Skip to content

Patch vulnerable Next.js and Swiper versions across workspaces#49

Draft
Copilot wants to merge 2 commits intomainfrom
copilot/address-security-vulnerabilities-again
Draft

Patch vulnerable Next.js and Swiper versions across workspaces#49
Copilot wants to merge 2 commits intomainfrom
copilot/address-security-vulnerabilities-again

Conversation

Copy link

Copilot AI commented Mar 12, 2026

This PR addresses known security vulnerabilities in workspace dependencies. It removes vulnerable next and swiper versions from affected packages and updates the lockfile accordingly.

  • Dependency security remediations

    • Bumped next in kit packages:
      • packages/dusk-kit: 15.3.815.3.9
      • packages/mist-kit: 15.3.815.3.9
      • packages/veil-kit: 15.3.815.3.9
    • Bumped swiper in affected packages:
      • apps/www: ^11.2.4^12.1.2
      • packages/dusk-kit: ^11.2.4^12.1.2
  • Lockfile alignment

    • Regenerated pnpm-lock.yaml to resolve and pin the updated dependency graph.
  • Example manifest delta

    {
      "dependencies": {
        "next": "15.3.9",
        "swiper": "^12.1.2"
      }
    }

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • fonts.googleapis.com
    • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node node /home/REDACTED/work/blocks/blocks/apps/www/node_modules/.bin/../next/dist/bin/next build (dns block)
    • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node node /home/REDACTED/work/blocks/blocks/apps/www/node_modules/.bin/../next/dist/bin/next build conntrack --ctstate INVALID,NEW -j DROP pull.rebase (dns block)

If you need me to access, download, or install something from one of these locations, you can either:


💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

@vercel
Copy link
Contributor

vercel bot commented Mar 12, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
tailark-blocks Ready Ready Preview, Comment Mar 12, 2026 6:40am

Request Review

Co-authored-by: Meschacirung <47919550+Meschacirung@users.noreply.github.com>
Copilot AI changed the title [WIP] Fix all security vulnerabilities Patch vulnerable Next.js and Swiper versions across workspaces Mar 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants