This repository was archived by the owner on Oct 2, 2026. It is now read-only.
Repository navigation
Release v0.5.7 - #49
Merged
Merged
Conversation
The notes pipelex-method-apps' ignored wip/ held now live in the workspace's own wip repository, so the .gitignore line goes. Campaign documents never land in this repo, and the workspace guard refuses a write into a wip/ here. Closes L-260928-dc3ffc 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01D8etyChjSew3E5gJtojj8M <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Removes the `/wip/` entry from `.gitignore` since the planning notes it protected now live in the workspace's own wip repository. Campaign documents never land in this repo, and the workspace guard already prevents writes into a `wip/` directory here. Closes L-260928-dc3ffc. <sup>Written for commit 4f9cf5b. Summary will update on new commits.</sup> <a href="https://cubic.dev/pr/Pipelex/pipelex-method-apps/pull/47?utm_source=github" target="_blank" rel="noopener noreferrer" data-no-image-dialog="true"><picture><source media="(prefers-color-scheme: dark)" srcset="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source media="(prefers-color-scheme: light)" srcset="https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img alt="Review in cubic" src="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"></picture></a> <!-- End of auto-generated description by cubic. --> Co-authored-by: Claude Opus 5.5 <[email protected]>
The web app template's lock resolved next 16.3.5, inside the range of the critical Next.js advisory GHSA-vcvr-r3jv-pc5j (remote code execution in `next/og`'s `ImageResponse`, fixed in 16.3.6). The template does not import `next/og`, but every project made from it inherits the lock, so `next` and `eslint-config-next` move to `^16.3.8` and `npm audit fix` re-locks the transitive `brace-expansion` and `fast-uri` advisories, leaving `npm audit` clean. Closes L-261001-8540e1 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01PCf9tysTErgWaFcPZW1vPY <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Bumps the web app template's `next` and `eslint-config-next` from 16.3.5 to `^16.3.8` to move past the critical advisory GHSA-vcvr-r3jv-pc5j (remote code execution in `next/og`'s `ImageResponse`, fixed in 16.3.6). The template does not import `next/og`, but projects created from it inherit the lock and could. Also re-locks the transitive `brace-expansion` and `fast-uri` advisories so `npm audit` stays clean. Closes L-261001-8540e1. <sup>Written for commit 7948bb6. Summary will update on new commits.</sup> <a href="https://cubic.dev/pr/Pipelex/pipelex-method-apps/pull/48?utm_source=github" target="_blank" rel="noopener noreferrer" data-no-image-dialog="true"><picture><source media="(prefers-color-scheme: dark)" srcset="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source media="(prefers-color-scheme: light)" srcset="https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img alt="Review in cubic" src="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"></picture></a> <!-- End of auto-generated description by cubic. --> Co-authored-by: Claude Opus 5.5 <[email protected]>
Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01PCf9tysTErgWaFcPZW1vPY
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
![https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source](https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source){kind=link}
![https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img](https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img){kind=link}
![https://www.cubic.dev/buttons/review-in-cubic-dark.svg"></picture></a](https://www.cubic.dev/buttons/review-in-cubic-dark.svg"></picture></a){kind=link}
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release v0.5.7
Bumps version from
0.5.6to0.5.7. Promotesdev→main.Changelog
Security
nextandeslint-config-nextat^16.3.8and locks 16.3.8, past the critical remote-code-execution advisory innext/og'sImageResponsethat affects Next.js 16.2.0 through 16.3.5 (GHSA-vcvr-r3jv-pc5j). The template does not importnext/og, but a project made from it inherits the lock and could. The lock also takes the patchedbrace-expansionandfast-uri, sonpm auditreports nothing.Closes L-261001-2be22c
🤖 Generated with Claude Code
https://claude.ai/code/session_01PCf9tysTErgWaFcPZW1vPY
Summary by cubic
Releases v0.5.7, promoting
dev→mainand bumping the version from 0.5.6 across all packages.Security
nextandeslint-config-nextto^16.3.8, past the critical remote-code-execution advisory innext/og'sImageResponse(GHSA-vcvr-r3jv-pc5j, affects 16.2.0–16.3.5).next/og, but projects made from it inherit the lock and could.brace-expansionandfast-urisonpm auditreports nothing.Removes the
/wip/entry from.gitignore; the planning notes it protected now live in the workspace's own wip repository.Written for commit 3a7d877. Summary will update on new commits.