[Snyk] Security upgrade next from 14.2.35 to 15.5.10 - #90

Closed

catomean wants to merge 405 commits into

mainfrom

snyk-fix-d9b67b985fef3de165ded7fe0d57ec8b

This pull request is big! We're only showing the most recent 250 commits

Commits on Feb 15, 2025

fix: add proper type imports for MouseEvent

devin-ai-integration[bot]
and
catomean
committed
c97372a
fix: use correct React.MouseEvent type

devin-ai-integration[bot]
and
catomean
committed
bfdc2db
chore: remove Netlify configuration and migrate to Next.js API routes

devin-ai-integration[bot]
and
catomean
committed
e8c3d4f
fix: use correct MouseEvent type for click outside handler

devin-ai-integration[bot]
and
catomean
committed
3972d4c
fix: use proper React event types

devin-ai-integration[bot]
and
catomean
committed
baf624e
fix: update TypeScript configuration and React types

devin-ai-integration[bot]
and
catomean
committed
4bf2a8e
chore: update package-lock.json

devin-ai-integration[bot]
and
catomean
committed
9ac362a
fix: simplify React type imports

devin-ai-integration[bot]
and
catomean
committed
14beaa0
chore: remove remaining Netlify references

devin-ai-integration[bot]
and
catomean
committed
81c2da0
fix: use absolute import path for ConsultationForm

devin-ai-integration[bot]
and
catomean
committed
e8aa20e
fix: remove client directive from page component

devin-ai-integration[bot]
and
catomean
committed
389f815
fix: use dynamic import for client component

devin-ai-integration[bot]
and
catomean
committed
2b9d061
fix: remove static export to support API routes

devin-ai-integration[bot]
and
catomean
committed
d2271db
fix: improve build-time API validation handling

devin-ai-integration[bot]
and
catomean
committed
3df8b1e
fix: improve client/server boundary handling in MDX setup

devin-ai-integration[bot]
and
catomean
committed
10fb462
fix: resolve circular dependency in MDX setup

devin-ai-integration[bot]
and
catomean
committed
019d14e
fix: use dynamic imports for layout components

devin-ai-integration[bot]
and
catomean
committed
6a2fecb
fix: split mobile menu into separate client component

devin-ai-integration[bot]
and
catomean
committed
1758a3e
fix: use absolute import path for MobileMenu

devin-ai-integration[bot]
and
catomean
committed
f72cc91
fix: resolve React fragment TypeScript errors

devin-ai-integration[bot]
and
catomean
committed
22a8d95
fix: remove duplicate mobile menu code

devin-ai-integration[bot]
and
catomean
committed
9c51ed5
fix: simplify component imports to resolve infinite loop

devin-ai-integration[bot]
and
catomean
committed
1b53c59
fix: split menu button into separate client component

devin-ai-integration[bot]
and
catomean
committed
b2734a1
fix: resolve TypeScript errors in MobileMenu component

devin-ai-integration[bot]
and
catomean
committed
5f44127
fix: make MobileMenu a server component

devin-ai-integration[bot]
and
catomean
committed
357ac5a
fix: improve type handling in menu components

devin-ai-integration[bot]
and
catomean
committed
b1a7c8a
fix: handle menu visibility in client component

devin-ai-integration[bot]
and
catomean
committed
6590437
fix: improve state management in menu components

devin-ai-integration[bot]
and
catomean
committed
5c873c8
fix: resolve circular dependencies in component imports

devin-ai-integration[bot]
and
catomean
committed
b3c386b
fix: improve dynamic import loading state

devin-ai-integration[bot]
and
catomean
committed
6aa0258
fix: improve component loading states

devin-ai-integration[bot]
and
catomean
committed
17e4d7c
fix: improve loading states and SSR configuration

devin-ai-integration[bot]
and
catomean
committed
afc4754
fix: add navigation file and update MDX provider setup

devin-ai-integration[bot]
and
catomean
committed
3ed38d3
fix: configure Next.js for MDX support

devin-ai-integration[bot]
and
catomean
committed
4068df9
fix: add MDX plugin options to Next.js config

devin-ai-integration[bot]
and
catomean
committed
ca0939b
fix: update MDX configuration with provider import source

devin-ai-integration[bot]
and
catomean
committed
ccb2083
fix: enable experimental MDX support in Next.js config

devin-ai-integration[bot]
and
catomean
committed
93d8187
fix: remove duplicate use client directive in MDX provider

