stack/packages
Devin AI f71cde84b8 fix: split config-eval from config-rendering for browser safety
Move Node.js-only functions (evalConfigFileContent, tryEvalConfigFileContent,
detectImportPackageFromDir) to new config-eval.ts. This prevents the dashboard
browser build from failing on fs/path/jiti imports.

Dashboard now uses parseStaticConfigLiteral (regex+JSON.parse) instead of
jiti eval for untrusted GitHub-fetched config content, avoiding RCE risk.

Remove type casts in favor of isRecord type guard.

Co-Authored-By: mantra <mantra@stack-auth.com>
2026-06-23 23:58:42 +00:00
..
cli fix: split config-eval from config-rendering for browser safety 2026-06-23 23:58:42 +00:00
dashboard-ui-components chore: update package versions 2026-06-23 20:06:39 +00:00
js chore: update package versions 2026-06-23 20:06:39 +00:00
next chore: update package versions 2026-06-23 20:06:39 +00:00
react chore: update package versions 2026-06-23 20:06:39 +00:00
sc chore: update package versions 2026-06-23 20:06:39 +00:00
shared fix: split config-eval from config-rendering for browser safety 2026-06-23 23:58:42 +00:00
shared-backend fix: split config-eval from config-rendering for browser safety 2026-06-23 23:58:42 +00:00
tanstack-start chore: update package versions 2026-06-23 20:06:39 +00:00
template perf: prefetch email theme previews during earlier onboarding steps (#1655) 2026-06-23 15:46:03 -07:00
ui chore: update package versions 2026-06-23 20:06:39 +00:00