Repository navigation
fix: harden site and admin reliability - #28
Merged
Merged
Conversation
- Upgrade Next.js, Zod, and the formatter to patched releases - Refresh vulnerable transitive dependencies - Audit development dependencies and all severities in CI
- Document automatic merging after review and passing checks - Align audit instructions with the complete CI dependency scan
- Keep mobile request dialogs open through menu and viewport changes - Derive scroll locks from open dialogs and visible mobile menus - Handle blocked theme storage and sync saved choices across tabs - Add isolated public browser regression checks
- Ignore repeated list filters instead of crashing admin pages - Trim emails before validation for inquiries and customer edits
- Dispatch form actions explicitly to prevent automatic resets on errors - Keep successful compose resets and verify failed customer edits retain input
- Check mobile dialogs, theme storage, and resize behavior after the production build - Document isolated browser verification without database credentials
- Return temporary-unavailable status for failed auth and membership reads - Keep login sessions active until ownership can be checked - Verify outage recovery and unauthorized denial with a local gateway harness
- Exercise auth and membership outages with a local mock service - Check invalid sessions and non-owners still lose access
- Run the local app from a temporary copy of tracked source - Exclude environment files and inherit only process runtime settings - Remove temporary server files without touching active development servers
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This was referenced Oct 27, 2026
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Fix security and reliability issues found in the dependency, frontend, and backend review.
Changes
Why
The review reproduced broken mobile requests, hydration failures, trapped scrolling, admin page crashes, lost edits, and unnecessary sign-outs. Existing dependency vulnerabilities also blocked both pending PRs.
Testing
Notes
No database migration. Authenticated Supabase end-to-end tests require a separate configured test environment and were not run against live accounts. Session failure behavior is verified against a local mock service.
Preview has no environment variables configured, so its backend health endpoint returns 503 on both the previous and current deployments. Production health returns 200 with status ready. Preview build and isolated integration checks pass.