Commit Graph
3 Commits
Author SHA1 Message Date
Claude CodeandClaude Sonnet 5.5 08fbbf3595 fix(deps): next 16.3.4 -> 16.3.6 (CRITICAL GHSA-vcvr-r3jv-pc5j, next/og RCE)
CI (SIAX Cloud) / integration (push) Skipped
CI (SIAX Cloud) / sonar (push) Skipped
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 6s
masterplan-lock / check (pull_request) Successful in 6s
CI (SIAX Cloud) / security (push) Successful in 16s
CI (SIAX Cloud) / security (pull_request) Successful in 17s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 19s
Security Scan (SIAX Cloud) / security (push) Successful in 20s
CI (SIAX Cloud) / integration (pull_request) Successful in 1m2s
CI (SIAX Cloud) / quality (push) Successful in 1m14s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m21s
Same-minor bump of the exact-pinned direct dependency next (16.3.4 and 16.3.5
are affected by the remote code execution in next/og ImageResponse; fixed in
16.3.6, published 2026-09-22).

  package.json     next 16.3.4 -> 16.3.6 (exact pin)
  pnpm-lock.yaml   next + @next/env + 8 @next/swc-* platform packages -> 16.3.6,
                   baseline-browser-mapping 2.11.21 -> 2.11.23 (next's own dep)
  package-lock.json  next + @next/env + 8 @next/swc-* -> 16.3.6 (targeted edit;
                   this legacy lockfile is already out of sync with package.json
                   and npm cannot regenerate it because of the workspace:*
                   protocol, so only the next entries were touched)

No other dependency changed. pnpm install --frozen-lockfile, typecheck,
check:contrast, vitest (1154 passed / 184 skipped), next build and eslint
(0 errors) all pass on Node 22.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-09-30 17:45:23 +02:00
admin 422380d0ed test(BTI): DAT-04/05 dataset version acceptance tests
CI (SIAX Cloud) / integration (push) Has been skipped
masterplan-lock / check (push) Successful in 10s
Security Scan (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / quality (push) Successful in 55s
masterplan-lock / check (pull_request) Successful in 6s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 14s
CI (SIAX Cloud) / security (pull_request) Successful in 21s
CI (SIAX Cloud) / quality (pull_request) Successful in 39s
CI (SIAX Cloud) / integration (pull_request) Successful in 44s
- DAT-05-A1: monotonic versions, immutability
- DAT-04-A2: estimated schema_version in manifest
- 1054 tests green
2026-09-18 01:41:55 +02:00
siax-ci fcfd6bca1e M0: DES1GN-distribution — @siax/ui 0.4.1 + @siax/config + kanonisk import-kedja
masterplan-lock / check (push) Successful in 4s
CI (SIAX Cloud) / quality (push) Failing after 8s
CI (SIAX Cloud) / integration (push) Failing after 8s
CI (SIAX Cloud) / security (push) Successful in 15s
Security Scan (SIAX Cloud) / security (push) Successful in 31s
masterplan-lock / check (pull_request) Successful in 4s
CI (SIAX Cloud) / quality (pull_request) Failing after 8s
CI (SIAX Cloud) / integration (pull_request) Failing after 9s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 13s
CI (SIAX Cloud) / security (pull_request) Successful in 31s
Token-VÄRDEN ägs av @siax/ui; token→Tailwind-mappningen ägs av @siax/config.
Ingen in-repo token-kopia (M0-kontraktet). Bygg-CSS verifierad: SIAX-purple
(#5326cc = oklch 0.45) + Inter + text-accent utility genererad.
2026-09-15 12:51:47 +02:00