Devin AI f71cde84b8 fix: split config-eval from config-rendering for browser safety ... Move Node.js-only functions (evalConfigFileContent, tryEvalConfigFileContent, detectImportPackageFromDir) to new config-eval.ts. This prevents the dashboard browser build from failing on fs/path/jiti imports. Dashboard now uses parseStaticConfigLiteral (regex+JSON.parse) instead of jiti eval for untrusted GitHub-fetched config content, avoiding RCE risk. Remove type casts in favor of isRecord type guard. Co-Authored-By: mantra <mantra@stack-auth.com>		2026-06-23 23:58:42 +00:00
..
backend	fix: split config-eval from config-rendering for browser safety	2026-06-23 23:58:42 +00:00
dashboard	fix: split config-eval from config-rendering for browser safety	2026-06-23 23:58:42 +00:00
dev-launchpad	chore: update package versions	2026-06-23 20:06:39 +00:00
e2e	chore: update package versions	2026-06-23 20:06:39 +00:00
hosted-components	chore: update package versions	2026-06-23 20:06:39 +00:00
internal-tool	chore: update package versions	2026-06-23 20:06:39 +00:00
mcp	chore: update package versions	2026-06-23 20:06:39 +00:00
mock-oauth-server	chore: update package versions	2026-06-23 20:06:39 +00:00
oauth-mock-server	In-source unit tests (#429)	2025-02-14 11:47:52 -08:00
skills	chore: update package versions	2026-06-23 20:06:39 +00:00