Skip to content

[build] resolve website dependency updates and security audit failures #35

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
yyods merged 10 commits into from
Oct 31, 2026
Merged

[build] resolve website dependency updates and security audit failures #35

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
6ac8bd5
Bump next from 16.3.4 to 16.4.0 in /tools/web
dependabot[bot] Oct 8, 2026
4312aaf
Bump undici from 7.29.0 to 7.30.0 in /tools/web
dependabot[bot] Oct 5, 2026
e596b56
Bump source-map-js from 1.2.1 to 1.2.2 in /tools/web
dependabot[bot] Oct 18, 2026
7a11eae
Bump vite from 8.1.5 to 8.3.5 in /tools/web
dependabot[bot] Oct 24, 2026
15cddba
Bump @vitest/mocker and vitest in /tools/web
dependabot[bot] Oct 26, 2026
12b102c
[build] align Vite dependency snapshot and website notices
yyods Oct 31, 2026
125d445
[build] align Vitest security assertions with patched packages
yyods Oct 31, 2026
bb2c912
[build] patch shared website dependency security findings
yyods Oct 31, 2026
5d97887
[build] align patched Next toolchain and reviewed license records
yyods Oct 31, 2026
b511df0
[build] record audited dependency updates and refreshed notices
yyods Oct 31, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -77,6 +77,10 @@ and submission packet do not claim Play submission, approval, or rollout.

### Website and repository source

- Updated the website dependency set to Next.js 16.4.3, Vite 8.3.5 and
Vitest 4.1.12, with patched Sharp, Undici, source-map-js and supporting
dependencies. Refreshed the reviewed license notices and dependency
regression assertions while retaining the high/critical audit gate.
- Prepared Google Play open-testing listing text, reviewer hardware setup,
tester instructions, data-use assessment, and reproducible store artwork
with authentic screenshot provenance. Store availability remains a separate
Expand Down
Loading
Loading