chore(deps): bump the next group across 1 directory with 2 updates by dependabot[bot] · Pull Request #84 · rootsofprogress/site-status

dependabot · 2026-03-13T02:16:39Z

Bumps the next group with 2 updates in the / directory: next and eslint-config-next.

Updates next from 15.5.27 to 16.4.2

Release notes

v16.4.2

What's Changed

[lts-active] turbo-tasks snapshot consistency fixes (#99644, #99732, #99649) by @lukesandberg in vercel/next.js#100002

[lts-active] Turbopack: backport Pages Router dev module graph chaining (#98823, #99910, #100091) by @sokra in vercel/next.js#100008

[lts-active] fix(next-code-frame): snap visible window to char boundaries by @lukesandberg in vercel/next.js#100212

[lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @lukesandberg in vercel/next.js#100209

[lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @lukesandberg in vercel/next.js#100217

[lts-active] Backport docs fixes since v16.4.0 by @icyJoseph in vercel/next.js#100246

[lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions by @lukesandberg in vercel/next.js#100211

[lts-active] Backport additional documentation fixes since v16.4.0 by @aurorascharff in vercel/next.js#100262

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution in use cache functions returning typed arrays

Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

High:

Denial of Service in App Router using Server Actions

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

Show compiler plugin warning in more situations: #75682

fix(scripts): correct typo in rm.mjs error message: #87015

docs: improve clarity and punctuation in README: #86096

Fix debug build paths Pages Router support entries: #93529

bundle-analyzer: record historical snapshots on each analyze run: #93520

fix: detect proxy.ts correctly with compound pageExtensions: #93246

feat(turbopack): support false values for resolveAlias config: #93331

Misc Changes

docs: correction to dynamicParams migration: #96624

docs: proxy event argument: #96435

docs: remove experimental note from runtime prefetching: #96615

Preserve per-segment prefetching after dynamic navigation: #96583

Rename static generation stream option to waitForAllReady: #96564

Remove obsolete static generation plumbing: #96563

[turbopack] Drop dead writes to exports: #96381

[turbopack] Ignore writes to exports after a module.exports = {} writes: #96380

[turbopack] Add test for sideEffects with optimizePackageImports: #96549

[turbopack] Strip leading BOM before parsing CSS: #96678

Upgrade React from cbb046ab-20260731 to 7dfc7ccd-20260803: #96550

... (truncated)

Commits

2864b17 v16.4.2
a42cb59 Revert "[lts-active] Keep requests through middleware in a single OpenTelemet...
f0760ec [lts-active] Backport additional documentation fixes since v16.4.0 (#100262)
845007a [lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions (#100211)
6a79d8a [lts-active] Backport docs fixes since v16.4.0 (#100246)
a75a782 [lts-active] Keep requests through middleware in a single OpenTelemetry trace...
8ad8524 [lts-active] Turbopack: Ignore realpath errors during module resolution, matc...
29d030e [lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependenc...
3e50b82 [lts-active] fix(next-code-frame): snap visible window to char boundaries (#1...
9458fb9 [lts-active] Turbopack: backport Pages Router dev module graph chaining (#988...
Additional commits viewable in compare view

Updates eslint-config-next from 15.5.12 to 16.4.2

Release notes

Sourced from eslint-config-next's releases.

v16.4.2

What's Changed

[lts-active] turbo-tasks snapshot consistency fixes (#99644, #99732, #99649) by @lukesandberg in vercel/next.js#100002

[lts-active] Turbopack: backport Pages Router dev module graph chaining (#98823, #99910, #100091) by @sokra in vercel/next.js#100008

[lts-active] fix(next-code-frame): snap visible window to char boundaries by @lukesandberg in vercel/next.js#100212

[lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @lukesandberg in vercel/next.js#100209

[lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @lukesandberg in vercel/next.js#100217

[lts-active] Backport docs fixes since v16.4.0 by @icyJoseph in vercel/next.js#100246

[lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions by @lukesandberg in vercel/next.js#100211

[lts-active] Backport additional documentation fixes since v16.4.0 by @aurorascharff in vercel/next.js#100262

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

This release contains security fixes for the following advisories:

Critical:

Unauthenticated Remote Code Execution in use cache functions returning typed arrays

Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

High:

Denial of Service in App Router using Server Actions

v16.4.0

Check out the 16.4 announcement post to get an overview of the changes.

Core Changes

Show compiler plugin warning in more situations: #75682

fix(scripts): correct typo in rm.mjs error message: #87015

docs: improve clarity and punctuation in README: #86096

Fix debug build paths Pages Router support entries: #93529

bundle-analyzer: record historical snapshots on each analyze run: #93520

fix: detect proxy.ts correctly with compound pageExtensions: #93246

feat(turbopack): support false values for resolveAlias config: #93331

Misc Changes

docs: correction to dynamicParams migration: #96624

docs: proxy event argument: #96435

docs: remove experimental note from runtime prefetching: #96615

Preserve per-segment prefetching after dynamic navigation: #96583

Rename static generation stream option to waitForAllReady: #96564

Remove obsolete static generation plumbing: #96563

[turbopack] Drop dead writes to exports: #96381

[turbopack] Ignore writes to exports after a module.exports = {} writes: #96380

[turbopack] Add test for sideEffects with optimizePackageImports: #96549

[turbopack] Strip leading BOM before parsing CSS: #96678

Upgrade React from cbb046ab-20260731 to 7dfc7ccd-20260803: #96550

... (truncated)

