Merge pull request #218 from nvroot/main

Fix CVE-2025-66478

Author: zhjch05

Dockerfile

@@ -49,8 +49,8 @@ COPY . .
 RUN pnpm build
 
 RUN sed -i -e "s/30000/600000/" \
-    "node_modules/.pnpm/next@15.5.2_react-dom@19.1.0_react@19.1.0__react@19.1.0/node_modules/next/dist/server/lib/router-utils/proxy-request.js" \
-    "node_modules/.pnpm/next@15.5.2_react-dom@19.1.0_react@19.1.0__react@19.1.0/node_modules/next/dist/esm/server/lib/router-utils/proxy-request.js"
+    "node_modules/.pnpm/next@15.4.8_react-dom@19.1.2_react@19.1.2__react@19.1.2/node_modules/next/dist/server/lib/router-utils/proxy-request.js" \
+    "node_modules/.pnpm/next@15.4.8_react-dom@19.1.2_react@19.1.2__react@19.1.2/node_modules/next/dist/esm/server/lib/router-utils/proxy-request.js"
 
 # Production runner stage
 FROM base AS runner

apps/frontend/package.json

@@ -42,13 +42,13 @@
     "clsx": "^2.1.1",
     "date-fns": "^4.1.0",
     "lucide-react": "^0.515.0",
-    "next": "^15.4.7",
+    "next": "^15.4.8",
     "next-runtime-env": "^3.3.0",
     "next-themes": "^0.4.6",
     "postcss": "^8.5.6",
     "prismjs": "^1.30.0",
-    "react": "^19.1.0",
-    "react-dom": "^19.1.0",
+    "react": "^19.1.2",
+    "react-dom": "^19.1.2",
     "react-hook-form": "^7.58.0",
     "react-syntax-highlighter": "^15.6.1",
     "sonner": "^2.0.5",
@@ -62,8 +62,8 @@
     "@repo/eslint-config": "workspace:*",
     "@repo/typescript-config": "workspace:*",
     "@types/node": "^22.15.3",
-    "@types/react": "19.1.0",
-    "@types/react-dom": "19.1.1",
+    "@types/react": "19.1.2",
+    "@types/react-dom": "19.1.2",
     "eslint": "^9.28.0",
     "tw-animate-css": "^1.3.4",
     "typescript": "5.8.2"