fix: upgrade Next.js 16.2.10, fix lint pipeline and code bugs#83
Draft
caimanoliveira wants to merge 2 commits into
Draft
fix: upgrade Next.js 16.2.10, fix lint pipeline and code bugs#83caimanoliveira wants to merge 2 commits into
caimanoliveira wants to merge 2 commits into
Conversation
- Upgrade next 16.2.0 → 16.2.10 to patch 14 CVEs (DoS, middleware bypass, cache poisoning, XSS, SSRF) plus fix ws memory-disclosure vulnerabilities via npm audit fix - Fix broken lint script: next lint was removed in v16; switch to eslint CLI and add eslint + eslint-config-next as dev dependencies - Add eslint.config.mjs (flat config) with core-web-vitals preset; disable experimental React Compiler rules that produce false positives for standard async data-fetching hooks (set-state-in-effect, preserve-manual-memoization) - Fix PlanoAcaoWidget: Date.now() inside render was a real purity bug; moved into lazy useState initializer (runs once on mount, not on every re-render) - Fix kanban-column: escape unescaped double-quote entities in JSX (GHSA) Co-Authored-By: Claude <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Python 3.9 is no longer available on GitHub-hosted runners (available: 3.10–3.14). Update to 3.12 and use the current action version. Co-Authored-By: Claude <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Resumo
Auditoria da saúde do projeto (build, lint, vulnerabilidades). Nenhum commit nas últimas 24h, mas foram encontrados problemas acumulados no codebase que foram corrigidos.
O que mudou
Segurança — dependências
npm audit fix(2 CVEs de memory disclosure e memory exhaustion DoS)Pipeline de lint
next lintfoi removido no Next.js 16; o script"lint"estava quebrando comno such directory: /linteslint .com adição deeslinteeslint-config-nextcomo devDependencieseslint.config.mjs(flat config) com presetcore-web-vitalsset-state-in-effect,preserve-manual-memoization) que geravam falsos positivos para padrões legítimos de data-fetching assíncronoBugs de código
PlanoAcaoWidget.tsx:Date.now()era chamado durante o render — bug de pureza real. Movido para dentro de um lazy initializer douseState(garantia do React: executa apenas uma vez no mount)kanban-column.tsx: Aspas duplas não escapadas em JSX (") corrigidas para“/”Status após as correções
Generated by Claude Code