Dependabot/npm and yarn/frontend/types/node 25.9.1#878

Merged

hman38705 merged 23 commits into

mainfrom

dependabot/npm_and_yarn/frontend/types/node-25.9.1

Jun 17, 2026

Commits on Jun 17, 2026

fix(security): remove unsafe-eval from Content-Security-Policy script-src

hman38705
and
claude
committed
fix(security): remove unsafe-inline from CSP script-src and add strict-dynamic

hman38705
and
claude
committed
feat(security): add upgrade-insecure-requests directive to CSP

hman38705
and
claude
committed
feat(security): add Next.js middleware for per-request nonce-based CSP

hman38705
and
claude
committed
feat(security): wire nonce from middleware into layout inline script

hman38705
and
claude
committed
feat(typescript): enable strict mode to enforce compile-time type safety

hman38705
and
claude
committed
feat(typescript): add noImplicitReturns and noFallthroughCasesInSwitch options

hman38705
and
claude
committed
fix(typescript): use unknown instead of any for caught API error body

hman38705
and
claude
committed
fix(typescript): replace unsafe Error cast with type guard in useAsync hook

hman38705
and
claude
committed
fix(typescript): replace as any locale cast with typed Locale assertion

hman38705
and
claude
committed
fix(api): log Redis error when newsletter rate limiter fails open

hman38705
and
claude
committed
fix(api): replace bare unwrap() with expect() in TokenStore::confirm

hman38705
and
claude
committed
fix(api): log SendGrid response body read error instead of silently discarding

hman38705
and
claude
committed
fix(api): log serialization error in body_redact fallback path

hman38705
and
claude
committed
fix(db): add LIMIT clause to newsletter cleanup to prevent unbounded table lock

hman38705
and
claude
committed
feat(config): add NEWSLETTER_CLEANUP_BATCH_SIZE environment variable

hman38705
and
claude
committed
fix(api): pass cleanup batch size to newsletter_delete_expired_pending

hman38705
and
claude
committed
fix(config): add newsletter_cleanup_batch_size to Config test fixtures

hman38705
and
claude
committed
perf(db): add composite index on email_jobs(status, priority, scheduled_at)

hman38705
and
claude
committed
perf(db): add composite index on email_events(email_job_id, timestamp DESC)

hman38705
and
claude
committed
perf(db): add partial index on newsletter_subscribers(created_at) for cleanup query

hman38705
and
claude
committed
perf(db): add partial index on markets(ends_at) for active deadline queries

hman38705
and
claude
committed
docs(db): update performance_indexes.sql reference with all new indexes

hman38705
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Dependabot/npm and yarn/frontend/types/node 25.9.1#878

Dependabot/npm and yarn/frontend/types/node 25.9.1#878
hman38705 merged 23 commits into
mainfrom
dependabot/npm_and_yarn/frontend/types/node-25.9.1

Commits on Jun 17, 2026

fix(security): remove unsafe-eval from Content-Security-Policy script-src

fix(security): remove unsafe-inline from CSP script-src and add strict-dynamic

feat(security): add upgrade-insecure-requests directive to CSP

feat(security): add Next.js middleware for per-request nonce-based CSP

feat(security): wire nonce from middleware into layout inline script

feat(typescript): enable strict mode to enforce compile-time type safety

feat(typescript): add noImplicitReturns and noFallthroughCasesInSwitch options

fix(typescript): use unknown instead of any for caught API error body

fix(typescript): replace unsafe Error cast with type guard in useAsync hook

fix(typescript): replace as any locale cast with typed Locale assertion

fix(api): log Redis error when newsletter rate limiter fails open

fix(api): replace bare unwrap() with expect() in TokenStore::confirm

fix(api): log SendGrid response body read error instead of silently discarding

fix(api): log serialization error in body_redact fallback path

fix(db): add LIMIT clause to newsletter cleanup to prevent unbounded table lock

feat(config): add NEWSLETTER_CLEANUP_BATCH_SIZE environment variable

fix(api): pass cleanup batch size to newsletter_delete_expired_pending

fix(config): add newsletter_cleanup_batch_size to Config test fixtures

perf(db): add composite index on email_jobs(status, priority, scheduled_at)

perf(db): add composite index on email_events(email_job_id, timestamp DESC)

perf(db): add partial index on newsletter_subscribers(created_at) for cleanup query

perf(db): add partial index on markets(ends_at) for active deadline queries

docs(db): update performance_indexes.sql reference with all new indexes