Cursor Agent c7cac0f226 fix(deps): bump apps/web next to ^16.3.3 and @opennextjs/cloudflare to ^1.20.6 ... Clears the two critical Next.js RCE advisories (GHSA-p293-qw3h-jr36 / CVE-2026-75604 and GHSA-2xp9-vwfh-vxw4) for the production web app. apps/web pinned next ^16.0.11, which the root lock resolved to next@16.1.6 - inside the vulnerable range (>=16.0.0,<16.3.3) both advisories name. Bump the pin to ^16.3.3 (resolves to next@16.3.4, above both first_patched_version thresholds) and move the OpenNext Cloudflare adapter to ^1.20.6, whose peer range accepts next >=16.3.3. Co-authored-by: Dhravya Shah <dhravya@supermemory.com>		2026-09-10 02:19:49 +00:00
..
docs	chore(web): reduce the app to a redirect shell, drop the browser extension (#1651)	2026-09-07 19:56:46 +00:00
mcp	fix(mcp): let getDocument read any accessible document (#1641)	2026-09-02 21:49:57 +00:00
memory-graph-playground	fix: add type checks for TypeScript workspaces (#1447)	2026-08-13 17:55:50 +05:30
raycast-extension	fix(mcp): bound tool inputs and scope get_document to the active space (#1593)	2026-08-24 21:36:04 +00:00
sdk-playground	feat(sdk-playground): reflect SDK-owned memory block in debug view (#1533)	2026-09-01 06:10:37 +00:00
web	fix(deps): bump apps/web next to ^16.3.3 and @opennextjs/cloudflare to ^1.20.6	2026-09-10 02:19:49 +00:00