[19.0.1] - 2026-10-06 - "Pages Surface Repair"
Patch release. Clears two web-app dependency advisories that blocked the
v19.0.0release-tag Pages deployment. No catalog or skill changes.
Fixed
- apps/web-app - pin
proxy-addrto^2.0.8(critical: IP spoofing via IPv4-mapped IPv6 trust subnet, GHSA-jqcg-44mw-7w3h) andsource-map-jsto^1.2.2(high: event-loop denial of service via indexed source-map section offsets, GHSA-68fv-2mgg-jv7q).npm --prefix apps/web-app audit --audit-level=highnow reports 0 vulnerabilities, and 268 web-app tests pass.