Skip to content

chore(deps): bump next from 15.5.19 to 16.2.11 in /compliance-firewall-agent#235

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/compliance-firewall-agent/next-16.2.11
Closed

chore(deps): bump next from 15.5.19 to 16.2.11 in /compliance-firewall-agent#235
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/compliance-firewall-agent/next-16.2.11

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps next from 15.5.19 to 16.2.11.

Release notes

Sourced from next's releases.

v16.2.11

This release contains security fixes for the following advisories:

High:

Moderate:

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Backport documentation fixes for v16.2 (#93804)
  • [backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
  • [backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
  • [backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)
  • [backport] Encode non-ASCII characters in cache tags at construction (#93918)
  • [backport] Fix server action forwarding loop with middleware rewrites (#93919)
  • [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
  • [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
  • [backport] Fix "type: module" in project dir when using standalone or adapters (#94050)
  • [backport] Propagate adapter preferred regions (#94200)
  • [16.2.x] Don't drop FormData entries (#94240)
  • [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @​eps1lon, @​icyJoseph, @​unstubbable, @​mischnic, @​bgw, @​timneutkens, and @​lukesandberg for helping!

... (truncated)

Commits
  • 9beca08 v16.2.11
  • 3c48c7a [16.x] Fix Turbopack middleware matcher with i18n single locale
  • ac1eff3 [16.x] Improve performance of checking valid MPA form submissions
  • 9a4651e [16.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
  • b512063 [16.x] Set correct origin for internal redirects in custom server
  • d303326 [16.x] Ensure exotic rewrite param values are properly encoded
  • 73b9487 [16.x] fix(fetch-cache): key fetch(Request, init) by the effective request
  • bf9d17f [16.x] fix(incremental-cache): byte-exact fetch cache key for binary bodies
  • fe28768 [16.x] fix(next/image): improve performance of detectContentType()
  • d8afb8d [16.x] Performance improvements when decoding React Server function payloads
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026
@vercel

vercel Bot commented Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
compliance-firewall-agent Ready Ready Preview, Comment Jul 22, 2026 3:48am

@dependabot
chore(deps): bump next in /compliance-firewall-agent
1efc0ef 
Bumps [next](https://github.com/vercel/next.js) from 15.5.19 to 16.2.11.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.19...v16.2.11)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.11
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/compliance-firewall-agent/next-16.2.11 branch from 1d7b80f to 1efc0ef Compare July 22, 2026 03:46
@thecelestialmismatch thecelestialmismatch mentioned this pull request Jul 22, 2026
Merged
2 tasks
thecelestialmismatch added a commit that referenced this pull request Jul 22, 2026
@thecelestialmismatch
chore(deps): upgrade Next.js 15 → 16.2.11 (supersedes #235) (#239)
f9fc789 
* chore(deps): bump next + eslint-config-next to 16.2.11

* chore(config): migrate to ESLint CLI + Next 16 config

Next 16 removed `next lint` and the `eslint` config key, and defaults builds
to Turbopack.

- Replace `.eslintrc.json` with flat `eslint.config.mjs` (next/core-web-vitals +
  typescript + unused-imports). Scope ignores restore the `next lint` surface
  (legacy/, sdk/, data dirs were never linted). react-hooks v7's new rules
  (set-state-in-effect, purity, refs, …) are set to warn — they fire on unchanged
  code that passed under Next 15; keeping the Next-15 lint outcome (green) instead
  of a 39-file refactor. Lint: 0 errors.
- next.config.js: drop the removed `eslint` key (lint is its own CI step now).
- build → `next build --webpack`: Sentry's withSentryConfig injects a webpack
  config in prod (DSN set), which Turbopack-by-default rejects. Pin webpack so the
  prod build matches today's known-good behavior. Turbopack adoption is separate.
- tsconfig.json: Next 16's auto-managed patch (react-jsx, .next/dev/types).

Verified: tsc 0, lint 0 errors, 1471 tests, build 0. Browser-smoked the prod
build (next start): homepage + /demo render clean, 0 console errors, and the full
scan → NIST-mapped findings (name-only) → PDF/$499 CTA money path works.
@dependabot @github

dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/compliance-firewall-agent/next-16.2.11 branch July 22, 2026 04:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants