From 64e7a0cf5feff0c58a4e1466f15e8fc0f508f378 Mon Sep 17 00:00:00 2001 From: Vercel Date: Sat, 10 Jan 2026 13:57:09 +0000 Subject: [PATCH 1/2] Fix React Server Components CVE vulnerabilities Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- package.json | 96 ++++++++++++++++++++++++++-------------------------- 1 file changed, 48 insertions(+), 48 deletions(-) diff --git a/package.json b/package.json index 4242b66..4686ec7 100644 --- a/package.json +++ b/package.json @@ -1,50 +1,50 @@ { - "name": "sorting-algorithms", - "version": "0.1.0", - "private": true, - "scripts": { - "dev": "next dev --turbopack", - "build": "next build", - "build:turbo": "next build --turbopack", - "start": "next start", - "check": "biome check .", - "check:write": "biome check --write .", - "check:unsafe": "biome check --write --unsafe .", - "typecheck": "tsc --noEmit" - }, - "dependencies": { - "@icons-pack/react-simple-icons": "^13.4.0", - "@radix-ui/react-select": "^2.2.5", - "@radix-ui/react-slider": "^1.3.5", - "@radix-ui/react-slot": "^1.2.3", - "@t3-oss/env-nextjs": "^0.13.8", - "class-variance-authority": "^0.7.1", - "clsx": "^2.1.1", - "d3": "^7.9.0", - "hast-util-to-jsx-runtime": "^2.3.6", - "lucide-react": "^0.525.0", - "motion": "^12.23.3", - "next": "^15.3.5", - "next-intl": "^4.3.4", - "nuqs": "^2.4.3", - "react": "^19.1.0", - "react-dom": "^19.1.0", - "react-use-measure": "^2.1.7", - "shiki": "^3.7.0", - "tailwind-merge": "^3.3.1", - "tw-animate-css": "^1.3.5", - "zod": "^4.0.5" - }, - "devDependencies": { - "@biomejs/biome": "2.0.0", - "@tailwindcss/postcss": "^4.1.11", - "@types/d3": "^7.4.3", - "@types/node": "^24.0.13", - "@types/react": "^19.1.8", - "@types/react-dom": "^19.1.6", - "babel-plugin-react-compiler": "^19.1.0-rc.2", - "postcss-load-config": "^6.0.1", - "tailwindcss": "^4.1.11", - "typescript": "^5.8.3" - } + "name": "sorting-algorithms", + "version": "0.1.0", + "private": true, + "scripts": { + "dev": "next dev --turbopack", + "build": "next build", + "build:turbo": "next build --turbopack", + "start": "next start", + "check": "biome check .", + "check:write": "biome check --write .", + "check:unsafe": "biome check --write --unsafe .", + "typecheck": "tsc --noEmit" + }, + "dependencies": { + "@icons-pack/react-simple-icons": "^13.4.0", + "@radix-ui/react-select": "^2.2.5", + "@radix-ui/react-slider": "^1.3.5", + "@radix-ui/react-slot": "^1.2.3", + "@t3-oss/env-nextjs": "^0.13.8", + "class-variance-authority": "^0.7.1", + "clsx": "^2.1.1", + "d3": "^7.9.0", + "hast-util-to-jsx-runtime": "^2.3.6", + "lucide-react": "^0.525.0", + "motion": "^12.23.3", + "next": "15.3.8", + "next-intl": "^4.3.4", + "nuqs": "^2.4.3", + "react": "^19.1.0", + "react-dom": "^19.1.0", + "react-use-measure": "^2.1.7", + "shiki": "^3.7.0", + "tailwind-merge": "^3.3.1", + "tw-animate-css": "^1.3.5", + "zod": "^4.0.5" + }, + "devDependencies": { + "@biomejs/biome": "2.0.0", + "@tailwindcss/postcss": "^4.1.11", + "@types/d3": "^7.4.3", + "@types/node": "^24.0.13", + "@types/react": "^19.1.8", + "@types/react-dom": "^19.1.6", + "babel-plugin-react-compiler": "^19.1.0-rc.2", + "postcss-load-config": "^6.0.1", + "tailwindcss": "^4.1.11", + "typescript": "^5.8.3" + } } From a6104438da23a62d8a0e65741701f9536f774374 Mon Sep 17 00:00:00 2001 From: Jake Date: Sat, 10 Jan 2026 15:59:48 +0100 Subject: [PATCH 2/2] chore: update lockfile & format --- biome.jsonc | 2 +- bun.lock | 7 ++-- package.json | 96 ++++++++++++++++++++++++++-------------------------- 3 files changed, 53 insertions(+), 52 deletions(-) diff --git a/biome.jsonc b/biome.jsonc index 7fa5c7c..0546fd2 100644 --- a/biome.jsonc +++ b/biome.jsonc @@ -7,7 +7,7 @@ }, "files": { "ignoreUnknown": true, - "includes": ["src/**/*.{ts,tsx}"], + "includes": ["src/**/*.{ts,tsx}", "**/*.json", "**/*.jsonc", "**/*.mjs"], "experimentalScannerIgnores": ["node_modules", ".next"] }, "formatter": { "enabled": true }, diff --git a/bun.lock b/bun.lock index 6868430..33c91c2 100644 --- a/bun.lock +++ b/bun.lock @@ -1,5 +1,6 @@ { "lockfileVersion": 1, + "configVersion": 0, "workspaces": { "": { "name": "sorting-algorithms", @@ -15,7 +16,7 @@ "hast-util-to-jsx-runtime": "^2.3.6", "lucide-react": "^0.525.0", "motion": "^12.23.3", - "next": "^15.3.5", + "next": "15.3.8", "next-intl": "^4.3.4", "nuqs": "^2.4.3", "react": "^19.1.0", @@ -145,7 +146,7 @@ "@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.29", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-uw6guiW/gcAGPDhLmd77/6lW8QLeiV5RUTsAX46Db6oLhGaVj4lhnPwb184s1bkc8kdVg/+h988dro8GRDpmYQ=="], - "@next/env": ["@next/env@15.3.5", "", {}, "sha512-7g06v8BUVtN2njAX/r8gheoVffhiKFVt4nx74Tt6G4Hqw9HCLYQVx/GkH2qHvPtAHZaUNZ0VXAa0pQP6v1wk7g=="], + "@next/env": ["@next/env@15.3.8", "", {}, "sha512-SAfHg0g91MQVMPioeFeDjE+8UPF3j3BvHjs8ZKJAUz1BG7eMPvfCKOAgNWJ6s1MLNeP6O2InKQRTNblxPWuq+Q=="], "@next/swc-darwin-arm64": ["@next/swc-darwin-arm64@15.3.5", "", { "os": "darwin", "cpu": "arm64" }, "sha512-lM/8tilIsqBq+2nq9kbTW19vfwFve0NR7MxfkuSUbRSgXlMQoJYg+31+++XwKVSXk4uT23G2eF/7BRIKdn8t8w=="], @@ -621,7 +622,7 @@ "negotiator": ["negotiator@1.0.0", "", {}, "sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg=="], - "next": ["next@15.3.5", "", { "dependencies": { "@next/env": "15.3.5", "@swc/counter": "0.1.3", "@swc/helpers": "0.5.15", "busboy": "1.6.0", "caniuse-lite": "^1.0.30001579", "postcss": "8.4.31", "styled-jsx": "5.1.6" }, "optionalDependencies": { "@next/swc-darwin-arm64": "15.3.5", "@next/swc-darwin-x64": "15.3.5", "@next/swc-linux-arm64-gnu": "15.3.5", "@next/swc-linux-arm64-musl": "15.3.5", "@next/swc-linux-x64-gnu": "15.3.5", "@next/swc-linux-x64-musl": "15.3.5", "@next/swc-win32-arm64-msvc": "15.3.5", "@next/swc-win32-x64-msvc": "15.3.5", "sharp": "^0.34.1" }, "peerDependencies": { "@opentelemetry/api": "^1.1.0", "@playwright/test": "^1.41.2", "babel-plugin-react-compiler": "*", "react": "^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0", "react-dom": "^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0", "sass": "^1.3.0" }, "optionalPeers": ["@opentelemetry/api", "@playwright/test", "babel-plugin-react-compiler", "sass"], "bin": { "next": "dist/bin/next" } }, "sha512-RkazLBMMDJSJ4XZQ81kolSpwiCt907l0xcgcpF4xC2Vml6QVcPNXW0NQRwQ80FFtSn7UM52XN0anaw8TEJXaiw=="], + "next": ["next@15.3.8", "", { "dependencies": { "@next/env": "15.3.8", "@swc/counter": "0.1.3", "@swc/helpers": "0.5.15", "busboy": "1.6.0", "caniuse-lite": "^1.0.30001579", "postcss": "8.4.31", "styled-jsx": "5.1.6" }, "optionalDependencies": { "@next/swc-darwin-arm64": "15.3.5", "@next/swc-darwin-x64": "15.3.5", "@next/swc-linux-arm64-gnu": "15.3.5", "@next/swc-linux-arm64-musl": "15.3.5", "@next/swc-linux-x64-gnu": "15.3.5", "@next/swc-linux-x64-musl": "15.3.5", "@next/swc-win32-arm64-msvc": "15.3.5", "@next/swc-win32-x64-msvc": "15.3.5", "sharp": "^0.34.1" }, "peerDependencies": { "@opentelemetry/api": "^1.1.0", "@playwright/test": "^1.41.2", "babel-plugin-react-compiler": "*", "react": "^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0", "react-dom": "^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0", "sass": "^1.3.0" }, "optionalPeers": ["@opentelemetry/api", "@playwright/test", "babel-plugin-react-compiler", "sass"], "bin": { "next": "dist/bin/next" } }, "sha512-L+4c5Hlr84fuaNADZbB9+ceRX9/CzwxJ+obXIGHupboB/Q1OLbSUapFs4bO8hnS/E6zV/JDX7sG1QpKVR2bguA=="], "next-intl": ["next-intl@4.3.4", "", { "dependencies": { "@formatjs/intl-localematcher": "^0.5.4", "negotiator": "^1.0.0", "use-intl": "^4.3.4" }, "peerDependencies": { "next": "^12.0.0 || ^13.0.0 || ^14.0.0 || ^15.0.0", "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || >=19.0.0-rc <19.0.0 || ^19.0.0", "typescript": "^5.0.0" }, "optionalPeers": ["typescript"] }, "sha512-VWLIDlGbnL/o4LnveJTJD1NOYN8lh3ZAGTWw2krhfgg53as3VsS4jzUVnArJdqvwtlpU/2BIDbWTZ7V4o1jFEw=="], diff --git a/package.json b/package.json index 4686ec7..6c4ba62 100644 --- a/package.json +++ b/package.json @@ -1,50 +1,50 @@ { - "name": "sorting-algorithms", - "version": "0.1.0", - "private": true, - "scripts": { - "dev": "next dev --turbopack", - "build": "next build", - "build:turbo": "next build --turbopack", - "start": "next start", - "check": "biome check .", - "check:write": "biome check --write .", - "check:unsafe": "biome check --write --unsafe .", - "typecheck": "tsc --noEmit" - }, - "dependencies": { - "@icons-pack/react-simple-icons": "^13.4.0", - "@radix-ui/react-select": "^2.2.5", - "@radix-ui/react-slider": "^1.3.5", - "@radix-ui/react-slot": "^1.2.3", - "@t3-oss/env-nextjs": "^0.13.8", - "class-variance-authority": "^0.7.1", - "clsx": "^2.1.1", - "d3": "^7.9.0", - "hast-util-to-jsx-runtime": "^2.3.6", - "lucide-react": "^0.525.0", - "motion": "^12.23.3", - "next": "15.3.8", - "next-intl": "^4.3.4", - "nuqs": "^2.4.3", - "react": "^19.1.0", - "react-dom": "^19.1.0", - "react-use-measure": "^2.1.7", - "shiki": "^3.7.0", - "tailwind-merge": "^3.3.1", - "tw-animate-css": "^1.3.5", - "zod": "^4.0.5" - }, - "devDependencies": { - "@biomejs/biome": "2.0.0", - "@tailwindcss/postcss": "^4.1.11", - "@types/d3": "^7.4.3", - "@types/node": "^24.0.13", - "@types/react": "^19.1.8", - "@types/react-dom": "^19.1.6", - "babel-plugin-react-compiler": "^19.1.0-rc.2", - "postcss-load-config": "^6.0.1", - "tailwindcss": "^4.1.11", - "typescript": "^5.8.3" - } + "name": "sorting-algorithms", + "version": "0.1.0", + "private": true, + "scripts": { + "dev": "next dev --turbopack", + "build": "next build", + "build:turbo": "next build --turbopack", + "start": "next start", + "check": "biome check .", + "check:write": "biome check --write .", + "check:unsafe": "biome check --write --unsafe .", + "typecheck": "tsc --noEmit" + }, + "dependencies": { + "@icons-pack/react-simple-icons": "^13.4.0", + "@radix-ui/react-select": "^2.2.5", + "@radix-ui/react-slider": "^1.3.5", + "@radix-ui/react-slot": "^1.2.3", + "@t3-oss/env-nextjs": "^0.13.8", + "class-variance-authority": "^0.7.1", + "clsx": "^2.1.1", + "d3": "^7.9.0", + "hast-util-to-jsx-runtime": "^2.3.6", + "lucide-react": "^0.525.0", + "motion": "^12.23.3", + "next": "15.3.8", + "next-intl": "^4.3.4", + "nuqs": "^2.4.3", + "react": "^19.1.0", + "react-dom": "^19.1.0", + "react-use-measure": "^2.1.7", + "shiki": "^3.7.0", + "tailwind-merge": "^3.3.1", + "tw-animate-css": "^1.3.5", + "zod": "^4.0.5" + }, + "devDependencies": { + "@biomejs/biome": "2.0.0", + "@tailwindcss/postcss": "^4.1.11", + "@types/d3": "^7.4.3", + "@types/node": "^24.0.13", + "@types/react": "^19.1.8", + "@types/react-dom": "^19.1.6", + "babel-plugin-react-compiler": "^19.1.0-rc.2", + "postcss-load-config": "^6.0.1", + "tailwindcss": "^4.1.11", + "typescript": "^5.8.3" + } }