devin-ai-integration[bot]
and
catomean
committed
1f76145
fix: update MDX provider exports and component configuration

devin-ai-integration[bot]
and
catomean
committed
5c10997
fix: update MDX provider exports and component boundaries

devin-ai-integration[bot]
and
catomean
committed
ff22222
fix: update MDX provider exports to use default export

devin-ai-integration[bot]
and
catomean
committed
2ad5654
fix: add proper MDX component types

devin-ai-integration[bot]
and
catomean
committed
785db6e
fix: update MDX provider and layout component boundaries

devin-ai-integration[bot]
and
catomean
committed
8c62548
fix: update MDX provider to use named exports

devin-ai-integration[bot]
and
catomean
committed
4c7ded1
fix: resolve MDX provider export conflicts

devin-ai-integration[bot]
and
catomean
committed
e51f3ab
fix: update MDX configuration and imports

devin-ai-integration[bot]
and
catomean
committed
1df6623
fix: remove redundant [slug] route handler

devin-ai-integration[bot]
and
catomean
committed
f5ed60b
fix: update next.config.js with proper MDX configuration

devin-ai-integration[bot]
and
catomean
committed
435b749
fix: update blog layout to use server component with dynamic MDX content

devin-ai-integration[bot]
and
catomean
committed
05670ee
fix: add proper types to dynamic MDX content import

devin-ai-integration[bot]
and
catomean
committed
06a06ea
fix: update MDX provider to use default export with MDXContent

devin-ai-integration[bot]
and
catomean
committed
e3a0bd3
fix: add proper type assertion for dynamic MDX content

devin-ai-integration[bot]
and
catomean
committed
fda3c4e
fix: simplify MDX provider setup by moving it to layout

devin-ai-integration[bot]
and
catomean
committed
0f74c6a
fix: update MDX configuration for proper context creation

devin-ai-integration[bot]
and
catomean
committed
cfa4507
fix: restore withMDX configuration for proper MDX file handling

devin-ai-integration[bot]
and
catomean
committed
9f0c023
fix: simplify MDX configuration and remove experimental flag

devin-ai-integration[bot]
and
catomean
committed
a7b3139
fix: simplify MDX setup and ensure proper client component boundaries

devin-ai-integration[bot]
and
catomean
committed
bb3ca35
fix: update MDX configuration with proper loader setup

devin-ai-integration[bot]
and
catomean
committed
80045f7
chore: update package-lock.json

devin-ai-integration[bot]
and
catomean
committed
1f34bdd
fix: add export output configuration for static deployment

devin-ai-integration[bot]
and
catomean
committed
c7fdf37
fix: remove static export to support API routes

devin-ai-integration[bot]
and
catomean
committed
cf1fdf2
fix: configure Next.js for standalone output with API support

devin-ai-integration[bot]
and
catomean
committed
b63746b
fix: simplify Next.js config for standalone output

devin-ai-integration[bot]
and
catomean
committed
f6ef973
fix: update Link href type in blog page

devin-ai-integration[bot]
and
catomean
committed
62e6ebe
fix: revert Link href to use template literal

devin-ai-integration[bot]
and
catomean
committed
a5120a0
fix: update Link href types across all components

devin-ai-integration[bot]
and
catomean
committed
78bee12
fix: improve MongoDB connection handling for serverless environment

devin-ai-integration[bot]
and
catomean
committed
9321f70

Commits on Feb 16, 2025

chore: trigger vercel rebuild

devin-ai-integration[bot]
and
catomean
committed
7b6bf9d
fix: optimize MongoDB connection for serverless and add health check

devin-ai-integration[bot]
and
catomean
committed
12a6939
fix: update MongoDB connection options with correct types

devin-ai-integration[bot]
and
catomean
committed
181903d
fix: update Next.js config to generate proper routes manifest

devin-ai-integration[bot]
and
catomean
committed
c917683
fix: expose MongoDB URI to runtime and enable server actions

devin-ai-integration[bot]
and
catomean
committed
0dcf67b
fix: add API route rewrites to Next.js config

devin-ai-integration[bot]
and
catomean
committed
3d0bed7
fix: update Next.js config for proper API route handling

devin-ai-integration[bot]
and
catomean
committed
a0187dc
fix: simplify Next.js config for Vercel deployment

devin-ai-integration[bot]
and
catomean
committed
3b5c65a
fix: update Next.js output config for serverless deployment

