[acamarata]

Fixed

Package	Old	New	Alerts
decode-uri-component	0.5.0	0.5.1	#93
qs	6.16.0	6.16.1	#90
satori (via @vercel/og 1.0.0 -> 1.0.3)	0.0.46	0.33.5	#89

Changes: pnpm overrides in root package.json (decode-uri-component, qs, satori, @vercel/og), web bumps @vercel/og to 1.0.3, lockfile regenerated with pnpm 10.30.1 against the pinned .github/packages-ref. Package version untouched.

Skipped

• fix(ci): make doc-audit autofix strictly opt-in #92 @hono/node-server (1.19.17, patched only in 2.1.3): major bump, and @modelcontextprotocol/sdk 1.32.1 depends on the 1.x line. Needs an SDK release that supports 2.x.
• fix(ci): install nself audit tool to a user-writable path, not /usr/local/bin #91 deepmerge (4.3.1): no patched version exists upstream.
• fix(security): clear 43 of 45 OSV dependency vulnerabilities #86, fix(ci): correct nself release tarball extraction in quarterly-doc-audit #87, ci(android): gate release on assetlinks.json fingerprint #88 zip (4.6.1, patched in 9.0.5): pulled in by tauri-plugin-updater 2.10.1, which requires zip ^4. cargo update -p zip --precise 9.0.5 fails. Only an updater 3.0.0-alpha line would fix it.

Verification

• pnpm install --frozen-lockfile: ok
• web: pnpm build ok, pnpm lint 0 errors (1 existing warning), pnpm test 461/461 pass
• pnpm type-check: 71 errors, all in the external packages/ clone (no deps installed there in my sandbox); none in repo sources

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
ntask-web	Ignored	Preview	Oct 30, 2026 10:25am UTC