From ed658ea036c4cc4845326c2b6d78bf1d36c8ae6a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 1 Oct 2026 16:34:24 +0000 Subject: [PATCH 1/3] fix(deps): bump nodemailer from 10.0.6 to 10.0.9 Bumps [nodemailer](https://github.com/nodemailer/nodemailer) from 10.0.6 to 10.0.9. - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodemailer/nodemailer/compare/v10.0.6...v10.0.9) --- updated-dependencies: - dependency-name: nodemailer dependency-version: 10.0.9 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- package-lock.json | 12 ++++++------ package.json | 2 +- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/package-lock.json b/package-lock.json index cf0cf65..7efa8b0 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "learning-platform", - "version": "1.3.13", + "version": "1.3.14", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "learning-platform", - "version": "1.3.13", + "version": "1.3.14", "dependencies": { "@dnd-kit/core": "^6.3.1", "@dnd-kit/sortable": "^10.0.0", @@ -24,7 +24,7 @@ "js-yaml": "^5", "lucide-react": "^1.22", "next": "^16", - "nodemailer": "^10.0.6", + "nodemailer": "^10.0.9", "otplib": "^13.4.1", "passport": "^0.7.0", "passport-github2": "^0.1.12", @@ -9768,9 +9768,9 @@ } }, "node_modules/nodemailer": { - "version": "10.0.6", - "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.0.6.tgz", - "integrity": "sha512-2u7OHvEQVVGvPo9Yhw/eN3xMO2Gnj2U2fGDP0BDpnRwJR//65AfGRQDiJqxix28gFRBvMqi2USA13x6RrfWuGg==", + "version": "10.0.9", + "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.0.9.tgz", + "integrity": "sha512-BF0qcyplCwp+jMk6HCjFykBz/YhhZSsxrARhOldLwFWH+8kGjQsd2WIMIZhqEuyXRoGFi0ONbDeWDMDoL8MhLw==", "license": "MIT-0", "engines": { "node": ">=20.0.0" diff --git a/package.json b/package.json index 9cac9f3..f700fe6 100644 --- a/package.json +++ b/package.json @@ -33,7 +33,7 @@ "js-yaml": "^5", "lucide-react": "^1.22", "next": "^16", - "nodemailer": "^10.0.6", + "nodemailer": "^10.0.9", "otplib": "^13.4.1", "passport": "^0.7.0", "passport-github2": "^0.1.12", From 2e24bb754b6c70518a3d15772dc96a3f35400723 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Iv=C3=A1n=20Alejandro=20Marug=C3=A1n?= Date: Sat, 3 Oct 2026 12:57:29 +0200 Subject: [PATCH 2/3] fix: WAL mode on concurrency --- src/lib/db/index.ts | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/src/lib/db/index.ts b/src/lib/db/index.ts index 1c47f7d..0a09f28 100644 --- a/src/lib/db/index.ts +++ b/src/lib/db/index.ts @@ -7,7 +7,12 @@ const dbUrl = process.env.DB_URL || "data/learning-platform.db"; const dbPath = dbUrl.startsWith("/") ? dbUrl : join(/*turbopackIgnore: true*/ process.cwd(), dbUrl); const sqlite = new Database(dbPath); -// Enable WAL mode for better concurrent read performance -sqlite.pragma("journal_mode = WAL"); +// Enable WAL mode for better concurrent read performance. +// ponytail: WAL persists in the file; parallel build workers race on a fresh DB, the winner sets it. +try { + sqlite.pragma("journal_mode = WAL"); +} catch (e) { + if ((e as { code?: string }).code !== "SQLITE_BUSY") throw e; +} export const db = drizzle(sqlite, { schema }); From 4dbbfe03f20b2d261617a46dbdbf1ddb315a53c9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 3 Oct 2026 13:03:30 +0200 Subject: [PATCH 3/3] fix(deps): bump dompurify from 3.4.15 to 3.4.16 (#89) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.15 to 3.4.16. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/3.4.15...3.4.16) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.4.16 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Iván Alejandro Marugán --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 7efa8b0..fd73751 100644 --- a/package-lock.json +++ b/package-lock.json @@ -6141,9 +6141,9 @@ } }, "node_modules/dompurify": { - "version": "3.4.15", - "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.15.tgz", - "integrity": "sha512-EUBjM+B+lkDE41iE82DDSCfkoPGfXx8IxFxPMjNzm/Uk4xDet77rTN9wqlxlVg71kK7XGuUMv6wUxJUwwv+Xyw==", + "version": "3.4.16", + "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.16.tgz", + "integrity": "sha512-sqo+pNp3qRhCIpbgRi1y8Tgk27Bo2Ry7w0dC1NBeNTdZChWjz9Xb/KOoZbRP/R6pQZ80Qw8YhXw13hWWBbMRnQ==", "license": "(MPL-2.0 OR Apache-2.0)", "peer": true, "optionalDependencies": {