Skip to content

[pull] master from cube-js:master#308

Merged
pull[bot] merged 4 commits intocode:masterfrom
cube-js:master
Feb 16, 2026
Merged

[pull] master from cube-js:master#308
pull[bot] merged 4 commits intocode:masterfrom
cube-js:master

Conversation

@pull
Copy link

@pull pull bot commented Feb 16, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

keydunov and others added 4 commits February 16, 2026 15:07
)

Pin next-mdx-remote to 4.2.1 via Yarn resolutions to mitigate a
critical RCE vulnerability (CVE-2026-0969) affecting versions 4.3.0
through 5.0.0. Version 4.2.1 is outside the vulnerable range and
remains compatible with nextra 2.x.

Co-authored-by: Cursor <cursoragent@cursor.com>
 (#10397)"

This reverts commit ed5d4df as Vercel only treats next-mdx-remote 6.0.0+ as non-vulnerable to said CVE
@pull pull bot locked and limited conversation to collaborators Feb 16, 2026
@pull pull bot added the ⤵️ pull label Feb 16, 2026
@pull pull bot merged commit 11a140f into code:master Feb 16, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants