Skip to content

chore(deps): bump the npm_and_yarn group across 2 directories with 1 update#1

Open
dependabot[bot] wants to merge 56 commits into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-cb2c474ead
Open

chore(deps): bump the npm_and_yarn group across 2 directories with 1 update#1
dependabot[bot] wants to merge 56 commits into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-cb2c474ead

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Jan 1, 2026

Bumps the npm_and_yarn group with 1 update in the / directory: qs.
Bumps the npm_and_yarn group with 1 update in the /functions directory: qs.

Updates qs from 6.14.0 to 6.14.1

Changelog

Sourced from qs's changelog.

6.14.1

  • [Fix] ensure arrayLength applies to [] notation as well
  • [Fix] parse: when a custom decoder returns null for a key, ignore that key
  • [Refactor] parse: extract key segment splitting helper
  • [meta] add threat model
  • [actions] add workflow permissions
  • [Tests] stringify: increase coverage
  • [Dev Deps] update eslint, @ljharb/eslint-config, npmignore, es-value-fixtures, for-each, object-inspect
Commits
  • 3fa11a5 v6.14.1
  • a626704 [Dev Deps] update npmignore
  • 3086902 [Fix] ensure arrayLength applies to [] notation as well
  • fc7930e [Dev Deps] update eslint, @ljharb/eslint-config
  • 0b06aac [Dev Deps] update @ljharb/eslint-config
  • 64951f6 [Refactor] parse: extract key segment splitting helper
  • e1bd259 [Dev Deps] update @ljharb/eslint-config
  • f4b3d39 [eslint] add eslint 9 optional peer dep
  • 6e94d95 [Dev Deps] update eslint, @ljharb/eslint-config, npmignore
  • 973dc3c [actions] add workflow permissions
  • Additional commits viewable in compare view

Updates qs from 6.14.0 to 6.14.1

Changelog

Sourced from qs's changelog.

6.14.1

  • [Fix] ensure arrayLength applies to [] notation as well
  • [Fix] parse: when a custom decoder returns null for a key, ignore that key
  • [Refactor] parse: extract key segment splitting helper
  • [meta] add threat model
  • [actions] add workflow permissions
  • [Tests] stringify: increase coverage
  • [Dev Deps] update eslint, @ljharb/eslint-config, npmignore, es-value-fixtures, for-each, object-inspect
Commits
  • 3fa11a5 v6.14.1
  • a626704 [Dev Deps] update npmignore
  • 3086902 [Fix] ensure arrayLength applies to [] notation as well
  • fc7930e [Dev Deps] update eslint, @ljharb/eslint-config
  • 0b06aac [Dev Deps] update @ljharb/eslint-config
  • 64951f6 [Refactor] parse: extract key segment splitting helper
  • e1bd259 [Dev Deps] update @ljharb/eslint-config
  • f4b3d39 [eslint] add eslint 9 optional peer dep
  • 6e94d95 [Dev Deps] update eslint, @ljharb/eslint-config, npmignore
  • 973dc3c [actions] add workflow permissions
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

KunanonJ and others added 30 commits December 18, 2025 19:40
- Created detailed README with API documentation
- Added MongoDB Atlas integration (replacing Supabase)
- Added environment variable templates
- Added Atlas Search configuration
- Migrated 379K products to MongoDB
KunanonJ and others added 21 commits December 28, 2025 23:45
Added user strict verification in redirect.ts. Updated searchProducts to return wrapped links. Added invalidations for cache. Added MongoDB indexes script. Added GPT configuration docs.
- Updated agent_instructions.md to direct users to create accounts at https://app.gogocash.co
- Changed authentication flow from session tokens to email-based linking
- Simplified OpenAPI spec to focus on user_email parameter
- Improved user experience by removing complex token management
- Remove invalid eslint config from next.config.ts (no longer supported in Next.js 16)
- Fix missing mock-merchants import in getGifts API route
- Add proper null checking for INVOLVE_API_SECRET environment variable
- Ensure all TypeScript errors are resolved for successful CI/CD builds
- Add CORS headers to all API endpoints (searchProducts, userProfile, userCashback)
- Enable OPTIONS method for preflight requests
- Allow cross-origin requests from ChatGPT Custom GPT
- Update ChatGPT integration documentation with new account linking flow
- Ensure all API responses include proper CORS headers for external access
🚀 Deployment Fixes:
- Update OpenAPI schema to use correct Vercel URL instead of Firebase
- Add proper vercel.json configuration for Next.js deployment
- Fix architecture mismatch (MongoDB vs Firestore)

