Trivy bloqueó el build del frontend en el pipeline de CI: Next.js 15.5.10 tiene un RCE no autenticado en la API de optimización de imágenes vía archivos AVIF (CVE-2026-75604 / GHSA-2xp9-vwfh-vxw4), corregido en 15.5.24. Bump mínimo dentro del mismo minor, sin otros cambios de dependencias. Co-Authored-By: Claude Sonnet 5 <[email protected]> Claude-Session: https://claude.ai/code/session_01THZFwPzrwv6VAbuwmaf5vR
40 lines
1.0 KiB
JSON
40 lines
1.0 KiB
JSON
{
|
|
"name": "ari-shopping-headless-storefront",
|
|
"version": "4.1.0",
|
|
"private": true,
|
|
"scripts": {
|
|
"dev": "next dev --turbopack",
|
|
"build": "next build",
|
|
"start": "next start",
|
|
"lint": "eslint .",
|
|
"typecheck": "tsc --noEmit",
|
|
"check": "npm run typecheck && npm run lint && npm run build"
|
|
},
|
|
"dependencies": {
|
|
"@radix-ui/react-accordion": "1.2.12",
|
|
"@radix-ui/react-dialog": "1.1.15",
|
|
"@radix-ui/react-progress": "1.1.8",
|
|
"@radix-ui/react-slot": "1.2.3",
|
|
"class-variance-authority": "0.7.1",
|
|
"clsx": "2.1.1",
|
|
"lucide-react": "0.544.0",
|
|
"motion": "12.23.24",
|
|
"next": "15.5.24",
|
|
"react": "19.1.5",
|
|
"react-dom": "19.1.5",
|
|
"tailwind-merge": "3.3.1",
|
|
"zustand": "5.0.8"
|
|
},
|
|
"devDependencies": {
|
|
"@tailwindcss/postcss": "4.1.14",
|
|
"@types/node": "22.18.0",
|
|
"@types/react": "19.1.0",
|
|
"@types/react-dom": "19.1.0",
|
|
"eslint": "8.57.1",
|
|
"eslint-config-next": "15.5.10",
|
|
"postcss": "8.5.6",
|
|
"tailwindcss": "4.1.14",
|
|
"typescript": "5.9.3"
|
|
}
|
|
}
|