[benthecoder]

Clears every open Dependabot alert (#230, #233–#236, #239).

package	severity	where	change
zod	high: memory exhaustion validating oversized input	runtime, validates the public /api/search body and places data	4.6.5 → 4.6.6, plus an override so dev tooling's copy (eslint-plugin-react-hooks, knip) also resolves to 4.6.6
sanitize-html	medium: unbounded recursion	runtime, the RSS feeds	^2.18.0 → ^2.18.1
@vitest/mocker	medium ×2	dev	vitest ^4.1.11 → ^4.1.12
undici	high: DoS	dev, via the ai SDK	override → >=7.30.1 <8, matching the existing overrides in pnpm-workspace.yaml

Patch-level bumps only. After rebasing on current main: tsc, 592 tests and knip pass, and a full next build passed on the pre-rebase branch (exit 0). pnpm why shows a single resolved version of each. Nothing to set up.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
blog	Ignored	Preview	Oct 28, 2026 3:23pm UTC