Patrick Plate 6aae17edba fix(security): suppress CSRF false positive + upgrade next 15.5.19 + dep overrides ...

- Add .snyk policy file to suppress CSRF disabled false positive on JWT API chain
- Add inline documentation explaining why CSRF is intentionally disabled for stateless JWT
- Upgrade next.js 15.5.18 → 15.5.19 (latest stable 15.x patch)
- Upgrade eslint-config-next to match
- Add pnpm overrides for transitive CVEs: minimatch>=5.1.6, brace-expansion>=2.0.1, ajv>=8.17.1

2026-06-19 09:09:40 +02:00

..

src

fix(security): suppress CSRF false positive + upgrade next 15.5.19 + dep overrides

2026-06-19 09:09:40 +02:00

pom.xml

feat: Sprint 13 — Production Hardening (security fixes, CI gate, rate limiting, tests)

2026-06-18 16:08:05 +02:00