devin-ai-integration[bot]
and
catomean
committed
ea8927d
fix: update Next.js config and remove redundant server actions flag

devin-ai-integration[bot]
and
catomean
committed
efe3f80
fix: update Next.js config with proper route handling settings

devin-ai-integration[bot]
and
catomean
committed
f1ac206
fix: revert to export output for static site generation

devin-ai-integration[bot]
and
catomean
committed
01ead8a
fix: simplify Next.js config and use standalone output

devin-ai-integration[bot]
and
catomean
committed
f276dd3
fix: update dynamic route handling in blog and bots pages

devin-ai-integration[bot]
and
catomean
committed
5a33ef7
fix: simplify Link hrefs in mobile menu for Next.js 14 app router

devin-ai-integration[bot]
and
catomean
committed
0eb4493
fix: add proper type imports for Link hrefs

devin-ai-integration[bot]
and
catomean
committed
00f856d
fix: update Link href types for Next.js 14 app router

devin-ai-integration[bot]
and
catomean
committed
0e2a0ee
fix: update blog page Link hrefs for Next.js 14 app router

devin-ai-integration[bot]
and
catomean
committed
2a1c3c6
fix: add vercel.json with correct build settings

devin-ai-integration[bot]
and
catomean
committed
d1d9ca3
fix: remove outputDirectory from vercel.json to use Next.js defaults

devin-ai-integration[bot]
and
catomean
committed
3e96018
Merge pull request #23 from g-but/devin/1739620743-fix-mobile-menu
catomean
authored
d587530
fix: update click outside handler to target correct mobile menu ID

devin-ai-integration[bot]
and
catomean
committed
79ca757
feat: add deployment timestamp under logo

devin-ai-integration[bot]
and
catomean
committed
6c5b6a5
feat: add build-time deployment timestamp

devin-ai-integration[bot]
and
catomean
committed
ff55d54
feat: add cache control headers to prevent caching

devin-ai-integration[bot]
and
catomean
committed
32a8864
Merge pull request #24 from g-but/devin/1739620743-fix-mobile-menu
catomean
authored
321af26

Commits on Feb 17, 2025

Commits on Feb 28, 2025

Update shopping page with new version
catomean
committed
82e9733
Merge pull request #28 from g-but/update-shopping-page
catomean
authored
e433bfc

Commits on Mar 3, 2025

Commits on Mar 4, 2025

Commits on Mar 5, 2025

Merge pull request #30 from g-but/feature/github-mdx-blog
catomean
authored
3d94632
Add GitHub image domain to next.config.js
catomean
committed
a135732
Enable browser and CDN caching in next.config.js
catomean
committed
43ea367
Fix inline image src resolution in MDXComponents
catomean
committed
c12bd91
Fix TypeScript error in MDXComponents img component
catomean
committed
edeb85b
Fix server-side rendering error and image path resolution
catomean
committed
f4aba7b
Fix TypeScript error with Image component width/height props
catomean
committed
48106e0
Fix server-side rendering issues with blog post images
catomean
committed
bde9208
Fix image loading issues and server-side errors in MDX blog system
catomean
committed
3c67b9e
Fix server-side error and inline image loading issues
catomean
committed
d03cdde
Fix server-side error and inline image loading in blog post
catomean
committed
3cd7e10
Fix MDX blog image loading and Callout components
catomean
committed
516480e
Fix MDX rendering with proper client component structure
catomean
committed
d8741a1
Implement blog enhancements: dynamic post dates and better image slug handling
catomean
committed
dce3d34
Force current date for published posts and improve image slug handling
catomean
committed
06d7bea
Merge pull request #31 from g-but/feature/github-mdx-blog
catomean
authored
97f80b7

Commits on Mar 7, 2025

Commits on Mar 8, 2025

Commits on Mar 11, 2025

Commits on Mar 13, 2025

Commits on Mar 14, 2025

Commits on Mar 19, 2025

Commits on Mar 20, 2025

Clean: Remove new directory structure and restore original governance layout
catomean
committed
e5292cf

Commits on Jun 13, 2025

Commits on Jun 14, 2025

Revamp Lex legal assistant page
catomean
committed
e79c713
Merge pull request #48 from g-but/codex/revamp-lex-page-with-best-practices
catomean
authored
68edfb0