🔍 Enhanced Search Quality:
- Implement intelligent search query processing with synonym expansion
- Add price filtering support (e.g., 'under ')
- Remove stop words for better product matching
- Add relevance scoring with MongoDB aggregation pipeline
- Implement fallback search strategies for better results
- Generate contextual mock products when database unavailable

💡 Key Features:
- Smart query enhancement (earphone → earphones, headphones, earbuds)
- Price-aware search with currency conversion
- Relevance scoring based on ratings, sales, and title matching
- Graceful fallbacks for robust user experience
- CORS-enabled APIs for ChatGPT integration

This addresses the user feedback about improving search quality and ensuring users can find relevant products with proper affiliate link tracking.
🔥 Firebase Integration:
- Revert to Firebase Firestore as primary database
- Update OpenAPI schema to use gogocash-acp.web.app (Firebase Hosting)
- Enhanced Firestore search with multiple keyword support and price filtering
- Remove Vercel configuration in favor of Firebase deployment

�� Enhanced Search Features:
- Smart query processing with synonym expansion (earphone → headphones, earbuds)
- Price-aware filtering with USD to THB conversion
- Multiple search strategies with fallback mechanisms
- Contextual mock products when database unavailable
- Improved relevance scoring and result ranking

📚 Updated Documentation:
- AGENTS.md now reflects Firebase/Firestore architecture
- Clear deployment instructions for Firebase hosting
- Updated tech stack documentation

This addresses user feedback to use Firebase as infrastructure while maintaining enhanced search capabilities for better product discovery and affiliate link tracking.
🔧 Debugging Firebase API Issues:
- Create simplified /api/searchProducts route with mock data
- Add /api/test endpoint for basic API functionality testing
- Include proper CORS headers for ChatGPT integration
- Remove complex Firestore dependencies temporarily for testing

🚀 Firebase Functions Setup:
- Add Firebase Functions configuration as fallback
- Include proper CORS handling in all API routes
- Simplified error handling and logging

This will help identify if the 403 errors are due to:
1. Firebase deployment configuration issues
2. Complex API route dependencies
3. CORS/authentication problems

After deployment, test with: curl https://gogocash-acp.web.app/api/test
🔥 Firebase Functions Implementation:
- Create dedicated Firebase Functions for all API endpoints
- Add proper CORS headers for ChatGPT integration
- Implement searchProducts, getUserProfile, getUserCashback functions
- Include mock data for immediate testing

📡 Updated API Configuration:
- Update OpenAPI schema to use Firebase Functions URLs
- Change server URL to asia-southeast1-gogocash-acp.cloudfunctions.net
- Remove /api/ prefix from endpoint paths
- Proper TypeScript configuration for Functions

🚀 Deployment Strategy:
- Use Firebase Functions instead of Next.js API routes
- Bypass 403 Forbidden issues with direct function deployment
- Maintain same API interface for ChatGPT compatibility

This resolves the 403 Forbidden errors by using Firebase Functions directly instead of relying on Next.js API route hosting.
- Add skipLibCheck to tsconfig.json to resolve Google Cloud Storage type conflicts
- Enable esModuleInterop and allowSyntheticDefaultImports for better compatibility
- Functions now build successfully without TypeScript errors

Ready for Firebase deployment with: firebase deploy
🔧 Runtime Upgrade:
- Update Node.js runtime from 18 to 20 (18 was decommissioned)
- Upgrade firebase-functions to v6.0.0 with v2 API
- Upgrade firebase-admin to v13.0.0
- Update TypeScript to v5.0.0

🚀 API Migration:
- Migrate from firebase-functions v1 to v2 API
- Use onRequest from firebase-functions/v2/https
- Maintain same functionality with updated API structure
- All functions now compatible with latest Firebase runtime

Ready for deployment with: firebase deploy
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 1, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented Jan 1, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Review Updated (UTC)
gogocash-acp Ready Ready Preview, Comment Jan 1, 2026 9:55am

KunanonJ and others added 2 commits January 1, 2026 16:53
…update

Bumps the npm_and_yarn group with 1 update in the / directory: [qs](https://github.com/ljharb/qs).
Bumps the npm_and_yarn group with 1 update in the /functions directory: [qs](https://github.com/ljharb/qs).


Updates `qs` from 6.14.0 to 6.14.1
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.14.0...v6.14.1)

Updates `qs` from 6.14.0 to 6.14.1
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.14.0...v6.14.1)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.14.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant