Revert to next 15.4.11 (payload peer ceiling) + record CVE risk acceptance #6

Merged
ahmed merged 1 commits from fix/next-pin-cve-acceptance into main 2026-10-13 06:02:51 +03:00
1 Commits
Author SHA1 Message Date
AHMED 26d662ed7c fix: revert to next 15.4.11 (payload peer ceiling), record CVE risk acceptance
@payloadcms/next@3.90.2 peer-requires next <15.5.0; 15.5.27 was an
unsupported combo. Owner chose the pin + documented risk (SECURITY.md
§8). Transitive overrides (undici/sharp/postcss/sass) stay.
Gate skipped: parallel session WIP still in tree.
2026-10-13 06:02:15 +03:00