sepehr/Keep
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix(deps): resolve nodemailer peer dependency conflict with next-auth

Browse Source 
Add nodemailer override to force v8.0.4+ across the dependency tree,
fixing the ERESOLVE conflict with next-auth@5.0.0-beta.30 and
eliminating the SMTP command injection vulnerability (GHSA-c7w3-x93f-qmm8).

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Sepehr Ramezani
2026-03-29 09:51:05 +02:00
parent 9eb3bd912a
commit 789ccfd081
2 changed files with 2494 additions and 3146 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5631
keep-notes/package-lock.json generated
View File

File diff suppressed because it is too large Load Diff

7
keep-notes/package.json
View File

@@ -52,7 +52,7 @@
"muuri": "^0.9.5", "muuri": "^0.9.5",
"next": "^16.1.6", "next": "^16.1.6",
"next-auth": "^5.0.0-beta.30", "next-auth": "^5.0.0-beta.30",
"nodemailer": "^7.0.12", "nodemailer": "^8.0.4",
"postcss": "^8.5.6", "postcss": "^8.5.6",
"react": "19.2.3", "react": "19.2.3",
"react-dom": "19.2.3", "react-dom": "19.2.3",
@@ -81,11 +81,16 @@
"@types/react": "^19", "@types/react": "^19",
"@types/react-dom": "^19", "@types/react-dom": "^19",
"@vitest/coverage-v8": "^4.0.18", "@vitest/coverage-v8": "^4.0.18",
"agentation": "^3.0.2",
"prisma": "^5.22.0", "prisma": "^5.22.0",
"tailwindcss": "^4.0.0", "tailwindcss": "^4.0.0",
"tsx": "^4.21.0", "tsx": "^4.21.0",
"tw-animate-css": "^1.4.0", "tw-animate-css": "^1.4.0",
"typescript": "5.9.3", "typescript": "5.9.3",
"vitest": "^4.0.18" "vitest": "^4.0.18"
},
"overrides": {
"serialize-javascript": "^7.0.5",
"nodemailer": "^8.0.4"
} }
} }