Repository navigation
[Snyk] Upgrade next from 15.4.4 to 15.5.2 - #70
nickbaxter18 wants to merge 1 commit into
Conversation
Snyk has created this PR to upgrade next from 15.4.4 to 15.5.2. See this package in npm: next See this project in Snyk: https://app.snyk.io/org/nickbaxter18/project/6f95d478-ed39-4f78-8d25-518098b3ee50?utm_source=github&utm_medium=referral&page=upgrade-pr
|
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting
| "dependencies": { | ||
| "@tailwindcss/postcss": "4.1.11", | ||
| "@vercel/analytics": "^1.5.0", | ||
| "next": "15.4.4", | ||
| "next": "15.5.2", | ||
| "react": "19.1.0", | ||
| "react-dom": "19.1.0", |
There was a problem hiding this comment.
Only apps/editor/package.json was updated to reference next@15.5.2, but pnpm-lock.yaml still pins next@15.4.4 (e.g. around lines 4701 and 11470). With pnpm the lockfile governs the installed version, so builds will continue to install 15.4.4 and none of the security fixes noted in the commit will take effect. Run pnpm install and commit the resulting lockfile changes so the upgrade is actually applied.
Useful? React with 👍 / 👎.
2 participants
Snyk has created this PR to upgrade next from 15.4.4 to 15.5.2.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 46 versions ahead of your current version.
The recommended version was released a month ago.
Issues fixed by the recommended upgrade:
SNYK-JS-NEXT-12299318
SNYK-JS-NEXT-12301496
SNYK-JS-NEXT-12265451
Release notes
Package name: next
-
15.5.2 - 2025-08-26
-
15.5.1 - 2025-08-26
-
15.5.1-canary.39 - 2025-09-10
-
15.5.1-canary.38 - 2025-09-10
-
15.5.1-canary.37 - 2025-09-09
-
15.5.1-canary.36 - 2025-09-09
-
15.5.1-canary.35 - 2025-09-08
-
15.5.1-canary.34 - 2025-09-08
-
15.5.1-canary.33 - 2025-09-08
-
15.5.1-canary.32 - 2025-09-07
-
15.5.1-canary.31 - 2025-09-06
-
15.5.1-canary.30 - 2025-09-05
-
15.5.1-canary.29 - 2025-09-05
-
15.5.1-canary.28 - 2025-09-04
-
15.5.1-canary.27 - 2025-09-04
-
15.5.1-canary.26 - 2025-09-04
-
15.5.1-canary.25 - 2025-09-03
-
15.5.1-canary.24 - 2025-09-02
-
15.5.1-canary.23 - 2025-09-01
-
15.5.1-canary.22 - 2025-08-31
-
15.5.1-canary.21 - 2025-08-30
-
15.5.1-canary.20 - 2025-08-29
-
15.5.1-canary.19 - 2025-08-29
-
15.5.1-canary.18 - 2025-08-29
-
15.5.1-canary.17 - 2025-08-28
-
15.5.1-canary.16 - 2025-08-28
-
15.5.1-canary.15 - 2025-08-28
-
15.5.1-canary.14 - 2025-08-27
-
15.5.1-canary.13 - 2025-08-27
-
15.5.1-canary.12 - 2025-08-27
-
15.5.1-canary.11 - 2025-08-26
-
15.5.1-canary.10 - 2025-08-26
-
15.5.1-canary.9 - 2025-08-26
- feat(build): add client param parsing support for PPR routes: #82621
-
15.5.1-canary.8 - 2025-08-25
- Unhook WebSocket: #82931
- Destructure loadComponents where possible: #82986
- optimize server action refresh logic: #82674
- Turbopack: more incremental all_server_paths: #82892
- Turbopack: throw large static metadata error earlier: #82939
- Turbopack: don't treat metadata routes as RSC: #82911
- Turbopack: remove blocking thread limit to avoid deadlocks: #82961
- Update 07-fetching-data.mdx: #82862
- Turbopack: fix race condition in unit test: #82989
- Turbopack: support pattern into exports field: #82757
- Turbopack: fix NFT tracing of sharp 0.34: #82340
- Turbopack: skip db lookups on the initial build: #82405
- Fetch tag before reset for create-release-branch: #83006
- Update Rspack development test manifest: #82984
- Update Rspack production test manifest: #82983
- Ensure tags are fetched for release branch: #83012
- Turbopack: prefetch restoring of task dependencies: #82960
- Turbopack: add ffmpeg-static NFT test: #82985
- temporarily disable flaky deploy test: #83032
- fix: add '.next/types/**/*.ts' to the pages router TSConfig: #83029
-
15.5.1-canary.7 - 2025-08-24
- [turbopack] Optimize
- fix: change "noUnknownAtRules" to "warn" for Biome: #82974
-
15.5.1-canary.6 - 2025-08-23
- Turbopack: Lazy decompress medium value compressed blocks: #82257
- Turbopack: bigger small value blocks: #82370
- Turbopack: remove value compression dictionary: #82338
-
15.5.1-canary.5 - 2025-08-22
- Add special marker in terminal if all error stack frames are ignore-listed: #82915
- fix(edge-runtime): clone requests properly: #82878
- Rename WebSocket file: #82930
- fix: add path normalization to getRelativePath for Windows: #82918
- Turbopack: add a CLI to NFT: #82815
- Turbopack: print failing module during panic: #82938
