Skip to content

Merge from main branch to next branch - #193

Merged
SOURAV-ROY merged 276 commits into
v2-nextfrom
SOURAV
Oct 10, 2026
Merged

SOURAV-ROY merged 276 commits into
v2-nextfrom
SOURAV

Conversation

@SOURAV-ROY

Copy link
Copy Markdown
Owner

Merge from main branch to next branch

SOURAV-ROY and others added 30 commits November 28, 2025 18:07
feat: Add project flow documentation
…es, and implement new authentication and CSRF tests.
feat: Refactor Swagger documentation
feat: Refactor Swagger documentation, add example environment variables
docs: Add comprehensive API reference documentation and update express
docs: Add comprehensive API reference documentation and update express
…dates

Bumps the npm_and_yarn group with 2 updates in the / directory: [nodemailer](https://github.com/nodemailer/nodemailer) and [jws](https://github.com/brianloveswords/node-jws).


Updates `nodemailer` from 7.0.7 to 7.0.11
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v7.0.7...v7.0.11)

Updates `jws` from 3.2.2 to 3.2.3
- [Release notes](https://github.com/brianloveswords/node-jws/releases)
- [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md)
- [Commits](auth0/node-jws@v3.2.2...v3.2.3)

---
updated-dependencies:
- dependency-name: nodemailer
  dependency-version: 7.0.11
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: jws
  dependency-version: 3.2.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
docs: Add System Design documentation and update README with new sections
docs: Add System Design documentation and update README
…d_yarn-2ce7bc6983

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates
…dates

Bumps the npm_and_yarn group with 2 updates in the / directory: [lodash](https://github.com/lodash/lodash) and [qs](https://github.com/ljharb/qs).


Updates `lodash` from 4.17.21 to 4.17.23
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.17.23)

Updates `qs` from 6.14.0 to 6.14.1
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.14.0...v6.14.1)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.14.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
…d_yarn-f815bbaa3f

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates
Bumps the npm_and_yarn group with 1 update in the / directory: [qs](https://github.com/ljharb/qs).


Updates `qs` from 6.14.1 to 6.14.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.14.1...v6.14.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
…d_yarn-14dc0ebc5a

chore(deps): bump qs from 6.14.1 to 6.14.2 in the npm_and_yarn group across 1 directory
…date

Bumps the npm_and_yarn group with 1 update in the / directory: [minimatch](https://github.com/isaacs/minimatch).


Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `minimatch` from 8.0.4 to 8.0.7
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `minimatch` from 9.0.5 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 8.0.7
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 9.0.9
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
…d_yarn-ca6a5e633f

chore(deps): bump the npm_and_yarn group across 1 directory with 1 update
Merge pull request #72 from SOURAV-ROY/v2
docs: Add comprehensive system design documentation and an environment variable example.
Bumps the npm_and_yarn group with 1 update in the / directory: [picomatch](https://github.com/micromatch/picomatch).


Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
…d_yarn-66413a1f6e

chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 in the npm_and_yarn group across 1 directory
…dates

Bumps the npm_and_yarn group with 2 updates in the / directory: [nodemailer](https://github.com/nodemailer/nodemailer) and [path-to-regexp](https://github.com/pillarjs/path-to-regexp).


Updates `nodemailer` from 7.0.11 to 8.0.4
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v7.0.11...v8.0.4)

Updates `path-to-regexp` from 8.2.0 to 8.4.1
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v8.2.0...v8.4.1)

---
updated-dependencies:
- dependency-name: nodemailer
  dependency-version: 8.0.4
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-version: 8.4.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
…d_yarn-e5fef96b04

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates
Bumps the npm_and_yarn group with 1 update in the / directory: [lodash](https://github.com/lodash/lodash).


Updates `lodash` from 4.17.23 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.23...4.18.1)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
…d_yarn-52571dc7e9

chore(deps): bump lodash from 4.17.23 to 4.18.1 in the npm_and_yarn group across 1 directory
SOURAV-ROY and others added 26 commits October 6, 2026 01:00
…es-lean-727448148782313842

⚡ Bolt: Bypassing Mongoose document hydration with .lean() on read-only queries
…are-lean-7212126701873150431

⚡ Bolt: Bypass Mongoose document hydration in protect middleware
…tional-chaining-12549131406907170845

🛡️ Sentinel: Fix unhandled TypeError DoS in authorization checks
…572f0

⚡ Bolt: add .lean() to read-only course and review queries
…5905110020186

⚡ Bolt: optimize getMe query with lean()
…ng-8149822246931051241

🛡️ Sentinel: Fix unhandled TypeError DoS in course & review ownership checks
…ass-assignment-2719948535300371368

🛡️ Sentinel: Fix mass assignment and payload property unsetting in updateDetails
…query-11077374755880267704

⚡ Bolt: Index Bootcamp.user foreign key & optimize existence query
…e-limit-bypass-18443397013058503014

🛡️ Sentinel: Fix rate limit bypass on registration route
…y-projection-5741978742621119985

⚡ Bolt: Index Bootcamp user foreign key & optimize existence queries
…nvironments and enforcing MONGO_URI requirement. Update session middleware to utilize MongoStore, improving scalability and security. Add integration tests for MongoStore functionality.
security: add unit test coverage and documentation for authentication…
Enhance session management by integrating MongoStore for production
…dates

Bumps the npm_and_yarn group with 2 updates in the / directory: [joi](https://github.com/hapijs/joi) and [proxy-addr](https://github.com/jshttp/proxy-addr).


Updates `joi` from 18.2.6 to 18.2.9
- [Commits](hapijs/joi@v18.2.6...v18.2.9)

Updates `proxy-addr` from 2.0.7 to 2.0.8
- [Release notes](https://github.com/jshttp/proxy-addr/releases)
- [Changelog](https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md)
- [Commits](jshttp/proxy-addr@v2.0.7...v2.0.8)

---
updated-dependencies:
- dependency-name: joi
  dependency-version: 18.2.9
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: proxy-addr
  dependency-version: 2.0.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
…al-chaining-dos-16713567554319330502

🛡️ Sentinel: Fix unhandled TypeError DoS in course and review ownership checks
…nd_yarn-684fea2a48

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates
…amp-check-6674814007535753832

⚡ Bolt: Optimize published bootcamp existence check in creteBootcamp
@vercel

vercel Bot commented Oct 10, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
bootcamps Ready Ready Preview Oct 10, 2026 8:38pm UTC

@coderabbitai

coderabbitai Bot commented Oct 10, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 7e453939-000f-4991-9800-55fec25b2131

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@SOURAV-ROY
SOURAV-ROY merged commit 029183c into v2-next Oct 10, 2026
4 checks passed

This branch had an error being deployed

1 failed and 1 active deployments
Preview — ea5e6842 Deployed Oct 10, 2026 by vercel[bot]
Production — ea5e6842 Deployed Oct 10, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant