What's Changed
Security Fixes
- Upgrade Next.js from 15.3.1 to 15.3.8 to patch critical React Server Components vulnerabilities:
- CVE-2025-66478: Remote Code Execution via crafted RSC requests (CVSS 10.0, Critical)
- CVE-2025-55184 / CVE-2025-67779: Denial of Service via infinite loop (High)
- CVE-2025-55183: Source code exposure of Server Functions (Medium)
Bug Fixes
- Add
p-tryas explicit devDependency to fix missing module error in CI test runs after Next.js upgrade
Helm Chart
- Chart version
0.3.3, appVersion1.7.5
Reference: https://nextjs.org/blog/security-update-2025-12-11
Full Changelog: v1.7.4...v1.7.5
What's Changed
- fix: upgrade Next.js to 15.3.8 (critical security CVEs) by @alexanderwanyoike in #162
- Release v1.7.5 by @alexanderwanyoike in #163
Full Changelog: v1.7.4...v1.7.5