build(package.json): update deps to patch critical next.js exploit#152
Conversation
also disabled e2e snapshot testing after discovery of GitHub Action Runner env (Linux) diff from new local dev env (MacOS) causing breakage in rendered screenshots
🦋 Changeset detectedLatest commit: d357d66 The changes in this PR will be included in the next version bump. Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
There was a problem hiding this comment.
Pull request overview
This PR aims to update dependencies to patch a critical Next.js security exploit, while also disabling e2e snapshot testing due to environment differences between local macOS development and Linux-based GitHub Action runners.
Key Changes:
- Updated multiple dependencies including Next.js, React, TypeScript, and various AI SDK packages
- Added
verify:litescript that excludes e2e tests and modified pre-commit hook to use it - Disabled automatic e2e test workflow triggers (push, pull_request, and cron), keeping only manual workflow_dispatch
Reviewed changes
Copilot reviewed 6 out of 8 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| pnpm-workspace.yaml | Added '@biomejs/biome' and 'bcrypt' to onlyBuiltDependencies list |
| package.json | Updated 20+ dependency versions, added verify:lite script, updated pnpm package manager version |
| next-env.d.ts | Added reference path to Next.js generated routes types |
| components/snapshots/github-corner.test.tsx.snap | Updated CSS module class name hashes (likely due to dependency updates) |
| .husky/pre-commit | Changed pre-commit hook from 'verify' to 'verify:lite' to skip e2e tests |
| .github/workflows/e2e-test.yaml | Disabled automatic workflow triggers and cron job, added explanatory comments |
| .changeset/sharp-camels-fetch.md | Added changeset entry documenting the dependency update |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Keming He <keminghe.career@gmail.com>
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #152 +/- ##
=======================================
Coverage 12.44% 12.44%
=======================================
Files 103 103
Lines 2210 2210
Branches 108 108
=======================================
Hits 275 275
Misses 1897 1897
Partials 38 38 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
also disabled e2e snapshot testing after discovery of GitHub Action Runner env (Linux) diff from new local dev env (MacOS) causing breakage in rendered screenshots