⚠️ MAJOR: Update nextjs monorepo to v16 (major) #12
No reviewers
Labels
No labels
bug
documentation
duplicate
enhancement
good first issue
help wanted
invalid
major
minor
question
safe-update
wontfix
No milestone
No project
No assignees
2 participants
Notifications
Due date
No due date set.
Dependencies
No dependencies set
Reference
Nosferath/cyanez.cl!12
Loading…
Reference in a new issue
No description provided.
Delete branch "renovate/major-16-nextjs-monorepo"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
15.3.5→16.1.615.5.9→16.1.6⚠️ This is a MAJOR version update. Review changelog for breaking changes, required migrations, or data incompatibilities before merging.
Release Notes
vercel/next.js (eslint-config-next)
v16.1.6Compare Source
Core Changes
Credits
Huge thanks to @mischnic, @wyattjoh, and @ztanner for helping!
v16.1.5Compare Source
Please refer the following changelogs for more information about this security release:
https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472
https://vercel.com/changelog/summary-of-cve-2026-23864
v16.1.4Compare Source
Core Changes
Credits
Huge thanks to @mischnic for helping!
v16.1.3Compare Source
Core Changes
Credits
Huge thanks to @acdlite and @ijjk for helping!
v16.1.2Compare Source
Core Changes
Credits
Huge thanks to @mischnic for helping!
v16.1.1Compare Source
Core Changes
Credits
Huge thanks to @sokra and @ztanner for helping!
v16.1.0Compare Source
Core Changes
next dev --inspect: #85037b4455a6e-20251027to4f931700-20251029: #85518cacheLifetypes out of the webpack plugin and into the dev bundler directly: #85539'use cache'in page/layout component: #855194f931700-20251029to561ee24d-20251101: #85670'next'plugin: #85749561ee24d-20251101to67f7d47a-20251103: #8576267f7d47a-20251103tof646e8ff-20251104: #85772f646e8ff-20251104todd048c3b-20251105: #85819dd048c3b-20251105tofa50caf5-20251107: #85906'use cache'call stacks: #85966fa50caf5-20251107to52684925-20251110: #8598052684925-20251110to93fc5740-20251113: #8610393fc5740-20251113tofb2177c1-20251114: #86155next devis already running: #86083next analyze: a built-in bundle analyzer for Turbopack: #85915experimental.turbopackClient/ServerSideNestedAsyncChunking: #85827next upgrade: #86120fb2177c1-20251114to0972e239-20251118: #86263next analyze: Make ipv6 server links valid and normalize localhost: #86219detailfield of issues: #86518npxifyarn dlxis not available: #86384'use cache'module to a cache function: #86014setReferenceManifestsSingletoncall: #86574'use cache'runtime errors in production: #865008ac5f4eb-20251119tofd524fe0-20251121: #86473charnot replaced: #86573MappedPagesstructure: #86744?dplquery string for local images (without static import): #86485?dplfor src without protocol: #868367dc903cd-20251203to66ae640b-20251204: #8684366ae640b-20251204to378973b3-20251205: #86852resHeadersin static types: #87145turbopackInferModuleSideEffectsso it is only enabled in canary builds: #87215useSearchParamscan be imported forinstanceofchecks: #87269b45bb335-20251211tof93b9fd4-20251217: #87281Example Changes
with-windicssexample: #81846Misc Changes
