weekly-fixes/2026-06-19: patch critical/high dependency advisories (handlebars, next, postcss, defu, effect)#12
Merged
Merged
Conversation
Resolves npm-audit advisories without changing package.json semver ranges (lockfile-only, drop-in patch/minor updates): - handlebars 4.7.8 -> 4.7.9 (CRITICAL: AST-type-confusion JS injection, prototype-pollution XSS via partials; handlebars compiles Are.na-sourced template data in src/lib/build.ts, so this is on a real input path) - next 15.5.14 -> 15.5.19 (HIGH: middleware/proxy bypass, RSC cache poisoning, image-optimizer DoS, et al.) - postcss 8.5.8 -> 8.5.15 (MODERATE: </style> XSS in stringify output) - defu 6.1.4 -> 6.1.7 (HIGH: prototype pollution) - effect 3.18.4 -> 3.21.0 (HIGH: AsyncLocalStorage context loss; via prisma) - prisma/@prisma/* 6.19.2 -> 6.19.3 and related transitive bumps Verified: `npx tsc --noEmit` clean, `npx eslint .` clean. No test suite present. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Co-authored-by: multica-agent <github@multica.ai>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
…-lock - @anthropic-ai/sdk ^0.87.0 -> ^0.105.0 (latest), clearing the moderate advisory (GHSA-p7fg-763f-g4gf, insecure default file perms). The only usage is src/lib/ai-site-theme.ts (new Anthropic / messages.create / content-block iteration), which is unchanged across the major — tsc and eslint pass with no source edits needed. - Regenerated yarn.lock so it carries the same versions as package-lock.json (handlebars 4.7.9, next 15.5.19, postcss 8.5.15, defu 6.1.7, effect 3.21.0, prisma 6.19.3, @anthropic-ai/sdk 0.105.0). Both lockfiles kept per request. Verified: `npx tsc --noEmit` clean, `npx eslint .` clean. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Co-authored-by: multica-agent <github@multica.ai>
The hardcoded fallback `claude-sonnet-4-20250514` is deprecated and past its June 15 2026 EOL, so default-model calls (no ANTHROPIC_MODEL set) would fail at runtime. Swap to the current drop-in replacement `claude-sonnet-4-6`. The ANTHROPIC_MODEL env override path is unchanged. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Co-authored-by: multica-agent <github@multica.ai>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Weekly maintenance — 2026-06-19
Automated weekly review of recent PRs + dependency/security audit. This run found one concrete, safely-fixable category (dependency advisories) and fixes it here. Other items are listed for human review rather than guessed at.
What changed (security/packages)
Lockfile-only bumps — no
package.jsonsemver ranges changed, all drop-in patch/minor updates resolved bynpm audit fix:handlebarssrc/lib/build.ts, so this sits on a real untrusted-input path.nextpostcss</style>XSS in stringify outputdefueffectprisma)prisma/@prisma/*effectbumpVerification
npx tsc --noEmit— cleannpx eslint .— cleanThe four checks, in full
maincommits (Are.na 401 cron-noise handling, Studio waitlist restore). No correctness regressions found.package-lock.jsonandyarn.lock); see "Needs human review".npm audit --omit=devflagged 1 critical / multiple high; the safely-patchable ones are fixed above.Needs human review (not fixed here)
package-lock.jsonandyarn.lockare committed. Docs (AGENTS.md,CLAUDE.md) and CI (.github/workflows/release-cli.yml) all use npm, so this PR updatespackage-lock.jsononly. If the Vercel root build actually resolves fromyarn.lock, these bumps won't reach production untilyarn.lockis regenerated or removed. Recommend standardizing on npm and deletingyarn.lock— a maintainer decision, since it depends on the Vercel build config.@anthropic-ai/sdk0.87 → 0.105 (moderate, insecure default file perms) — fix is a breaking major, left for a deliberate upgrade.{{{ }}}on Are.nacontent_html/embed.html, rate limiting, non-constant-timeCRON_SECRETcompare) — these need code/dependency work and a sanitizer choice, out of scope for a minimal dependency PR.Context
Complements the open security PR #11, which explicitly deferred "dependency advisories: handlebars, next" as a separate change — this is that change. Branched off
main; original branches untouched; one PR per run.🤖 Generated with Claude Code