Matt a7d0dd95e2 audit: append Context7-assisted dependency upgrade analysis (§34) ...

Companion to the deps-auditor report. Per-major pros/cons informed by
upstream changelogs queried via Context7. Sequencing:

- Tier A (patches + esbuild minor) → do now
- Zod 4 + @hookform/resolvers 5 → couple together, codemod-able
- Next 15 → 16 (incl. middleware → proxy.ts rename) → 2-4 weeks
- Tailwind 4 → afternoon project, visual review pages
- Defer indefinitely: archiver 8 (failed last try), react-day-picker 10

Top-line baseline: 0 known vulns; no GPL/AGPL; lockfile reproducible.
Everything below is dev-experience/perf, not security-blocker.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-12 17:23:19 +02:00

..

operations

feat(safety): EMAIL_REDIRECT_TO now also pauses Documenso + webhooks

2026-05-03 17:24:41 +02:00

runbooks

docs(ops): backup/restore + email deliverability runbooks

2026-04-28 20:10:30 +02:00

superpowers

chore: prettier format audit report markdown

2026-05-11 17:59:43 +02:00

admin-ux-backlog.md

docs: comprehensive audits + Documenso build plan + admin UX backlog

2026-05-07 20:57:53 +02:00

AUDIT-2026-05-12.md

audit: append Context7-assisted dependency upgrade analysis (§34)

2026-05-12 17:23:19 +02:00

audit-comprehensive-2026-05-05.md

fix(security): tier-0 audit blockers (next CVE, role gate, perm traps, key validation, rate limits)

2026-05-05 18:33:13 +02:00

audit-comprehensive-2026-05-06.md

docs: comprehensive audits + Documenso build plan + admin UX backlog

2026-05-07 20:57:53 +02:00

audit-final-deferred.md

fix(audit-v3): platform-wide deferred-list cleanup (rounds 1-4)

2026-05-05 12:49:53 +02:00

AUDIT-FOLLOWUPS.md

docs: website cutover runbook + post-execution status snapshot

2026-05-09 18:38:46 +02:00

audit-frontend-2026-05-06.md

docs: comprehensive audits + Documenso build plan + admin UX backlog

2026-05-07 20:57:53 +02:00

audit-missing-features-2026-05-06.md

docs: comprehensive audits + Documenso build plan + admin UX backlog

2026-05-07 20:57:53 +02:00

AUDIT-PARKED-QUESTIONS.md

audit: Tier 5.4 — wrap moveFolder cycle check + write in a tx

2026-05-12 17:19:24 +02:00

audit-permissions-2026-05-06.md

docs: comprehensive audits + Documenso build plan + admin UX backlog

2026-05-07 20:57:53 +02:00

audit-reliability-2026-05-06.md

docs: comprehensive audits + Documenso build plan + admin UX backlog

2026-05-07 20:57:53 +02:00

AUDIT-TRIAGE.md

audit: Tier 0 quick wins — EMAIL_REDIRECT_TO prod guard + storage routing + metadata masking

2026-05-12 17:02:10 +02:00

BACKLOG.md

fix(audit): non-Documenso backlog sweep — port-binding, NULLS NOT DISTINCT, custom merge tokens, company docs

2026-05-08 02:20:27 +02:00

berth-feature-handoff-prompt.md

fix(audit-final): pre-merge hardening + expense receipt UI

2026-05-05 05:11:26 +02:00

berth-recommender-and-pdf-plan.md

fix(audit-final): pre-merge hardening + expense receipt UI

2026-05-05 05:11:26 +02:00

documenso-build-plan.md

docs: comprehensive audits + Documenso build plan + admin UX backlog

2026-05-07 20:57:53 +02:00

documenso-integration-audit.md

docs: comprehensive audits + Documenso build plan + admin UX backlog

2026-05-07 20:57:53 +02:00

eoi-documenso-field-mapping.md

docs(eoi): document multi-berth Berth Range field + legacy parity

2026-05-05 04:13:32 +02:00

error-handling.md

feat(errors): platform-wide request ids + error codes + admin inspector

2026-05-05 14:12:59 +02:00

website-cutover-runbook.md

docs: website cutover runbook + post-execution status snapshot

2026-05-09 18:38:46 +02:00

website-refactor.md

feat(platform): residential module + admin UI + reliability fixes

2026-04-27 21:54:32 +02:00