - "next": "15.3.5", + "next": "15.3.8", "next-auth": "5.0.0-beta.29", "next-themes": "0.4.6", "react": "19.1.0", @@ -769,9 +769,9 @@ } }, "node_modules/@next/env": { - "version": "15.3.5", - "resolved": "https://registry.npmjs.org/@next/env/-/env-15.3.5.tgz", - "integrity": "sha512-7g06v8BUVtN2njAX/r8gheoVffhiKFVt4nx74Tt6G4Hqw9HCLYQVx/GkH2qHvPtAHZaUNZ0VXAa0pQP6v1wk7g==", + "version": "15.3.8", + "resolved": "https://registry.npmjs.org/@next/env/-/env-15.3.8.tgz", + "integrity": "sha512-SAfHg0g91MQVMPioeFeDjE+8UPF3j3BvHjs8ZKJAUz1BG7eMPvfCKOAgNWJ6s1MLNeP6O2InKQRTNblxPWuq+Q==", "license": "MIT" }, "node_modules/@next/swc-darwin-arm64": { @@ -1611,12 +1611,12 @@ } }, "node_modules/next": { - "version": "15.3.5", - "resolved": "https://registry.npmjs.org/next/-/next-15.3.5.tgz", - "integrity": "sha512-RkazLBMMDJSJ4XZQ81kolSpwiCt907l0xcgcpF4xC2Vml6QVcPNXW0NQRwQ80FFtSn7UM52XN0anaw8TEJXaiw==", + "version": "15.3.8", + "resolved": "https://registry.npmjs.org/next/-/next-15.3.8.tgz", + "integrity": "sha512-L+4c5Hlr84fuaNADZbB9+ceRX9/CzwxJ+obXIGHupboB/Q1OLbSUapFs4bO8hnS/E6zV/JDX7sG1QpKVR2bguA==", "license": "MIT", "dependencies": { - "@next/env": "15.3.5", + "@next/env": "15.3.8", "@swc/counter": "0.1.3", "@swc/helpers": "0.5.15", "busboy": "1.6.0", diff --git a/package.json b/package.json index 2374abb..f459ac3 100644 --- a/package.json +++ b/package.json @@ -36,7 +36,7 @@ "@hookform/resolvers": "5.1.1", "@nosecone/next": "1.0.0-beta.9", "@oddbird/css-anchor-positioning": "0.6.1", - "next": "15.3.5", + "next": "15.3.8", "next-auth": "5.0.0-beta.29", "next-themes": "0.4.6", "react": "19.1.0", From 1baa154790a8232b80d4cdded3a2219d5cd95adc Mon Sep 17 00:00:00 2001 From: Dargon789 <64915515+Dargon789@users.noreply.github.com> Date: Mon, 19 Jan 2026 10:44:05 +0000 Subject: [PATCH 3/3] Revert "Fix React Server Components CVE vulnerabilities" --- package-lock.json | 16 ++++++++-------- package.json | 2 +- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/package-lock.json b/package-lock.json index c3a087c..75509df 100644 --- a/package-lock.json +++ b/package-lock.json @@ -16,7 +16,7 @@ "@hookform/resolvers": "5.1.1", "@nosecone/next": "1.0.0-beta.9", "@oddbird/css-anchor-positioning": "0.6.1", - "next": "15.3.8", + "next": "15.3.5", "next-auth": "5.0.0-beta.29", "next-themes": "0.4.6", "react": "19.1.0", @@ -769,9 +769,9 @@ } }, "node_modules/@next/env": { - "version": "15.3.8", - "resolved": "https://registry.npmjs.org/@next/env/-/env-15.3.8.tgz", - "integrity": "sha512-SAfHg0g91MQVMPioeFeDjE+8UPF3j3BvHjs8ZKJAUz1BG7eMPvfCKOAgNWJ6s1MLNeP6O2InKQRTNblxPWuq+Q==", + "version": "15.3.5", + "resolved": "https://registry.npmjs.org/@next/env/-/env-15.3.5.tgz", + "integrity": "sha512-7g06v8BUVtN2njAX/r8gheoVffhiKFVt4nx74Tt6G4Hqw9HCLYQVx/GkH2qHvPtAHZaUNZ0VXAa0pQP6v1wk7g==", "license": "MIT" }, "node_modules/@next/swc-darwin-arm64": { @@ -1611,12 +1611,12 @@ } }, "node_modules/next": { - "version": "15.3.8", - "resolved": "https://registry.npmjs.org/next/-/next-15.3.8.tgz", - "integrity": "sha512-L+4c5Hlr84fuaNADZbB9+ceRX9/CzwxJ+obXIGHupboB/Q1OLbSUapFs4bO8hnS/E6zV/JDX7sG1QpKVR2bguA==", + "version": "15.3.5", + "resolved": "https://registry.npmjs.org/next/-/next-15.3.5.tgz", + "integrity": "sha512-RkazLBMMDJSJ4XZQ81kolSpwiCt907l0xcgcpF4xC2Vml6QVcPNXW0NQRwQ80FFtSn7UM52XN0anaw8TEJXaiw==", "license": "MIT", "dependencies": { - "@next/env": "15.3.8", + "@next/env": "15.3.5", "@swc/counter": "0.1.3", "@swc/helpers": "0.5.15", "busboy": "1.6.0", diff --git a/package.json b/package.json index f459ac3..2374abb 100644 --- a/package.json +++ b/package.json @@ -36,7 +36,7 @@ "@hookform/resolvers": "5.1.1", "@nosecone/next": "1.0.0-beta.9", "@oddbird/css-anchor-positioning": "0.6.1", - "next": "15.3.8", + "next": "15.3.5", "next-auth": "5.0.0-beta.29", "next-themes": "0.4.6", "react": "19.1.0",