- [turbopack] Fix a few small things in the analyzer: #82899
- Update Rspack production test manifest: #82925
- Turbopack: parallel drop data before shutdown: #82335
- Update Rspack development test manifest: #82924
-
15.5.1-canary.4 - 2025-08-21
- Turbopack: fix the require.cache clear logic: #82876
- Use deterministic env for public env vars: #82859
- fix: typesafe linking to route handlers and pages API routes: #82858
- fix: aliased navigations should apply scroll handling: #82900
- Remove experimental appDocumentPreloading: #82895
- Route modules: Call setReferenceManifestsSingleton for app-route to match app-page: #82908
- Update prettier project dependency from 3.2.5 to 3.6.2: #82896
- Do not modify parsedUrl collecting params: #82907
- feat: add typesafety with config.typedRoutes to redirect() and permanentRedirect(): #82860
- Skip emitting pages router entries when only app router present: #82444
- Turbopack: sort keys in individual to make order deterministic: #82891
- Turbopack: run more unit tests in multi thread runtime: #82889
- Bump wasmer to 6.1.0-rc.3: #82885
- Turbopack: run all unit tests with a fixed amount of worker threads to avoid overloading with many CPUs: #82890
- Bump swc to v36: #82886
- Update Rspack production test manifest: #82869
- [turbopack] Add support for partial glob matches: #82906
-
15.5.1-canary.3 - 2025-08-21
- Turbopack: use parallel execution helpers: #82667
- Turbopack: allow to customize the parallel execution of turbo-persistence: #82668
- Turbopack: use block in place for db writes: #82380
- Turbopack: improve compaction: #82375
- Turbopack: sync NFT context configs: #82781
- Turbopack: fix invalid NFT entry with file behind symlink: #82887
-
15.5.1-canary.2 - 2025-08-20
- docs: add missing RLS step to Next.js tutorial: #82714
- fix: avoid importing types that will be unused: #82856
- Turbopack: add parallel execution helpers: #82666
-
15.5.1-canary.1 - 2025-08-20
- fix: missing
- [types] refactor shared types: #82844
- fix: update the config.api.responseLimit type: #82852
- fix: update validation return types: #82854
- Update Rspack production test manifest: #82813
- Turbopack: run unit tests in multi threaded runtime: #82665
-
15.5.1-canary.0 - 2025-08-20
- docs: mention turbopack config codemod: #82183
- [devtools] Shim overlay on server: #82791
- Turbopack: pass cache handler path as relative path to Rust: #82780
- Remove unused code: #82774
- [perf] only load next config once when start next dev server: #82654
- [Cache Components] Error for Sync IO in Server Components during Static Prerender: #82500
- Upgrade React from
- fix: update @ types/node to resolve Vite 7.x peer dependency conflict: #82794
- docs: fix typo in
- [test] update existing passed tests for cache components suite: #82830
- [test] fix cache components build error in next-form tests: #82841
-
15.5.0 - 2025-08-20
-
15.4.7 - 2025-08-18
-
15.4.6 - 2025-08-06
-
15.4.5 - 2025-07-29
-
15.4.4 - 2025-07-24
from next GitHub release notesCore Changes
Credits
Huge thanks to @ wyattjoh for helping!
Core Changes
Misc Changes
Credits
Huge thanks to @ unstubbable, @ sokra, @ mischnic, @ sleekLancelot, @ ijjk, @ vercel-release-bot, @ timneutkens, @ ztanner, and @ bgub for helping!
Misc Changes
export constto bind readonly values not getters: #82760Credits
Huge thanks to @ lukesandberg and @ bgub for helping!
Misc Changes
Credits
Huge thanks to @ sokra for helping!
Core Changes
Misc Changes
Credits
Huge thanks to @ eps1lon, @ Kikobeats, @ mischnic, @ unstubbable, @ lukesandberg, @ vercel-release-bot, @ sokra, and @ bgub for helping!
Core Changes
Misc Changes
Credits
Huge thanks to @ sokra, @ mischnic, @ bgub, @ ztanner, @ timneutkens, @ P41T0, @ vercel-release-bot, @ lukesandberg, @ ijjk, and @ huozhi for helping!
Misc Changes
Credits
Huge thanks to @ sokra and @ mischnic for helping!
Example Changes
Misc Changes
Credits
Huge thanks to @ bgub, @ Karthikeya-Thatipamula, and @ sokra for helping!
Core Changes
next/linktypes withtypedRoutes: #82814Misc Changes
Credits
Huge thanks to @ chungweileong94, @ vercel-release-bot, @ sokra, @ huozhi, and @ bgub for helping!
Core Changes
0bdb9206-20250818to03fda05d-20250820: #82847Example Changes
Misc Changes
Image#priority: #82806Credits
Huge thanks to @ wbinnssmith, @ charpeni, @ mischnic, @ timneutkens, @ huozhi, @ Hareesh108, and @ gnoff for helping!
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: