Tyagiquamar
ee00ed5a65
fix(server): avoid exponential backtracking in isPathAllowed ( #3862 )
2026-10-12 18:18:07 +05:30
dependabot[bot]
223e7d07c4
Bump the npm-dependencies group across 1 directory with 53 updates
...
Bumps the npm-dependencies group with 53 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3 ) | `3.1131.0` | `3.1148.0` |
| [@node-rs/argon2](https://github.com/napi-rs/node-rs ) | `2.2.1` | `2.2.2` |
| [@radix-ui/react-avatar](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/avatar ) | `1.2.6` | `1.2.7` |
| [@radix-ui/react-checkbox](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/checkbox ) | `1.3.11` | `1.3.12` |
| [@radix-ui/react-collapsible](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/collapsible ) | `1.1.20` | `1.1.21` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog ) | `1.1.23` | `1.2.0` |
| [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu ) | `2.1.24` | `2.1.25` |
| [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label ) | `2.1.15` | `2.1.16` |
| [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover ) | `1.1.23` | `1.2.0` |
| [@radix-ui/react-progress](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/progress ) | `1.1.16` | `1.1.17` |
| [@radix-ui/react-radio-group](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radio-group ) | `1.4.7` | `1.4.8` |
| [@radix-ui/react-scroll-area](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/scroll-area ) | `1.2.18` | `1.3.0` |
| [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select ) | `2.3.7` | `2.3.8` |
| [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator ) | `1.1.15` | `1.1.16` |
| [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot ) | `1.3.3` | `1.4.0` |
| [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch ) | `1.3.7` | `1.3.8` |
| [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs ) | `1.1.21` | `1.1.22` |
| [@radix-ui/react-toast](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/toast ) | `1.2.23` | `1.2.24` |
| [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip ) | `1.2.16` | `1.3.0` |
| [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server ) | `14.0.1` | `14.0.3` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query ) | `5.102.8` | `5.104.1` |
| [drizzle-orm](https://github.com/drizzle-team/drizzle-orm ) | `0.45.2` | `0.45.4` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit ) | `8.7.0` | `8.7.1` |
| [js-yaml](https://github.com/nodeca/js-yaml ) | `5.4.1` | `5.4.3` |
| [lru-cache](https://github.com/isaacs/node-lru-cache ) | `11.5.2` | `11.5.3` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react ) | `1.45.0` | `1.53.0` |
| [next](https://github.com/vercel/next.js ) | `16.3.6` | `16.4.0` |
| [next-intl](https://github.com/amannn/next-intl ) | `4.14.4` | `4.14.9` |
| [nodemailer](https://github.com/nodemailer/nodemailer ) | `10.0.9` | `10.0.16` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg ) | `8.23.0` | `8.23.1` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node ) | `5.52.1` | `5.55.1` |
| [react-day-picker](https://github.com/gpbl/react-day-picker/tree/HEAD/packages/react-day-picker ) | `10.0.1` | `10.0.2` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form ) | `7.88.0` | `7.89.0` |
| [stripe](https://github.com/stripe/stripe-node ) | `22.6.2` | `23.0.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge ) | `3.6.0` | `3.7.0` |
| [ws](https://github.com/websockets/ws ) | `8.21.3` | `8.22.0` |
| [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws ) | `8.18.1` | `8.18.2` |
| [yargs](https://github.com/yargs/yargs ) | `18.1.0` | `18.2.0` |
| [zod](https://github.com/colinhacks/zod ) | `4.6.2` | `4.6.5` |
| [@dotenvx/dotenvx](https://github.com/dotenvx/dotenvx ) | `2.24.1` | `2.34.1` |
| [@react-email/ui](https://github.com/resend/react-email/tree/HEAD/packages/ui ) | `6.9.5` | `6.11.1` |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools ) | `5.102.8` | `5.104.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) | `26.5.1` | `26.6.4` |
| [@types/nodemailer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/nodemailer ) | `8.0.1` | `8.0.2` |
| [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws ) | `8.18.1` | `8.18.2` |
| [drizzle-kit](https://github.com/drizzle-team/drizzle-orm ) | `0.31.10` | `0.31.11` |
| [eslint](https://github.com/eslint/eslint ) | `10.10.0` | `10.12.0` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next ) | `16.3.5` | `16.4.0` |
| [postcss](https://github.com/postcss/postcss ) | `8.5.28` | `8.5.29` |
| [prettier](https://github.com/prettier/prettier ) | `3.9.6` | `3.9.9` |
| [react-email](https://github.com/resend/react-email/tree/HEAD/packages/react-email ) | `6.9.5` | `6.11.1` |
| [tsc-alias](https://github.com/justkey007/tsc-alias ) | `1.9.5` | `1.9.7` |
| [tsx](https://github.com/privatenumber/tsx ) | `4.23.13` | `4.23.15` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint ) | `8.70.0` | `8.71.1` |
