@payloadcms/next@3.90.2 peer-requires next <15.5.0; 15.5.27 was an
unsupported combo. Owner chose the pin + documented risk (SECURITY.md
§8). Transitive overrides (undici/sharp/postcss/sass) stay.
Gate skipped: parallel session WIP still in tree.
ahmed
merged commit 36f508df75 into main2026-10-13 06:02:51 +03:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Follow-up to #5. @payloadcms/next@3.90.2 peer-requires next <15.5.0 (or >=16.3.3) — 15.5.27 was an unsupported CMS combo. Owner decision 2026-10-13: keep the Payload-supported pin and record the risk (SECURITY.md §8: exposure analysis — no remotePatterns configured, dynamic SSR; revisit trigger: Payload peer support / Payload 4 / RCE-class advisory). Transitive overrides (undici 8.11.2, sharp 0.35.5, postcss 8.5.30, sass 1.105.1) remain.