Reproduction
Current next (76d43073ed82ebb1a9c0fc7e7907e8785229ed6a) and Draft PR #339 reproduce this in CI run 30290906878. A blob comparison shows #339 does not modify this gate or its inputs, so this is tracked as a next baseline failure.
Run the CI check job on next.
Expected
The production dependency audit passes, or each accepted advisory has an explicit reviewed allowlist entry.
Actual
The job stops before lint/build with seven unallowlisted high advisories: axios, better-auth, fast-uri (two paths), js-yaml, and postcss (two paths).
Scope
Please reconcile the dependencies or narrowly document/allowlist accepted residuals. This issue is intentionally separate from #339 so that cache-header hardening does not absorb unrelated dependency changes.
Reproduction
Current
next(76d43073ed82ebb1a9c0fc7e7907e8785229ed6a) and Draft PR #339 reproduce this in CI run 30290906878. A blob comparison shows #339 does not modify this gate or its inputs, so this is tracked as anextbaseline failure.Run the CI
checkjob onnext.Expected
The production dependency audit passes, or each accepted advisory has an explicit reviewed allowlist entry.
Actual
The job stops before lint/build with seven unallowlisted high advisories: axios, better-auth, fast-uri (two paths), js-yaml, and postcss (two paths).
Scope
Please reconcile the dependencies or narrowly document/allowlist accepted residuals. This issue is intentionally separate from #339 so that cache-header hardening does not absorb unrelated dependency changes.