Updates `@aws-sdk/client-s3` from 3.1131.0 to 3.1148.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1148.0/clients/client-s3 )
Updates `@node-rs/argon2` from 2.2.1 to 2.2.2
- [Release notes](https://github.com/napi-rs/node-rs/releases )
- [Commits](https://github.com/napi-rs/node-rs/compare/@node-rs/argon2@2.2.1...@node-rs/argon2@2.2.2 )
Updates `@radix-ui/react-avatar` from 1.2.6 to 1.2.7
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/avatar/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/avatar )
Updates `@radix-ui/react-checkbox` from 1.3.11 to 1.3.12
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/checkbox/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/checkbox )
Updates `@radix-ui/react-collapsible` from 1.1.20 to 1.1.21
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/collapsible/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/collapsible )
Updates `@radix-ui/react-dialog` from 1.1.23 to 1.2.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog )
Updates `@radix-ui/react-dropdown-menu` from 2.1.24 to 2.1.25
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu )
Updates `@radix-ui/react-label` from 2.1.15 to 2.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label )
Updates `@radix-ui/react-popover` from 1.1.23 to 1.2.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover )
Updates `@radix-ui/react-progress` from 1.1.16 to 1.1.17
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/progress/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/progress )
Updates `@radix-ui/react-radio-group` from 1.4.7 to 1.4.8
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radio-group/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radio-group )
Updates `@radix-ui/react-scroll-area` from 1.2.18 to 1.3.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/scroll-area/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/scroll-area )
Updates `@radix-ui/react-select` from 2.3.7 to 2.3.8
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select )
Updates `@radix-ui/react-separator` from 1.1.15 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator )
Updates `@radix-ui/react-slot` from 1.3.3 to 1.4.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot )
Updates `@radix-ui/react-switch` from 1.3.7 to 1.3.8
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch )
Updates `@radix-ui/react-tabs` from 1.1.21 to 1.1.22
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs )
Updates `@radix-ui/react-toast` from 1.2.23 to 1.2.24
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/toast/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/toast )
Updates `@radix-ui/react-tooltip` from 1.2.16 to 1.3.0
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip )
Updates `@simplewebauthn/server` from 14.0.1 to 14.0.3
- [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases )
- [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md )
- [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v14.0.3/packages/server )
Updates `@tanstack/react-query` from 5.102.8 to 5.104.1
- [Release notes](https://github.com/TanStack/query/releases )
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md )
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.1/packages/react-query )
Updates `drizzle-orm` from 0.45.2 to 0.45.4
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases )
- [Commits](https://github.com/drizzle-team/drizzle-orm/compare/0.45.2...0.45.4 )
Updates `express-rate-limit` from 8.7.0 to 8.7.1
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases )
- [Commits](https://github.com/express-rate-limit/express-rate-limit/compare/v8.7.0...v8.7.1 )
Updates `js-yaml` from 5.4.1 to 5.4.3
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/5.4.1...5.4.3 )
Updates `lru-cache` from 11.5.2 to 11.5.3
- [Changelog](https://github.com/isaacs/node-lru-cache/blob/main/CHANGELOG.md )
- [Commits](https://github.com/isaacs/node-lru-cache/compare/v11.5.2...v11.5.3 )
Updates `lucide-react` from 1.45.0 to 1.53.0
- [Release notes](https://github.com/lucide-icons/lucide/releases )
- [Commits](https://github.com/lucide-icons/lucide/commits/1.53.0/packages/lucide-react )
Updates `next` from 16.3.6 to 16.4.0
- [Release notes](https://github.com/vercel/next.js/releases )
- [Commits](https://github.com/vercel/next.js/compare/v16.3.6...v16.4.0 )
Updates `next-intl` from 4.14.4 to 4.14.9
- [Release notes](https://github.com/amannn/next-intl/releases )
- [Changelog](https://github.com/amannn/next-intl/blob/main/CHANGELOG.md )
- [Commits](https://github.com/amannn/next-intl/compare/v4.14.4...v4.14.9 )
Updates `nodemailer` from 10.0.9 to 10.0.16
- [Release notes](https://github.com/nodemailer/nodemailer/releases )
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodemailer/nodemailer/compare/v10.0.9...v10.0.16 )
Updates `pg` from 8.23.0 to 8.23.1
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md )
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.1/packages/pg )
Updates `posthog-node` from 5.52.1 to 5.55.1
- [Release notes](https://github.com/PostHog/posthog-js/releases )
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md )
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.55.1/packages/node )
Updates `react-day-picker` from 10.0.1 to 10.0.2
- [Release notes](https://github.com/gpbl/react-day-picker/releases )
- [Changelog](https://github.com/gpbl/react-day-picker/blob/main/packages/react-day-picker/CHANGELOG.md )
- [Commits](https://github.com/gpbl/react-day-picker/commits/v10.0.2/packages/react-day-picker )
Updates `react-hook-form` from 7.88.0 to 7.89.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases )
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md )
- [Commits](https://github.com/react-hook-form/react-hook-form/compare/v7.88.0...v7.89.0 )
Updates `stripe` from 22.6.2 to 23.0.0
- [Release notes](https://github.com/stripe/stripe-node/releases )
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md )
- [Commits](https://github.com/stripe/stripe-node/compare/v22.6.2...v23.0.0 )
Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases )
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge )
Updates `ws` from 8.21.3 to 8.22.0
- [Release notes](https://github.com/websockets/ws/releases )
- [Commits](https://github.com/websockets/ws/compare/8.21.3...8.22.0 )
Updates `@types/ws` from 8.18.1 to 8.18.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ws )
Updates `yargs` from 18.1.0 to 18.2.0
- [Release notes](https://github.com/yargs/yargs/releases )
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/yargs/yargs/compare/v18.1.0...v18.2.0 )
Updates `zod` from 4.6.2 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases )
- [Commits](https://github.com/colinhacks/zod/compare/v4.6.2...v4.6.5 )
Updates `@dotenvx/dotenvx` from 2.24.1 to 2.34.1
- [Release notes](https://github.com/dotenvx/dotenvx/releases )
- [Changelog](https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md )
- [Commits](https://github.com/dotenvx/dotenvx/compare/v2.24.1...v2.34.1 )
Updates `@react-email/ui` from 6.9.5 to 6.11.1
- [Release notes](https://github.com/resend/react-email/releases )
- [Changelog](https://github.com/resend/react-email/blob/canary/packages/ui/CHANGELOG.md )
- [Commits](https://github.com/resend/react-email/commits/@react-email/ui@6.11.1/packages/ui )
Updates `@tanstack/react-query-devtools` from 5.102.8 to 5.104.1
- [Release notes](https://github.com/TanStack/query/releases )
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md )
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.104.1/packages/react-query-devtools )
Updates `@types/node` from 26.5.1 to 26.6.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
Updates `@types/nodemailer` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/nodemailer )
Updates `@types/ws` from 8.18.1 to 8.18.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ws )
Updates `drizzle-kit` from 0.31.10 to 0.31.11
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases )
- [Commits](https://github.com/drizzle-team/drizzle-orm/compare/drizzle-kit@0.31.10...drizzle-kit@0.31.11 )
Updates `eslint` from 10.10.0 to 10.12.0
- [Release notes](https://github.com/eslint/eslint/releases )
- [Commits](https://github.com/eslint/eslint/compare/v10.10.0...v10.12.0 )
Updates `eslint-config-next` from 16.3.5 to 16.4.0
- [Release notes](https://github.com/vercel/next.js/releases )
- [Commits](https://github.com/vercel/next.js/commits/v16.4.0/packages/eslint-config-next )
Updates `postcss` from 8.5.28 to 8.5.29
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.28...8.5.29 )
Updates `prettier` from 3.9.6 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/3.9.6...3.9.9 )
Updates `react-email` from 6.9.5 to 6.11.1
- [Release notes](https://github.com/resend/react-email/releases )
- [Changelog](https://github.com/resend/react-email/blob/canary/packages/react-email/CHANGELOG.md )
- [Commits](https://github.com/resend/react-email/commits/react-email@6.11.1/packages/react-email )
Updates `tsc-alias` from 1.9.5 to 1.9.7
- [Release notes](https://github.com/justkey007/tsc-alias/releases )
- [Commits](https://github.com/justkey007/tsc-alias/compare/v1.9.5...v1.9.7 )
Updates `tsx` from 4.23.13 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases )
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs )
- [Commits](https://github.com/privatenumber/tsx/compare/v4.23.13...v4.23.15 )
Updates `typescript-eslint` from 8.70.0 to 8.71.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
dependency-version: 3.1148.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@node-rs/argon2"
dependency-version: 2.2.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-avatar"
dependency-version: 1.2.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-checkbox"
dependency-version: 1.3.12
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-collapsible"
dependency-version: 1.1.21
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-dialog"
dependency-version: 1.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-dropdown-menu"
dependency-version: 2.1.25
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-label"
dependency-version: 2.1.16
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-popover"
dependency-version: 1.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-progress"
dependency-version: 1.1.17
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-radio-group"
dependency-version: 1.4.8
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-scroll-area"
dependency-version: 1.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-select"
dependency-version: 2.3.8
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-separator"
dependency-version: 1.1.16
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-slot"
dependency-version: 1.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-switch"
dependency-version: 1.3.8
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-tabs"
dependency-version: 1.1.22
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-toast"
dependency-version: 1.2.24
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@radix-ui/react-tooltip"
dependency-version: 1.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@simplewebauthn/server"
dependency-version: 14.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@tanstack/react-query"
dependency-version: 5.104.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: drizzle-orm
dependency-version: 0.45.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: express-rate-limit
dependency-version: 8.7.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: js-yaml
dependency-version: 5.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: lru-cache
dependency-version: 11.5.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: lucide-react
dependency-version: 1.53.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: next
dependency-version: 16.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: next-intl
dependency-version: 4.14.9
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: nodemailer
dependency-version: 10.0.16
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: pg
dependency-version: 8.23.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: posthog-node
dependency-version: 5.55.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: react-day-picker
dependency-version: 10.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: react-hook-form
dependency-version: 7.89.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: stripe
dependency-version: 23.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: npm-dependencies
- dependency-name: tailwind-merge
dependency-version: 3.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: ws
dependency-version: 8.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@types/ws"
dependency-version: 8.18.2
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: yargs
dependency-version: 18.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: zod
dependency-version: 4.6.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@dotenvx/dotenvx"
dependency-version: 2.34.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@react-email/ui"
dependency-version: 6.11.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@tanstack/react-query-devtools"
dependency-version: 5.104.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@types/node"
dependency-version: 26.6.4
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@types/nodemailer"
dependency-version: 8.0.2
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@types/ws"
dependency-version: 8.18.2
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: drizzle-kit
dependency-version: 0.31.11
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: eslint
dependency-version: 10.12.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: eslint-config-next
dependency-version: 16.4.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: postcss
dependency-version: 8.5.29
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: prettier
dependency-version: 3.9.9
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: react-email
dependency-version: 6.11.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: tsc-alias
dependency-version: 1.9.7
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: tsx
dependency-version: 4.23.15
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: typescript-eslint
dependency-version: 8.71.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-12 04:22:50 +00:00
dependabot[bot]
dd16515d37
Bump the github-actions-dependencies group with 2 updates
...
Bumps the github-actions-dependencies group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact ) and [actions/setup-node](https://github.com/actions/setup-node ).
Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9 )
Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-dependencies
- dependency-name: actions/setup-node
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-12 04:15:58 +00:00
Dhananjay Maurya
bae174766b
Neutralise formula prefixes in CSV log exports
...
generateCSV escaped quotes only when a value happened to contain a comma and never neutralised formula prefixes, so every CSV log export could emit attacker controlled cells that execute when an admin opens the file. actor is a virtual API key name validated as nothing more than a non-empty string, and path, host, originalRequestURL, metadata and the AI session bodies come straight from the client request.
Each value now goes through a single encoder that collapses CR, LF and CRLF to a literal \n so a record can never be split across rows, prefixes a leading apostrophe when the first character would make a spreadsheet evaluate the cell as a formula, and quotes whenever the field contains a comma or a quote instead of only when it contains a comma. Headers use the same encoder so a column name cannot desynchronise the rows from the header row.
The five CSV export endpoints also declare charset=utf-8, matching the content type already used by the log streaming destination.
Fixes #3864
2026-10-08 14:43:43 +05:30
TiltedTeapot
91aefa67dc
removed literal listenport error references
2026-10-06 18:22:13 -06:00
TiltedTeapot
3712921048
Propogated Changes. listen port is now accessed from db instead of config
2026-10-06 18:21:05 -06:00
TiltedTeapot
29fc221f59
remove TODO comment for fix made in 98a261e
2026-10-06 18:11:24 -06:00
TiltedTeapot
f15f4aee17
added to db again
2026-10-06 18:11:23 -06:00
TiltedTeapot
cff796fabe
Added relayPort to exitNodes in db
2026-10-06 18:11:23 -06:00
ercoppa
487910487d
FIX: generateGerbilConfig hardcoded the WireGuard listen port to 51820 and never sent a relay port
2026-10-06 18:11:23 -06:00
Owen Schwartz
ef0ea6364d
Merge pull request #3830 from mr-pmillz/fix/integration-api-delete-org
...
Fix Integration API organization delete (regression of #1376 )
2026-10-04 11:00:45 -04:00
miloschwartz
22b7411794
add redirect routes to integration api
2026-10-02 17:11:06 -04:00
miloschwartz
4d1a14c965
seperate attached to column
2026-10-02 17:02:35 -04:00
miloschwartz
e0fb6d6883
add descriptions to the rewrite modals
2026-10-02 16:52:31 -04:00
miloschwartz
9746ba5741
add server side sort and filter
2026-10-02 16:41:56 -04:00
miloschwartz
daf8cf16a3
remove danger zone
2026-10-02 16:30:52 -04:00
miloschwartz
59d900a1c6
remove cert from table and add copy text
2026-10-02 16:28:54 -04:00
Owen
1628ab48da
Add ui for assigning roles to machines
2026-10-02 12:04:08 -04:00
Owen
bc2920af23
Support machine clients added to roles
2026-10-01 15:58:25 -04:00
miloschwartz
c8f22ca125
fix unlimited license message
2026-10-01 14:48:55 -04:00
Owen
938710147a
Delete token
2026-10-01 09:30:08 -04:00
Owen Schwartz
58a3701fa8
Merge pull request #3840 from fosrl/dependabot/npm_and_yarn/next-16.3.6
...
Bump next from 16.3.5 to 16.3.6
2026-10-01 09:15:15 -04:00
Owen
6671cb71ed
Merge branch 'main' into dev
2026-10-01 09:09:34 -04:00
dependabot[bot]
0d1b9cf0c9
Bump next from 16.3.5 to 16.3.6
...
Bumps [next](https://github.com/vercel/next.js ) from 16.3.5 to 16.3.6.
- [Release notes](https://github.com/vercel/next.js/releases )
- [Commits](https://github.com/vercel/next.js/compare/v16.3.5...v16.3.6 )
---
updated-dependencies:
- dependency-name: next
dependency-version: 16.3.6
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-01 13:08:22 +00:00
Owen Schwartz
9d5133f679
Merge pull request #3834 from fosrl/dependabot/npm_and_yarn/moment-2.31.0
...
Bump moment from 2.30.1 to 2.31.0
2026-10-01 09:07:03 -04:00
Owen Schwartz
27e0f00d65
Merge pull request #3838 from kdcokenny/fix/traefik-ipv6-targets
...
fix: use formatEndpoint for local targets
2026-10-01 09:06:18 -04:00
kdcokenny
8c3d0bd7f6
fix: use formatEndpoint for local targets
2026-09-30 20:27:27 +00:00
Owen
8ff05c0ec3
Start pulling cert at 15 days (due to cert update)
2026-09-30 14:01:17 -04:00
dependabot[bot]
c7fe4d4560
Bump moment from 2.30.1 to 2.31.0
...
Bumps [moment](https://github.com/moment/moment ) from 2.30.1 to 2.31.0.
- [Release notes](https://github.com/moment/moment/releases )
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md )
- [Commits](https://github.com/moment/moment/compare/2.30.1...2.31.0 )
---
updated-dependencies:
- dependency-name: moment
dependency-version: 2.31.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-30 14:55:57 +00:00
Owen Schwartz
a235635d9e
Merge pull request #3833 from fosrl/dev
...
1.24.0
1.24.0
2026-09-30 10:54:36 -04:00
Owen Schwartz
a7420214d3
Merge pull request #3832 from fosrl/l10n_dev
...
New Crowdin updates
2026-09-30 10:37:19 -04:00
Owen Schwartz
4e7f841010
New translations en-us.json (Norwegian Bokmal)
...
[ci skip]
2026-09-30 10:36:29 -04:00
Owen Schwartz
b4080517df
New translations en-us.json (Chinese Simplified)
...
[ci skip]
2026-09-30 10:36:26 -04:00
Owen Schwartz
8c7fba8353
New translations en-us.json (Turkish)
...
[ci skip]
2026-09-30 10:36:23 -04:00
Owen Schwartz
532a0c0537
New translations en-us.json (Russian)
...
[ci skip]
2026-09-30 10:36:21 -04:00
Owen Schwartz
dcbf0ffc3b
New translations en-us.json (Portuguese)
...
[ci skip]
2026-09-30 10:36:18 -04:00
Owen Schwartz
a9f86bcc47
New translations en-us.json (Polish)
...
[ci skip]
2026-09-30 10:36:16 -04:00
Owen Schwartz
14eb3e2483
New translations en-us.json (Dutch)
...
[ci skip]
2026-09-30 10:36:13 -04:00
Owen Schwartz
354a5fc6f4
New translations en-us.json (Korean)
...
[ci skip]
2026-09-30 10:36:10 -04:00
Owen Schwartz
f2be93b8f6
New translations en-us.json (Italian)
...
[ci skip]
2026-09-30 10:36:07 -04:00
Owen Schwartz
7c40bc2ea0
New translations en-us.json (German)
...
[ci skip]
2026-09-30 10:36:04 -04:00
Owen Schwartz
b442591557
New translations en-us.json (Danish)
...
[ci skip]
2026-09-30 10:36:01 -04:00
Owen Schwartz
49085e1319
New translations en-us.json (Czech)
...
[ci skip]
2026-09-30 10:35:59 -04:00
Owen Schwartz
88396d0ada
New translations en-us.json (Bulgarian)
...
[ci skip]
2026-09-30 10:35:56 -04:00
Owen Schwartz
601534a313
New translations en-us.json (Spanish)
...
[ci skip]
2026-09-30 10:35:54 -04:00
Owen Schwartz
b3384703e5
New translations en-us.json (French)
...
[ci skip]
2026-09-30 10:35:51 -04:00
miloschwartz
836cd56969
add book demo link
2026-09-29 17:09:27 -04:00
miloschwartz
a46fc531d4
show exit nodes in resource launcher
2026-09-29 17:05:07 -04:00
Owen
c0c0cfb18a
Support exit-node as an alias for gateway type private resources
2026-09-29 13:59:46 -04:00
Owen
008e2600c6
Make dropdown longer
2026-09-29 11:50:46 -04:00