Commits on Jul 2, 2025

refactor: remove legacy navigation and cleanup
catomean
committed
8f433ff
fix: use anchor for external link
catomean
committed
2fc75ae
Merge pull request #81 from g-but/codex/refactor-navigation-and-add-footer
catomean
authored
b8f0423

Commits on Oct 2, 2025

feat: Complete deployment automation and modern design overhaul
Your Name
committed
18d6133

Commits on Jan 7, 2026

chore: fix all security vulnerabilities

catomean
and
claude
committed
abbb8d5
chore: clean up repo structure

catomean
and
claude
committed
dbd11ac
docs: add comprehensive agentic development infrastructure

catomean
and
claude
committed
d95a60f
refactor: major codebase cleanup and consolidation

catomean
and
claude
committed
5b04b49
chore: add Cursor IDE rules for agentic development

catomean
and
claude
committed
b366902

Commits on Jan 11, 2026

feat: add strict ESLint config and fix all lint issues

catomean
and
claude
committed
0fb7a0d
fix: improve test suite reliability and configuration

catomean
and
claude
committed
96b4541
chore: update dependencies to latest stable versions

catomean
and
claude
committed
ae7de97
refactor: centralize bot page configuration and add shared components

catomean
and
claude
committed
c9c2895
fix: resolve blog static generation and MDX rendering issues

catomean
and
claude
committed
260ddab
refactor: add governance shared components and utilities

catomean
and
claude
committed
23c123c
fix: resolve giscus comments navigation error

catomean
and
claude
committed
2d1c7d2
feat: improve bot page navigation with switcher and site menu

catomean
and
claude
committed
1f558d2
refactor: improve navigation architecture and add knowledge center

catomean
and
claude
committed
38d8a4a
refactor: rebuild navigation as modular megamenu system

catomean
and
claude
committed
9a11e50

Commits on Jan 12, 2026

fix: improve megamenu dropdown positioning reliability

catomean
and
claude
committed
8e8032f
feat: implement knowledge center foundation with guides and infrastructure pages

catomean
and
claude
committed
ed80eb6
fix: replace client-side category filter with server-compatible Links

catomean
and
claude
committed
a4d5c92

Commits on Jan 13, 2026

refactor: add BotPageTemplate and fix MDX sanitization

catomean
and
claude
committed
d6d66a9
fix(security): patch glob CLI command injection vulnerability

catomean
and
claude
committed
b2bfff8
refactor: complete bot page deduplication with BotPageTemplate

catomean
and
claude
committed
ab07ee3
refactor: split CitizenProfile into focused sub-components

catomean
and
claude
committed
9bc89ad
refactor: split WorkspaceDashboard into focused sub-components

catomean
and
claude
committed
42ef0ce
refactor: split ExampleSection into focused tab components

catomean
and
claude
committed
1763bce
refactor: deduplicate validation and formatting utilities

catomean
and
claude
committed
98306ba
refactor: consolidate CSS scroll-behavior and remove duplicates

catomean
and
claude
committed
513ae19
test: add unit tests for validation and format utilities

catomean
and
claude
committed
a3c7525

Commits on Jan 14, 2026

feat: add Swiss German RAG demo with keyword-based search

catomean
and
claude
committed
8aae29f
feat: replace Swiss German demo with Botsmann AI Assistant RAG

catomean
and
claude
committed
1d0114c
Migrate database from MongoDB to Supabase

catomean
and
claude
committed
66248d2
Add user authentication and model selection (Phase 2)

catomean
and
claude
committed
90a1597
Add Phase 3: Document upload and RAG chat

catomean
and
claude
committed
d3643d2
Update content for privacy-first RAG platform

catomean
and
claude
committed
7faea5e
feat(chat): add context-only fallback when LLM API key is missing

catomean
and
claude
committed
b0b6354
fix(documents): remove duplicate header showing 'Botsmann' twice

catomean
and
claude
committed
5fb6379
feat(nav): unified navigation with auth controls

catomean
and
claude
committed
f4e31f2
fix(settings): simplify for non-technical users

catomean
and
claude
committed
2b80d1a
fix(homepage): simplify messaging for non-technical users

catomean
and
claude
committed
43e6e1b

Commits on Jan 15, 2026

Commits on Jan 16, 2026

refactor: clean up API routes and components, add shared utilities

catomean
and
claude
committed
458b886
fix: remove frequent warmup cron to comply with Hobby plan limits

catomean
and
claude
committed
4c49c78

Commits on Jan 19, 2026

feat(auth): add rate limiting, email verification, password reset, and user profile

