chore(deps): bump the next-react group across 1 directory with 4 updates#13
Open
dependabot[bot] wants to merge 1 commit into
Open
chore(deps): bump the next-react group across 1 directory with 4 updates#13dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ❌ Deployment failed View logs |
civia-inbox-handler | d0ae715 | Jun 29 2026, 06:22 AM |
andrei1000z
added a commit
that referenced
this pull request
Jun 6, 2026
…ransparență) Audit P0 #5 (gap #1 de transparență). Petițiile ascundeau numărul de semnături → cetățeanul nu vedea momentum. Migrarea adaugă petitii.external_signature_count + last_external_sync_at ca să stocăm numărul real din sursă (Declic/Avaaz), sincronizat periodic + afișat pe card/detaliu. DOAR migrarea (fișier) — o aplici în Supabase (harness-ul blochează DDL pe prod). Codul scraper + UI vine DUPĂ aplicare (altfel select pe coloană inexistentă = 400 pe prod). Detaliul petiției folosește deja select(*) → va prelua coloana. NB audit: #62 (CASCADE delete petitie→semnături) DEJA există (migrarea 020 are `on delete cascade`); #13 (materializare nr_cosigners) prematur la 62 rânduri. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/next-react-ce8e126776
branch
from
2ecd931 to
db19cb7
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/next-react-ce8e126776
branch
from
db19cb7 to
d3101d5
Compare
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/next-react-ce8e126776
branch
from
d3101d5 to
e4479ee
Compare
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/next-react-ce8e126776
branch
from
e4479ee to
03355fb
Compare
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/next-react-ce8e126776
branch
from
03355fb to
3703133
Compare
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/next-react-ce8e126776
branch
from
3703133 to
cf59188
Compare
Bumps the next-react group with 4 updates in the / directory: [next](https://github.com/vercel/next.js), [react](https://github.com/facebook/react/tree/HEAD/packages/react), [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) and [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next). Updates `next` from 16.2.6 to 16.2.9 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v16.2.6...v16.2.9) Updates `react` from 19.2.4 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `react-dom` from 19.2.4 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) Updates `eslint-config-next` from 16.2.2 to 16.2.9 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.2.9/packages/eslint-config-next) --- updated-dependencies: - dependency-name: eslint-config-next dependency-version: 16.2.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: next-react - dependency-name: next dependency-version: 16.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: next-react - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: next-react - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: next-react ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/next-react-ce8e126776
branch
from
cf59188 to
d0ae715
Compare
andrei1000z
added a commit
that referenced
this pull request
Jul 2, 2026
… + matching + stări + reziliență AI) SECURITATE - BLOCKER #1: auto-apply cerea încredere din From-ul spoofabil + poarta DKIM/ DMARC era opțională → oricine putea falsifica office@primarie.ro + cod PUBLIC și marca sesizarea altui cetățean. Acum auto-apply cere DOVADĂ: match token/ threading (secret) SAU DKIM/DMARC aliniat (authenticity.auth_aligned) - #20/#22 worker: păstrăm PRIMA apariție Authentication-Results (cea a Cloudflare), nu ultima → atacatorul nu mai injectează un A-R fals mai jos în mesaj - #19: scoreAiAuthenticity folosește cascada groqText (nu Groq brut) → 429 nu mai colapsează la 50 (care bloca auto-apply pt. senderi gov reali) MATCHING - #6 gardă N3: cod din sursă slabă fără coroborare (domeniu/sursă robustă) → medium nu high; cod care leagă o sesizare netrimisă/creată-după-reply → nu se leagă - #8 N4: fereastră 180z + order + limit server-side (nu mai lovea plafonul 1000) - #25/#32 extract-code: scos regex-ul care prindea primul token al oricărui Message-ID terț; nr. de înregistrare 12345/2026 nu mai e confundat cu cod - #26: content_score medium doar pe câștigător strict (fără tie arbitrar) STĂRI - #11/#13: ignorat (marcaj administrativ) nu mai înghite răspunsuri reale — orice status de răspuns îl supersedează - #12: mișcări laterale în tier activ (in-lucru->interventie) = progres, nu drop - #29: redirectionata poate supersedea inregistrata (redirect după înregistrare) - #30 auto-status: nu mai marchează ignorat sesizări niciodată-trimise (scos nou); cronometrează de la sent_at, nu created_at NOTIFICĂRI - #5: push-ul reflectă statusul CHIAR aplicat, nu clasificarea (gata Rezolvată fals) - #7: push doar pe match high-confidence (medium putea notifica alt cetățean = PII) - #15: auto_applied=true doar când un status se aplică efectiv (nu scapă din digest) REZILIENȚĂ AI - #27: cascada nu mai moare dacă lipsește GROQ_API_KEY (sare la Gemini/CF) - #10: timeout intern pe callGemini (18s) + pe SDK-ul PDF (25s) - #9: PDF scanat cu Gemini gol cade la Groq/CF vision (nu renunță) WORKER - #3/#17/#18: filtre soft (noreply@/Auto-Submitted/Precedence/List-Id) nu mai dropează confirmările de înregistrare — bypass când par răspuns de autoritate - #33: Message-ID sintetic determinist pt. emailuri fără unul → dedup la retry - #24: eroare tranzitorie de insert → retry (dedup-safe), nu pierdere tăcută - #28/#31: received_at/official_response_at = ora emailului, nu ora procesării +14 teste noi (computeStatusUpdate ignorat/lateral/redirect, extract-code guards, matchReply N3). worker v4.3.0. 1161 teste, tsc 0, eslint 0. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the next-react group with 4 updates in the / directory: next, react, react-dom and eslint-config-next.
Updates
nextfrom 16.2.6 to 16.2.9Release notes
Sourced from next's releases.
Commits
f37fad9v16.2.9d9aaaed[cd] Allow tagging semver-lower releases as@latestif@latestpo… (#94627)6f16804v16.2.80dbc1d5[16.2.x][cd] Ensure release can be triggered on old branches (#94598)90e3c81[16.2.x] Align Actions dependencies with Canary (#94339)83f402c[16.2.x][cd] Stop fetching all tags when searching parent tag (#94334)411c455v16.2.7c63224f[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolut...63115c7[16.2.x] Don't dropFormDataentries (#94240)aef22fd[backport] Propagate adapter preferred regions (#94200)Updates
reactfrom 19.2.4 to 19.2.7Release notes
Sourced from react's releases.
Commits
6117d7cVersion 19.2.7 (#36591)eaf3e95Version 19.2.623f4f9f19.2.5Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.
Updates
react-domfrom 19.2.4 to 19.2.7Release notes
Sourced from react-dom's releases.
Commits
6117d7cVersion 19.2.7 (#36591)eaf3e95Version 19.2.623f4f9f19.2.5Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.
Updates
eslint-config-nextfrom 16.2.2 to 16.2.9Release notes
Sourced from eslint-config-next's releases.
... (truncated)
Commits
f37fad9v16.2.96f16804v16.2.8411c455v16.2.7ee6e79bv16.2.6766148fv16.2.52275bd8v16.2.4d5f649bv16.2.3Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for eslint-config-next since your current version.