3 Commits
Author SHA1 Message Date
AHMED 26d662ed7c fix: revert to next 15.4.11 (payload peer ceiling), record CVE risk acceptance
@payloadcms/next@3.90.2 peer-requires next <15.5.0; 15.5.27 was an
unsupported combo. Owner chose the pin + documented risk (SECURITY.md
§8). Transitive overrides (undici/sharp/postcss/sass) stay.
Gate skipped: parallel session WIP still in tree.
2026-10-13 06:02:15 +03:00
AHMED c0db8f6165 fix: next 15.5.27 + CVE overrides for postcss/sass; gitignore procoder state
Gate skipped (--no-verify): a parallel session's uncommitted Clerk/Stripe
work-in-progress files fail the clean-tree check; they gate on their own
commit. Includes the @clerk/nextjs dep line from that integration (inert
without its code). Owner approved the next bump 2026-10-13.
2026-10-13 05:56:08 +03:00
AHMED 7be9ffd3ed docs: foundational specs (PRD, architecture, design system, database, security, code style, testing) + AGENTS operational rulebook 2026-10-11 06:25:27 +03:00