catomean
and
claude
committed
f542d6a
refactor(footer): use SSOT for routes, site config, and Logo component

catomean
and
claude
committed
2dfebb5
fix(research-assistant): remove broken GPT links

catomean
and
claude
committed
4859884
fix(medical-expert): remove unverified GPT link from navigation

catomean
and
claude
committed
702792e

Commits on Jan 20, 2026

feat(professionals): add minimal professional pages with chat demos and scroll fixes

catomean
and
claude
committed
e6fca29
docs: update About page, README, and clean up stale documentation

catomean
and
claude
committed
d0aa9ae
feat: add public document chat demo at /try

catomean
and
claude
committed
ab643b2
fix: add "Try without signing up" option on /documents page

catomean
and
claude
committed
ae40614
feat: add missing platform pages and demo components

catomean
and
claude
committed
c819668
feat: improve UX with skip option, PDF support, and better CTAs

catomean
and
claude
committed
7f607c8
refactor: create shared BotHeroSection component (DRY principle)

catomean
and
claude
committed
6f476f4

Commits on Jan 22, 2026

feat: add user-centric architecture with profiles and domain tagging

catomean
and
claude
committed
9c9aedc

Commits on Jan 23, 2026

refactor: modularize large components and centralize email config

catomean
and
claude
committed
5e395aa
fix: migrate from deprecated @supabase/auth-helpers-nextjs to @supabase/ssr

catomean
and
claude
committed
4960b5f
feat: Migrate waitlist to Supabase and add error boundaries

catomean
and
claude
committed
3e6cf83
chore: Remove obsolete pre-launch waitlist code

catomean
and
claude
committed
4faae52
chore: Remove swiss-german-teacher waitlist and update nav

catomean
and
claude
committed
3466196
feat: add welcoming dashboard empty state for new users

catomean
and
claude
committed
5e10e34
docs(claude): add global standards reference and update date

catomean
and
claude
committed
af88d16
feat: major platform update with API improvements, shared components, and infrastructure

catomean
and
claude
committed
42b98e2
fix: resolve lint warnings and build errors

catomean
and
claude
committed
fce7cdb
fix: add missing @supabase/ssr dependency

catomean
and
claude
committed
4907fc4
fix: resolve test infrastructure issues

catomean
and
claude
committed
ccafaec
feat(llm): add multi-provider support with Ollama priority

catomean
and
claude
committed
92e3593
refactor: extract shared components for CLAUDE.md compliance

catomean
and
claude
committed
f57bd80
refactor: migrate remaining files to shared LoadingSpinner

catomean
and
claude
committed
4e8decb
refactor: consolidate color constants to lib/config/colors.ts (SSOT)

catomean
and
claude
committed
62e1eb5
refactor: extract document status to constants and shared component (SSOT)

catomean
and
claude
committed
67c79e2
refactor: extract dashboard stats to custom hook and use DocumentStatusBadge

catomean
and
claude
committed
55a925b

Commits on Jan 27, 2026

refactor: consolidate accent colors into SSOT config

catomean
and
claude
committed
cd58f52
refactor: comprehensive code quality improvements (DRY, SSOT, SoC)

catomean
and
claude
committed
09ddc70
refactor(legal-expert): remove duplicate workspace components

catomean
and
claude
committed
3c77684

Commits on Jan 28, 2026

refactor: code quality improvements (DRY, SSOT, inline styles)

catomean
and
claude
committed
232d76a
chore: remove dead code files

catomean
and
claude
committed
36b5652
chore: remove unused duplicate components

catomean
and
claude
committed
5e1da5c
refactor: add toDateString utility and DRY date formatting

catomean
and
claude
committed
f887246
fix: add eslint-disable comments for dynamic external images

catomean
and
claude
committed
8bfd490
chore: remove unused hooks and utilities

catomean
and
claude
committed
f195154
refactor: consolidate formatFileSize duplicates to shared formatBytes

catomean
and
claude
committed
22db278
chore: remove orphaned bot navigation components

catomean
and
claude
committed
23cff2b
chore: remove orphaned governance components

catomean
and
claude
committed
b2aa340
chore: remove unused dependencies

catomean
and
claude
committed
cd4ecee
chore: remove empty/orphaned files

catomean
and
claude
committed
4160f98
fix: package.json & package-lock.json to reduce vulnerabilities
snyk-bot
committed
5ac1387