Fix blog build + clear 14 dependabot advisories

Build was failing because the new MDX post tried to `import` the
SuchMoonLaunchStoreButtons component — next-mdx-remote/rsc doesn't
support imports inside .mdx; components must be passed via the
`components` prop. Wire the helper into [slug]/page.tsx and drop the
import line from the .mdx.

Dependency bumps to clear the 14 outstanding Dependabot advisories
(9 high, 4 moderate, 1 low):
- apps/web/next: ^15.5.15 → ^15.5.18 (covers 12 next.js advisories)
- pnpm overrides: pin postcss ^8.5.14 (clears 1117015 XSS via </style>)
- pnpm overrides: pin fast-uri ^3.1.2 (clears 1117870 + 1117884 path
  traversal / host confusion)

pnpm audit: 14 vulnerabilities → 0.
This commit is contained in:
jwinterm
2026-05-18 10:28:02 -04:00
parent d2ee3ffb55
commit 927cf80c58
5 changed files with 80 additions and 86 deletions
+2
View File
@@ -5,6 +5,7 @@ import {
VeganIqStoreButtons,
SuchoiceStoreButtons,
BauhausEchoStoreButtons,
SuchMoonLaunchStoreButtons,
} from "@/components/store-buttons";
import Link from "next/link";
import type { Metadata } from "next";
@@ -69,6 +70,7 @@ export default async function BlogPost({ params }: Props) {
VeganIqStoreButtons,
SuchoiceStoreButtons,
BauhausEchoStoreButtons,
SuchMoonLaunchStoreButtons,
}} />
</div>
</div>