supermemory/apps/web
Cursor Agent c7cac0f226
fix(deps): bump apps/web next to ^16.3.3 and @opennextjs/cloudflare to ^1.20.6
Clears the two critical Next.js RCE advisories (GHSA-p293-qw3h-jr36 /
CVE-2026-75604 and GHSA-2xp9-vwfh-vxw4) for the production web app.

apps/web pinned next ^16.0.11, which the root lock resolved to next@16.1.6
- inside the vulnerable range (>=16.0.0,<16.3.3) both advisories name. Bump
the pin to ^16.3.3 (resolves to next@16.3.4, above both first_patched_version
thresholds) and move the OpenNext Cloudflare adapter to ^1.20.6, whose peer
range accepts next >=16.3.3.

Co-authored-by: Dhravya Shah <dhravya@supermemory.com>
2026-09-10 02:19:49 +00:00
..
app chore(web): reduce the app to a redirect shell, drop the browser extension (#1651) 2026-09-07 19:56:46 +00:00
public chore(web): reduce the app to a redirect shell, drop the browser extension (#1651) 2026-09-07 19:56:46 +00:00
.env.example chore(web): reduce the app to a redirect shell, drop the browser extension (#1651) 2026-09-07 19:56:46 +00:00
.gitignore sentry sourcemaps 2025-08-23 09:55:40 -07:00
biome.json feat: mobile responsive, lint formats, toast, render issue fix (#688) 2026-01-21 03:11:53 +00:00
console-origin.ts chore(web): reduce the app to a redirect shell, drop the browser extension (#1651) 2026-09-07 19:56:46 +00:00
middleware.ts chore(web): reduce the app to a redirect shell, drop the browser extension (#1651) 2026-09-07 19:56:46 +00:00
next.config.ts chore(web): reduce the app to a redirect shell, drop the browser extension (#1651) 2026-09-07 19:56:46 +00:00
open-next.config.ts feat: mobile responsive, lint formats, toast, render issue fix (#688) 2026-01-21 03:11:53 +00:00
package.json fix(deps): bump apps/web next to ^16.3.3 and @opennextjs/cloudflare to ^1.20.6 2026-09-10 02:19:49 +00:00
README.md chore(web): reduce the app to a redirect shell, drop the browser extension (#1651) 2026-09-07 19:56:46 +00:00
tsconfig.json fix 2026-02-09 22:07:09 -08:00
wrangler.jsonc feat: mobile responsive, lint formats, toast, render issue fix (#688) 2026-01-21 03:11:53 +00:00

@repo/web

Serves app.supermemory.ai. Every request is forwarded to the console: plugin and OAuth paths get an immediate redirect with the query string intact, and everything else shows a short notice before moving on.

Set NEXT_PUBLIC_CONSOLE_URL to point at a different console origin during local development.