fix(deps): resolve all open Dependabot alerts across next, sharp, js-yaml, nodemailer and csv-parse - #7659

Merged

waleedlatif1 merged 6 commits into

fix/dependabot-2026-09

Sep 9, 2026

Commits on Sep 9, 2026

fix(deps): bump Next.js to 16.3.4 for two critical RCE advisories
waleedlatif1
committed
bb16a34
fix(deps): bump sharp to 0.35.4 for libheif RCE advisories
waleedlatif1
committed
175156f
fix(deps): bump js-yaml to 4.3.2 for merge-key CPU exhaustion
waleedlatif1
committed
02a7c2b
fix(deps): bump nodemailer to 9.1.1 for four address-handling advisories
waleedlatif1
committed
fc703d7
fix(deps): bump csv-parse to 7.0.2 for prototype replacement via columns
waleedlatif1
committed
e99f327
fix(deps): dedupe js-yaml so no 4.3.1 copy remains in the tree
waleedlatif1
committed
793f25f