[PR #31] [MERGED] Fix CVE-2025-66478 #89

New issue

Closed

opened 2026-05-06 12:18:40 +02:00 by BreizhHardware · 0 comments

BreizhHardware commented

2026-05-06 12:18:40 +02:00

Owner

📋 Pull Request Information

Original PR: https://github.com/BreizhHardware/Site-comptage-heure/pull/31
Author: @BreizhHardware
Created: 12/8/2025
Status: ✅ Merged
Merged: 12/8/2025
Merged by: @BreizhHardware

Base: main ← Head: dev

📝 Commits (3)

69851a3 fix(security): Fix CVE-2025-66478
94cef3f feat(devcontainer): Add git-lfs
f77cba1 Merge branch 'main' into dev

📊 Changes

3 files changed (+409 additions, -349 deletions)

View changed files

📝 .devcontainer/devcontainer.json (+12 -11)
📝 package.json (+16 -16)
📝 pnpm-lock.yaml (+381 -322)

📄 Description

This pull request updates the project's development environment and dependencies to improve compatibility, add support for pnpm, and ensure the latest versions of key packages are used. The most important changes are grouped below by theme.

Development environment improvements:

Updated .devcontainer/devcontainer.json to use the ubuntu base image instead of the Node.js-specific image, and added configuration to install Node.js, Yarn, and pnpm via devcontainer features for better flexibility and pnpm support.

Dependency upgrades:

Upgraded several dependencies in package.json to their latest versions, including next, next-auth, react-day-picker, react-hook-form, mime-types, and tailwind-merge for improved stability and new features.
Updated development dependencies such as cypress, prettier, tailwindcss, and typescript to their latest releases to ensure compatibility and access to recent improvements.
Incremented various Radix UI component packages and other libraries (@radix-ui/react-label, @radix-ui/react-slot, bcryptjs, zod, etc.) to maintain up-to-date UI and utility functionality.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/BreizhHardware/Site-comptage-heure/pull/31 **Author:** [@BreizhHardware](https://github.com/BreizhHardware) **Created:** 12/8/2025 **Status:** ✅ Merged **Merged:** 12/8/2025 **Merged by:** [@BreizhHardware](https://github.com/BreizhHardware) **Base:** `main` ← **Head:** `dev` --- ### 📝 Commits (3) - [`69851a3`](https://github.com/BreizhHardware/Site-comptage-heure/commit/69851a37310d05b118a76d70767c8a01c5ac6fe3) fix(security): Fix CVE-2025-66478 - [`94cef3f`](https://github.com/BreizhHardware/Site-comptage-heure/commit/94cef3f9e87f30b0c4464ad17edd1c7790b1ced6) feat(devcontainer): Add git-lfs - [`f77cba1`](https://github.com/BreizhHardware/Site-comptage-heure/commit/f77cba122c04bbf0f728f5b78571a2c1de9c2d55) Merge branch 'main' into dev ### 📊 Changes **3 files changed** (+409 additions, -349 deletions) <details> <summary>View changed files</summary> 📝 `.devcontainer/devcontainer.json` (+12 -11) 📝 `package.json` (+16 -16) 📝 `pnpm-lock.yaml` (+381 -322) </details> ### 📄 Description This pull request updates the project's development environment and dependencies to improve compatibility, add support for pnpm, and ensure the latest versions of key packages are used. The most important changes are grouped below by theme. **Development environment improvements:** * Updated `.devcontainer/devcontainer.json` to use the `ubuntu` base image instead of the Node.js-specific image, and added configuration to install Node.js, Yarn, and pnpm via devcontainer features for better flexibility and pnpm support. **Dependency upgrades:** * Upgraded several dependencies in `package.json` to their latest versions, including `next`, `next-auth`, `react-day-picker`, `react-hook-form`, `mime-types`, and `tailwind-merge` for improved stability and new features. * Updated development dependencies such as `cypress`, `prettier`, `tailwindcss`, and `typescript` to their latest releases to ensure compatibility and access to recent improvements. * Incremented various Radix UI component packages and other libraries (`@radix-ui/react-label`, `@radix-ui/react-slot`, `bcryptjs`, `zod`, etc.) to maintain up-to-date UI and utility functionality. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>