Skip to content

chore(deps): refresh Next React and patch dependency security fixes - #30

Merged
roodboi merged 10 commits into
mainfrom
bun-1.4.4
Oct 23, 2026
Merged

roodboi merged 10 commits into
mainfrom
bun-1.4.4

Conversation

@roodboi

@roodboi roodboi commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

Keeps the Bun 1.4.4 security upgrade and refreshes Next.js to 16.4.2, React/React DOM to 19.3.1, and compatible package and docs dependencies. Updates esbuild and KaTeX security pins; the KaTeX 0.18 upgrade is isolated in its own commit.

Aligns the packed-consumer fixtures with the refreshed Mastra, OpenAI Agents, Vercel AI, OpenAI, and Zod 4 versions, and corrects the README's Mastra wording.

Validation: the full bun run check covers lint, type checks, release-plan checks, tests, packed consumers, documentation generation, demo composition checks, and the production docs build. Final-head results are recorded in the local report. Full audit findings remain in upstream braces and sprintf-js with no fixed published version; neither is suppressed. Local Codex/Claude review verdicts are collected separately and do not constitute GitHub approval.

Do not merge, publish, or deploy. A merge to main runs CI and release-PR automation. The Publish workflow only publishes for an approved changeset-release/main merge or a manual dispatch; this branch is not that release branch. Hosting integrations may build previews automatically.

@vercel

vercel Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
schema-stream Ready Ready Preview Oct 22, 2026 6:31pm UTC

Request Review

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
🔒 Security Review ✅ Completed 2026-10-22T13:13:41.088143Z a8d4f63 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@roodboi roodboi changed the title Bump Bun to 1.4.4 (CVE-2026-111497) chore(deps): refresh Next React and patch dependency security fixes Oct 22, 2026
@roodboi
roodboi merged commit 09a0252 into main Oct 23, 2026
6 checks passed
@roodboi
roodboi deleted the bun-1.4.4 branch October 23, 2026 02:20

This branch was successfully deployed

1 active deployment
Preview — 91dad5c0 Deployed Oct 22, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant