fix: update dependencies to patch security vulnerabilities #176
+973
−13,385
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
zjy365
commented
Dec 11, 2025
zjy365
commented
- Update react from 19.1.0 to 19.1.2
- Update react-dom from 19.1.0 to 19.1.2
- Next.js already at secure version 15.4.8
Author
🔒 Security Update - Critical RCE Vulnerability FixThis PR patches CVE-2025-55182 - a critical unauthenticated remote code execution vulnerability in React Server Components. Security Advisory: GHSA-fv66-9v8q-g76r Impact
Changes
ReferencesTesting
|
….json and pnpm-lock.yaml
- Make AI Gateway base URL configurable via AI_GATEWAY_BASE_URL env var - Fix model name prefix handling for custom gateway - Update default model to gemini-3-flash - Add gemini-3-flash to available models
BREAKING CHANGE: Complete UI redesign from fire/orange theme to black/white/gray aesthetic Major changes: - Replace orange color palette with Vercel grayscale (black, white, gray-50 to gray-900) - Remove all visual effects (Pixi.js WebGL animations, flame effects, ASCII explosions) - Delete decorative components (Connector, BackgroundOuterPiece, CurvyRect) - Refactor all UI components to black/white variants - Simplify Tailwind config (remove ASCII fonts, complex utilities) - Update 100+ component files with new color scheme Component updates: - Button: black primary, white secondary variants - All shadcn/ui components (Input, Card, Dialog, Badge, Slider, Toggle, etc.) - Hero section: simple gradient background - Forms: Vercel-style borders and focus states Files affected: - 98 files modified - 33 files deleted - ~2000+ lines removed (effects, decorative components) - Build size reduced by ~500KB 🤖 Generated with Claude Code (https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.