Marc-André Bombeck 44c2973a64 fix(deps): update next to 16.4.2 and nodemailer to 10.1.7 ...

Next 16.4.2 carries the fixes for GHSA-673q-mjm6-r5xr and
GHSA-2464-fhr4-w9xw (unauthenticated remote code execution) and
GHSA-p3m5-59mp-jv5r (denial of service through Server Actions).
eslint-config-next and @next/bundle-analyzer move with it, both pinned
exactly. nodemailer 10.1.7 fixes the address-parser advisories.

The 16.4.0 ignore in the Dependabot config is gone: the history journeys
it was guarding pass on 16.4.2 with the day-step fix, and the note says
what was measured.

2026-10-22 08:25:48 +02:00

..

ISSUE_TEMPLATE

feat(i18n): add Dutch as an eighth end-to-end locale

2026-10-19 11:06:55 +02:00

workflows

ci: correct the pull-request sizes named in the long integration workflow

2026-10-19 20:10:24 +02:00

dependabot.yml

fix(deps): update next to 16.4.2 and nodemailer to 10.1.7

2026-10-22 08:25:48 +02:00

FUNDING.yml

docs: README presentation polish + community-file gaps

2026-06-05 03:01:36 +02:00

PULL_REQUEST_TEMPLATE.md

docs: PR template targets main — the develop branch was retired

2026-07-14 10:36:25 +02:00