Security Update: Upgrade Next.js and React to fix critical vulnerabilities (CVE-2025-66478, CVE-2025-55182) - #93
Open
mashharuki wants to merge 3 commits into
Open
StepSecurity Actions Security / StepSecurity Required Checks
succeeded
Dec 11, 2025 in 6s
StepSecurity Required Checks
Finished StepSecurity Required Checks
- NPM Compromised Packages Check - Checks for compromised npm package versions in the PR
- NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases
Details
✅ NPM Compromised Packages Check
No Compromised npm packages are added in current PR.
✅ NPM Package Cooldown Check
No npm package upgrades to recent releases found in current PR.
The following npm packages are inspected in current PR (showing first 10 of 126 packages)
⏲️ History
Previous invocation results of same check:
Run 57799303487 — success (2026-08-12T11:16:45Z)
✅ NPM Compromised Packages Check
No Compromised npm packages are added in current PR.
✅ NPM Package Cooldown Check
No npm package upgrades to recent releases found in current PR.
The following npm packages are inspected in current PR (showing first 10 of 126 packages)
Run 57799303487 — success (2026-08-11T12:33:04Z)
✅ NPM Compromised Packages Check
No Compromised npm packages are added in current PR.
✅ NPM Package Cooldown Check
No npm package upgrades to recent releases found in current PR.
The following npm packages are inspected in current PR (showing first 10 of 126 packages)
Loading