Commits

2864b17 v16.4.2
7217011 v16.4.1
e273d5b v16.4.0
c3e76ad v16.4.0-canary.63
ccf8c15 v16.4.0-canary.62
27ee721 v16.4.0-canary.61
907721a eslint-config-next: support ESLint 10 (#99628)
cdf6866 v16.4.0-canary.60
ba80ee4 v16.4.0-canary.59
1bcedb4 v16.4.0-canary.58
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-config-next since your current version.

vercel · 2026-03-13T02:16:41Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
site-status	Error		Oct 19, 2026 11:35am UTC

socket-security · 2026-04-06T11:44:33Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	next@15.5.27 ⏵ 16.4.2	^-4
	eslint-config-next@15.5.12 ⏵ 16.4.2	⁺¹		⁺⁴

View full report

socket-security · 2026-06-02T09:54:16Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

Bumps the next group with 2 updates in the / directory: [next](https://github.com/vercel/next.js) and [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next). Updates `next` from 15.5.27 to 16.4.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v15.5.27...v16.4.2) Updates `eslint-config-next` from 15.5.12 to 16.4.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.4.2/packages/eslint-config-next) --- updated-dependencies: - dependency-name: eslint-config-next dependency-version: 16.1.6 dependency-type: direct:development update-type: version-update:semver-major dependency-group: next - dependency-name: next dependency-version: 16.1.6 dependency-type: direct:production update-type: version-update:semver-major dependency-group: next ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 13, 2026

vercel Bot deployed to Preview March 13, 2026 02:17

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from 2a6cb6d to 994101a Compare March 13, 2026 02:23

vercel Bot deployed to Preview March 13, 2026 02:24

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from 994101a to b60ec6b Compare March 13, 2026 02:28

vercel Bot deployed to Preview March 13, 2026 02:28

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from b60ec6b to 47fd412 Compare March 16, 2026 11:50

vercel Bot deployed to Preview March 16, 2026 11:50

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from 47fd412 to d13962b Compare March 16, 2026 11:54

vercel Bot deployed to Preview March 16, 2026 11:55

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from d13962b to affeb6a Compare March 16, 2026 11:59

vercel Bot deployed to Preview March 16, 2026 11:59

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from affeb6a to 6503d9e Compare March 21, 2026 19:40

vercel Bot deployed to Preview March 21, 2026 19:41

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from 6503d9e to afa15cf Compare March 21, 2026 19:45

vercel Bot deployed to Preview March 21, 2026 19:45

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from afa15cf to 3d72e8d Compare March 23, 2026 11:49

vercel Bot deployed to Preview March 23, 2026 11:50

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from 3d72e8d to b6824ce Compare March 23, 2026 11:54

vercel Bot deployed to Preview March 23, 2026 11:54

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from b6824ce to 00c284a Compare March 30, 2026 12:23

vercel Bot deployed to Preview March 30, 2026 12:24

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from 00c284a to 297d03f Compare April 6, 2026 11:43

vercel Bot deployed to Preview April 6, 2026 11:44

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from 297d03f to 5d1b2aa Compare April 6, 2026 18:15

vercel Bot deployed to Preview April 6, 2026 18:15

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from 5d1b2aa to ab77b4f Compare April 20, 2026 13:16

vercel Bot deployed to Preview April 20, 2026 13:17

View deployment

dependabot Bot changed the title ~~chore(deps): bump the next group with 2 updates~~ chore(deps): bump the next group across 1 directory with 2 updates Apr 27, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from ab77b4f to 36790dc Compare April 27, 2026 13:49

vercel Bot deployed to Preview April 27, 2026 13:49

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from 36790dc to 233a937 Compare May 4, 2026 14:26

vercel Bot deployed to Preview May 4, 2026 14:27

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from 233a937 to da85393 Compare May 11, 2026 18:18

vercel Bot deployed to Preview May 11, 2026 18:18

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from da85393 to 68ffbd2 Compare May 18, 2026 21:05

vercel Bot deployed to Preview May 18, 2026 21:05

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from 68ffbd2 to e09d5a3 Compare June 2, 2026 09:53

vercel Bot deployed to Preview June 2, 2026 09:53

View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from e09d5a3 to 5383d24 Compare September 7, 2026 11:35

vercel Bot had a problem deploying to Preview September 7, 2026 11:36 Failure

dependabot Bot force-pushed the dependabot/npm_and_yarn/next-a457705a35 branch from 5383d24 to ee71261 Compare October 19, 2026 11:34

vercel Bot had a problem deploying to Preview October 19, 2026 11:35 Failure

Navigation Menu

Repository navigation

chore(deps): bump the next group across 1 directory with 2 updates - #84

chore(deps): bump the next group across 1 directory with 2 updates#84
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/next-a457705a35

dependabot Bot commented on behalf of github Mar 13, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Mar 13, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Apr 6, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 2, 2026 •

edited

Loading

Uh oh!

This branch had an error being deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Mar 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v16.4.2

What's Changed

v16.4.1

v16.4.0

Core Changes

Misc Changes

v16.4.2

What's Changed

v16.4.1

v16.4.0

Core Changes

Misc Changes

Uh oh!

vercel Bot commented Mar 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Apr 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jun 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This branch had an error being deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Mar 13, 2026 •

edited

Loading

vercel Bot commented Mar 13, 2026 •

edited

Loading

socket-security Bot commented Apr 6, 2026 •

edited

Loading

socket-security Bot commented Jun 2, 2026 •

edited

Loading