opt-level = sfor not frequently used crates: #85426experimental.cacheLife: #85467createSandbox: #85507--debug-build-pathsinstead ofNEXT_PRIVATE_APP_PATHS: #85504completion.rsa bit: #84863maxRetriesandhardErrorparameters: #85536cells are created inresolve_rawto make cell allocation order deterministic.: #85525assert*->waitFor*when the util is not instant: #85450RegExp-like implementations incheck: #85537after()tests: #85566test/integration/in flake detection tests: #85590run-for-changescript: #85619extern crateandmacro_usesyntax: #85778NEXT_TEST_PREFER_OFFLINEininstall-native.mjs: #85850next-core/src/next_client_reference/visit_client_reference.rs: #85843non_operation_vc_strongly_consistentfeature usage from next-api: #85874turbo-tasks-macros-sharedcrate intoturbo-tasks-macros: #85917next.browserWithResponse(): #85911'use cache'functions to reduce function allocations: #85904font-familydeclaration: #85913Auth0Link: #85953cacheLife&cacheTagin client: #85872cacheLife&cacheTag: #85875sharpandunrs-resolver: #83168evaluateto take module_graph: #85971encryptActionBoundArgs/decryptActionBoundArgsimports: #86015layersexperiment flag from next-runtime webpack config: #86126ClonefromEffect: #86110next-data-api-endpointfor Middleware HTTP method tests: #86157||,&&, and??as control flow operators: #85837useActionStatewith'use cache': #86292ignoreScriptsforunrs-resolveron bun: #86324selfarguments: #86231turbo_tasks::persisted_graphmodule: #863290972e239-20251118to8ac5f4eb-20251119: #86351||,&&, and??as control flow operators (#85837)": #86432Debuginstead ofDisplayforValueDebugFormatimpl onRcStr: #86522'use cache': #86499serverExternalPackagesFileSystemPath::try_join: #86523use-cache-router-handler-onlyin deploy tests: #86678'use cache'files again: #86655app-dir-prevent-304-caching: #86693fd524fe0-20251121to7dc903cd-20251203: #86771vitestfrom dependency tree: #86821vitefrom dependency tree: #86824TurboBincodeEncoderorTurboBincodeDecoder: #86633serde_json::Valuewhen stored in a cell: #86749#[turbo_tasks::value]macro: #86634turbo-frozenmapcrate withFrozenMapandFrozenSetimplementations: #87042conditionsfield from BTreeMap to FrozenMap: #87099request.allHeaders()in syncpage.on()callbacks: #86751Credits
Huge thanks to @kdy1, @eps1lon, @SyMind, @bgw, @swarnava, @devjiwonchoi, @ztanner, @ijjk, @huozhi, @icyJoseph, @acdlite, @unstubbable, @gnoff, @gusfune, @vercel-release-bot, @lukesandberg, @sokra, @hayes, @shuding, @wyattjoh, @marjan-ahmed, @timneutkens, @ajstrongdev, @zigang93, @mischnic, @Nayeem-XTREME, @hamirmahal, @eli0shin, @tessamero, @gaojude, @jamesdaniels, @georgesfarah, @timeyoutakeit, @sequencerr, @Strernd, @lucasadrianof, @wbinnssmith, @hamidreza-nateghi, @jokokoloko, @dijonmusters, @H01001000, @xusd320, @lubieowoce, @KaziMahbuburRahman, @zhiyanzhaijie, @feedthejim, @that-one-arab, @JamBalaya56562, @shrink, @florianliebig, @allenzhou101, @benmerckx, @ymc9, @Marukome0743, @pyrytakala, @danpeleg4, @gaearon, @styfle, @jhuleatt, @muhammadsyaddad, @roelvan, and @SukkaW for helping!
v16.0.11Compare Source
Please see this changelog for more information about this security patch.
v16.0.10Compare Source
Please see the Next.js Security Update for information about this security patch.
v16.0.9Compare Source
v16.0.8Compare Source
Core Changes
Credits
Huge thanks to @huozhi for helping!
v16.0.7Compare Source
Please see CVE-2025-66478 for additional details about this release.
v16.0.6Compare Source
Core Changes
Credits
Huge thanks to @lukesandberg for helping!
v16.0.5Compare Source
Core Changes
Credits
Huge thanks to @lucasadrianof for helping!
v16.0.4Compare Source
Core Changes
Credits
Huge thanks to @devjiwonchoi, @sokra and @ztanner for helping!
v16.0.3Compare Source
Core Changes
next dev --inspect: #85037b4455a6e-20251027to4f931700-20251029: #85518cacheLifetypes out of the webpack plugin and into the dev bundler directly: #85539'use cache'in page/layout component: #855194f931700-20251029to561ee24d-20251101: #85670'next'plugin: #85749561ee24d-20251101to67f7d47a-20251103: #8576267f7d47a-20251103tof646e8ff-20251104: #85772f646e8ff-20251104todd048c3b-20251105: #85819dd048c3b-20251105tofa50caf5-20251107: #85906'use cache'call stacks: #85966fa50caf5-20251107to52684925-20251110: #85980Misc Changes
opt-level = sfor not frequently used crates: #85426experimental.cacheLife: #85467createSandbox: #85507--debug-build-pathsinstead ofNEXT_PRIVATE_APP_PATHS: #85504completion.rsa bit: #84863maxRetriesandhardErrorparameters: #85536cells are created inresolve_rawto make cell allocation order deterministic.: #85525assert*->waitFor*when the util is not instant: #85450RegExp-like implementations incheck: #85537after()tests: #85566test/integration/in flake detection tests: #85590run-for-changescript: #85619extern crateandmacro_usesyntax: #85778NEXT_TEST_PREFER_OFFLINEininstall-native.mjs: #85850next-core/src/next_client_reference/visit_client_reference.rs: #85843non_operation_vc_strongly_consistentfeature usage from next-api: #85874turbo-tasks-macros-sharedcrate intoturbo-tasks-macros: #85917next.browserWithResponse(): #85911'use cache'functions to reduce function allocations: #85904font-familydeclaration: #85913Auth0Link: #85953cacheLife&cacheTagin client: #85872cacheLife&cacheTag: #85875sharpandunrs-resolver: #83168evaluateto take module_graph: #85971encryptActionBoundArgs/decryptActionBoundArgsimports: #86015Credits
Huge thanks to @kdy1, @eps1lon, @SyMind, @bgw, @swarnava, @devjiwonchoi, @ztanner, @ijjk, @huozhi, @icyJoseph, @acdlite, @unstubbable, @gnoff, @gusfune, @vercel-release-bot, @lukesandberg, @sokra, @hayes, @shuding, @wyattjoh, @marjan-ahmed, @timneutkens, @ajstrongdev, @zigang93, @mischnic, @Nayeem-XTREME, @hamirmahal, @eli0shin, @tessamero, @gaojude, @jamesdaniels, @georgesfarah, and @timeyoutakeit for helping!
v16.0.2Compare Source
v16.0.1Compare Source
Core Changes
includeon Windows: #85400next-jscondition from middleware, proxy, and instrumentation: #85321prefetch={true}functionality: #854112bcbf254-20251020to6160773f-20251023: #85277Origin: nullheaders: #85402useActionQueue: #85459Misc Changes
use cache: remotedocs: #85145Credits
Huge thanks to @icyJoseph, @wyattjoh, @devjiwonchoi, @arnabsen, @remcohaszing, @denesbeck, @gaojude, @mhart, @eps1lon, @jesuistuan, @codr, @InfiniteCodeMonkeys, @gnoff, @ztanner, @wbinnssmith, @styfle, @acdlite, @ale-grosselle, and @mischnic for helping!
v16.0.0Compare Source
Core Changes
6b70072c-20250909to886b3d36-20250910: #83650886b3d36-20250910tof3a80361-20250911: #83696f3a80361-20250911to93d7aa69-20250912: #8372993d7aa69-20250912to8a8e9a7e-20250912: #83742@next/eslint-plugin-next: #83763next.config.mtsfor Node.js native TS resolver: #835568a8e9a7e-20250912to5e0c951b-20250916: #838505e0c951b-20250916to128abcfa-20250917: #83906srcPagefor templates whennext.routeis unavailable: #83911128abcfa-20250917to84af9085-20250917: #83959import ... with {type: "bytes"}: #8389684af9085-20250917tod415fd3e-20250919: #84003next internal trace: #83907publicRuntimeConfigandserverRuntimeConfig: #83944ssgPageRoutesin the file tree: #84104experimental.cacheComponentsconfig: #84121images.minimumCacheTTLfrom 1 min to 4 hours: #84105d415fd3e-20250919to1eca9a27-20250922: #84093.turboconfig object: #84109experimental.isolatedDevBuildfortest-experimental-dev: #84099publicRuntimeConfigandserverRuntimeConfig(#83944)": #841671eca9a27-20250922toe2332183-20250924: #84189get_errorsMCP endpoint: #84161e2332183-20250924tob0c1dc01-20250925: #84248get_page_metadataMCP endpoint: #84211isReactCompilerRequiredcheck when we must run Babel anyways: #84103config.turbopack.moduleIdstoconfig.experimental.turbopackModuleIds: #84230b0c1dc01-20250925todf38ac9a-20250926: #84276config.turbopack.moduleIdstoconfig.experimental.turbopackModuleIds: #84230b0c1dc01-20250925todf38ac9a-20250926: #84276df38ac9a-20250926tod15d7fd7-20250929: #84347reactCompileroption: #82251d15d7fd7-20250929toef889445-20250930: #84383unstable_rootParams: #84373ef889445-20250930to548235db-20251001: #84416548235db-20251001to1bd1f01f-20251001: #84417metadataBaseto be a string URL in addition toURLinstance: #842971bd1f01f-20251001to86181134-20251001: #84427generateMetadata/generateViewport: #8422886181134-20251001toa757cb76-20251002: #84463recursiveDelete: #84444distDirinnext devandnext build: #84472a757cb76-20251002to85c427d8-20251003: #84496reactDebugChannelfor experimental test shards: #8453385c427d8-20251003to4fdf7cf2-20251003: #844994fdf7cf2-20251003toc7862584-20251006: #84573createDebugChannelimport by feature flag: #84604c7862584-20251006toa4eb2dfa-20251006: #84589/indexto implicit tags and adjustrevalidatePath(): #84586images.domainsconfig: #84625next/legacy/imageusage: #84622a4eb2dfa-20251006to3025aa39-20251007: #84613distDirinnext devandnext build: #84428middlewaretoproxy: #84127middlewareand recommendproxy: #84119--experimental-next-config-strip-typesflag: #84675recursive-delete.js: #84582images.imageSizesconfig: #84647/_nextin middleware": #84697images.localPatternsfor query in Image src: #84406images.dangerouslyAllowLocalIPandimages.maximumRedirects: #84676useLightningcssdocs: #84581Compiled proxy in ...: #847463025aa39-20251007to9724e3e6-20251008: #84642eslint-disabledirectives: #84797.next/dev/types/**/*.d.tsto default tsconfig: #847479724e3e6-20251008toead92181-20251010: #84793ead92181-20251010tod7215b49-20251013: #84850d7215b49-20251013to56e84692-20251014: #84860clientParamParsingconfiguration & bundle it withcacheComponents: #84763unstableprefix fromunstable_cacheLife: #84877unstableprefix fromunstable_cacheTag: #8488056e84692-20251014to93f85932-20251016: #84963--profileCLI param: #84920unstable_prefix: #84974unstable_prefix: #84974experimental_ppr: #84979context.routeTypefrommiddlewaretoproxy: #85006.next: #84714FlatCompat.config: #8502693f85932-20251016to1324e1bb-20251016: #8499958bdc0bb-20251019tof6a48828-20251019: #85081f6a48828-20251019to2bcbf254-20251020: #85112next build: #85137middleware-to-proxy: #85075package.jsonis the problem: #85118startTimeto initial RSC payload stream: #85144usehooks for React 18: #85151experimental.inlineCss: #85140--turbopackflag: #85180experimental.inlineCss: #85140--turbopackflag: #85180Example Changes
Misc Changes
css_environmentfromEnvironment: #83487resolved::RequestsforEsmAssetReference: #83662ssr-datamodule context: #83626'use cache'directive is misspelled: #83756should_track_childrenparameter of the turbo tasks backend: #83258npxfor tracing files: #83903next.config.tsNode.js native resolver: #83561parse_segment_config_from_source: #83919issue_pathfeature and related functionality: #83920thisin function default parameters: #83746livenessof exports based on assignment analysis: #82802value_to_stringoperation until we need it: #84188livenessof exports based on assignment ana…: #84207RawValueformappingsinsideSourceMapJson: #84208Undefined default exporttest suite: #84235Undefined default exportan e2e test suite: #84240Undefined default exportan e2e test suite: #84240this.fs.readFile: #83313next dev: #84474random_changeunit test: #84505experimental.isolatedDevBuildfortest-unit: #84559experimental.isolatedDevBuildfortest-prod: #84556.next/dev/typesto CNA templates tsconfig include: #84566experimental.isolatedDevBuildfortest-integration: #84558experimental.isolatedDevBuildfortest-dev: #84562experimental.isolatedDevBuild: #84656eslint-v8testing: #84721types-and-precompiledfrom corrupting terminal output: #84799TaskInputfromAutoSet: #84867router.prefetch(): #84903--debug-build-pathsnext build option: #85097cacheTag: #85106next lintdeprecation and update error message: #85100--turbopackflag in Create Next App, it is no longer necessary: #85117Credits
Huge thanks to @mischnic, @timneutkens, @unstubbable, @wyattjoh, @Cy-Tek, @lukesandberg, @OoMNoO, @ztanner, @icyJoseph, @huozhi, @gnoff, @ijjk, @povilasv, @dwrth, @obendev, @aymericzip, @devjiwonchoi, @SyMind, @vercel-release-bot, @Shireee, @eps1lon, @dharun36, @kachkaev, @bgw, @yousefdawood7, @TheAlexLichter, @sokra, @ericx0099, @leerob, @Copilot, @fireairforce, @fufuShih, @anvibanga, @hayes, @Milancen123, @martinfrancois, @lubieowoce, @gaojude, @lachlanjc, @liketiger, @styfle, @aaronbrown-vercel, @Samii2383, @FelipeChicaiza, @kevva, @m1abdullahh, @F7b5, @Anshuman71, @RobertFent, @poteto, @chloe-yan, @sireesha-siri, @brian-lou, @joao4xz, @stefanprobst, @samselikoff, @acdlite, @gwkline, @bgub, @brock-statsig, @karlhorky, @feedthejim, @CarloQuick, @greguintow, @hallucinogenizer, @sebmarkbage, @delbaoliveira, @makandrr, @seeplusplus, and @serhalp for helping!
v15.5.12Compare Source
This is a re-release of v15.5.11 applying the turbopack changes.
v15.5.11Compare Source
Core Changes
Credits
Huge thanks to @timneutkens, @mischnic, @ztanner, and @wyattjoh for helping!
v15.5.10Compare Source
Please refer the following changelogs for more information about this security release:
v15.5.9Compare Source
Please see the Next.js Security Update for information about this security patch.
v15.5.8Compare Source
v15.5.7Compare Source
Please see CVE-2025-66478 for additional details about this release.
v15.5.6Compare Source
Core Changes
Credits
Huge thanks to @mischnic for helping!
v15.5.5Compare Source
Core Changes
experimental.middlewareClientMaxBodySizebody cloning limit (#84722)Misc Changes
Credits
Huge thanks to @devjiwonchoi, @ztanner, and @icyJoseph for helping!
v15.5.4Compare Source
Core Changes
Misc Changes
Credits
Huge thanks to @yiminghe, @huozhi, @devjiwonchoi, @mischnic, @lukesandberg, @ztanner, @icyJoseph, @leerob, @fufuShih, @dwrth, @aymericzip, @obendev, @molebox, @OoMNoO, @pontasan, @styfle, @HondaYt, @ryuapp, @lpalmes, and @ijjk for helping!
v15.5.3Compare Source
Core Changes
Credits
Huge thanks to @bgub for helping!
v15.5.2Compare Source
Core Changes
Credits
Huge thanks to @bgub and @ztanner for helping!
v15.5.1Compare Source
Core Changes
Credits
Huge thanks to @bgub, @mischnic, and @ztanner for helping!
v15.5.0Compare Source
Core Changes
@typescript-eslint/switch-exhaustiveness-checkrule: #81583React.unstable_postpone(): #81652images.qualitiesis undefined: #81690pprordynamicIOenabled: #81668__turbopack_load_by_url__: #8166397cdd5d3-20250710to2f0e7e57-20250715: #81678renderToStringfunction: #817072f0e7e57-20250715tod85ec5f5-20250716: #81708next-serverVM: #81664headers/cookies/draftModein'use cache': #81716d85ec5f5-20250716todffacc7b-20250717: #81767getExpectedRequestStorefunction: #81791.next/cache: #81807dffacc7b-20250717toe9638c33-20250721: #81899'use cache: private': #81816browserslist: #81851run-turbopack-compilertrace span: #81917e9638c33-20250721to7513996f-20250722: #819407513996f-20250722toedac0dde-20250723: #81984exhaustive-depsviolations: #82010edac0dde-20250723to3d14fcf0-20250724: #820203d14fcf0-20250724to19baee81-20250725: #8206319baee81-20250725toeaee5308-20250728: #82120eaee5308-20250728to9be531cd-20250729: #82159@next/codemod: update docs url in README: #82135@next/codemod: Addexperimental.turbototurbopackcodemod for Next.js configs: #82134NextRequesttypes: #821729be531cd-20250729to9784cb37-20250730: #82207TURBOPACKenv before loading config: #82162outputFileTracingRootorturbopack.rootoption is provided: #821649784cb37-20250730toc260b38d-20250731: #82247eslint-plugin-react-hooksin React sync: #82294c260b38d-20250731tobe11cb5c-20250804: #82339_errorpage'sreq.urlcan be overwritten to dynamic param on minimal mode: #82347asPathfor query-only navigation withuseRouter: #82236?dplto fonts in/_next/static/media: #82384be11cb5c-20250804to7deda941-20250804: #82373pathto Image documentation: #823297deda941-20250804to3958d5d8-20250807: #824473958d5d8-20250807tof1e70b5e-20250811: #82534f1e70b5e-20250811toac7820a9-20250811: #82543image-sizepkg as additional format detector: #82538?dplto fonts in/_next/static/mediapart 2: #82488componentStackFramesfield: #82395skipMetadata: #82569ac7820a9-20250811to1dc3bdea-20250812: #82575Mapsupport fromnext/dynamictransform: #82487window.next.turbopackinstead: #825801dc3bdea-20250812tof1222f76-20250812: #82595f1222f76-20250812to379a083b-20250813: #82642turbo_tasks::spawn: #82634379a083b-20250813toa96a0f39-20250815: #82691turbopack.rootvalue foroutputFileTracingRootto have consistent tracing root: #82653Example Changes
with-supabaseexample to usegetClaims(): #81383Misc Changes
beforePageLoadto be async: #81650ImportedBindingeffect creation to avoid as much special-casing of SimpleAssignTarget: #81653use-cachetest suite in the Cache Components tests: #81610app-staticdeploy test: #81712requireto load chunks in our node runtime: #81738experimental.strictNextHead: #81882current_valueset/restore mutation pattern with a saferwith_pat_valuehelper: #81696global-not-found: #81803next build --turbopack: #81704lint-eslinton a specific directory: #82009rcstr!allocated Rcstr values as 'static' and stop refcounting them: #81994hash: #82084constcompatible hash routine performance: #82088Path/PathBuffor all of the invalidation logic: #82132O(n)traversals when finding child paths: #82133ignored_subpathsfeature from DiskWatcher: #82210find_server_entriesin the whole_app_module_graph case: #81943lazy-regexdependency: #82288jsonc-parser, dedupe with SWC: #82343is_developmenttonext_page_config: #82363exportsand module to factory parameters for cjs: #82285--features=tokio_tracing: #81979productionBrowserSourceMaps: #78014compiledfolder in ripgrep/ast-grep/ag/etc: #82482outputFileTracingIncludes: #82528.module.scss: #82570non_recursive_helpers::start_watching_dir_and_parents: #82454shouldRunTurboDevTestusage: #82603globalrewrite could introduce a TDZ issue: #82659experimental.typedEnv: #82647create-next-app: use Turbopack for both dev and build: #82753Credits
Huge thanks to @unstubbable, @gnoff, @RobPruzan, @mischnic, @huozhi, @delbaoliveira, @styfle, @ankur-arch, @skt-t1-byungi, @ijjk, @Han5991, @SyMind, @Anas-github-acc, @hf, @bgw, @wyattjoh, @ztanner, @prateekkish, @eps1lon, @lubieowoce, @timneutkens, @acdlite, @lukesandberg, @bgub, @Cy-Tek, @padmaia, @raunofreiberg, @devjiwonchoi, @sokra, @MidnightDesign, @stephenliang, @allenzhou101, @icyJoseph, @gaojude, @remcohaszing, @wesjune, @wbinnssmith, @m1abdullahh, @Sayakie, @startracex, @chadfennell, @dlehmhus, @Jarred-Sumner, @candymask0712, @stepan662, @PuppyOne, @huperniketes, @xusd320, @MichalMoravik, @fireairforce, @kitfoster, @feedthejim, @r34son, @guoci, @JamBalaya56562, @adkile, @snyamathi, and @kachkaev for helping!
v15.4.11Compare Source
Please see this changelog for more information about this security patch.
v15.4.10Compare Source
Please see the Next.js Security Update for information about this security patch.
v15.4.9Compare Source
v15.4.8Compare Source
Please see CVE-2025-66478 for additional details about this release.
v15.4.7Compare Source
Core Changes
Credits
Huge thanks to @ztanner for helping!
v15.4.6Compare Source
Core Changes
_errorpage'sreq.urlcan be overwritten to dynamic param on minimal mode (#82347)?dplto fonts in/_next/static/media(#82384)Credits
Huge thanks to @devjiwonchoi, @ijjk, and @styfle for helping!
v15.4.5Compare Source
Core Changes
Credits
Huge thanks to @ijjk, @sokra, and @styfle for helping!
v15.4.4Compare Source
Core Changes
Credits
Huge thanks to @bgw @mischnic @huozhi @lukesandberg and @ijjk for helping!
v15.4.3Compare Source
Core Changes
Credits
Huge thanks to @mischnic for helping!
v15.4.2Compare Source
Core Changes
Credits
Huge thanks to @huozhi, @ijjk, and @ztanner for helping!
v15.4.1Compare Source
Core Changes
+,-or.: #779323fbfb9ba-20250409toc44e4a25-20250409: #78031c44e4a25-20250409to1d6c8168-20250411: #78067[email protected]: #78149strictNullChecksin test utils: #78142eslint-plugin-next: #781091d6c8168-20250411to39cad7af-20250411: #7815239cad7af-20250411tob04254fd-20250415: #78253@next/mdx: Use stable turbopack config options: #78261b04254fd-20250415to4a36d3ea-20250416: #78297next start --turbopack: #783844a36d3ea-20250416tobc6184dd-20250417: #78322experimental.turbois set: #77998bc6184dd-20250417to914319ae-20250423: #78468914319ae-20250423to197d6a04-20250424: #78516error.nameto label: #78198prerenderfunction for"use cache"with Dynamic IO: #78382node:prefixed in ESM emit of standalone server.js: #78624widthtransition logic: #78635@swc/counter: #78674197d6a04-20250424to5dc00d6b-20250428: #786405dc00d6b-20250428to408d055a-20250430: #78715draft.isEnabledsetter from exotic draftMode wrappers: #77972408d055a-20250430to197d6a04-20250424: #78834@swc/corenpm package tov1.11.24: #77668extensionregex in@next/mdx: #78734max-old-space-size: #78712runInCleanSnapshotto Work Store: #78930--no-manglingfor"use cache"functions: #78993"use cache"timeout errors from being caught in userland code: #78998LinkPropsin emitted declarations: #78773define-env-plugin.tstodefine-env.ts: #79224CacheHandler.getmethod: #79213onPostponeto determine if segment prefetch is partial: #79299pprwhendynamicIOis enabled: #79302app-render.tsx: #79303experimental.enablePrerenderSourceMapsis enabled: #79109@changesets/changelog-githubfor changelog format: #79040compiler.defineServerfor server-only constants: #79225@changesets/changelog-githubfor changelog format: #79040compiler.defineServerfor server-only constants: #79225someFunc(): void) type for client boundary warnings: #79144"use cache": #78882"use cache": #78882clientInstrumentationHooktype: #79701tscruns inpackages/nextwithout having to build first: #79782tscin watch mode duringpnpm dev: #79785vary(#79939)subissuesfromIssue: #79988taskrtasks: #80020@ts-expect-error: #80065get*Stackimplementation: #79789<option>in Preferences dropdowns: #80025require()instead ofnext/dist/if possible: #80054isRecoverableErrorimplementation: #80003wrapRequestHandler: #80055getSquashedHydrationErrorDetailsimplementation: #80046onErrorin /pages: #79982server-inserted-metadatamodule: #80143regionsproperty to the Functions Config Manifest file: #80104require()calls: #80056/.well-known/appspecific/com.chrome.devtools.jsonendpoint in dev: #80260Infinityexpiration for implicit tags: #80387config.allowedDevOrigins(#80410) (Learn More)"use cache": #80463404for unknown server actions: #80613next start": #80666--debug-prerenderoption fornext build: #80667197d6a04-20250424to79d9aed7-20250620: #7947779d9aed7-20250620to06e89951-20250620: #8073079d9aed7-20250620to197d6a04-20250424: #80762404for unknown server actions (#80613)": #80662197d6a04-20250424tofa3feba6-20250623: #80804fa3feba6-20250623tocee7939b-20250625: #80904cee7939b-20250625to4db4b21c-20250626: #809594db4b21c-20250626to65c4decb-20250630: #8107765c4decb-20250630to7216c0f0-20250630: #811337216c0f0-20250630to73aa744b-20250702: #81192pnpm buildto be run when offline: #812735d87cd22-20250704toa7a11657-20250708: #81428experimental.enablePrerenderSourceMapstoexperimental.dynamicIO: #81449a7a11657-20250708to60b5271a-20250709: #81463Uint8Arraybodies when generating cache keys for POST requests: #81465filterStackFrameeverywhere: #8151660b5271a-20250709to96c61b7f-20250709: #81505.eslintrc.cli.jsonbeing used for CLI/CI-based linting: #81553rsc:URLs: #8155496c61b7f-20250709to97cdd5d3-20250710: #81551handleSmoothScrollutil: #81546Example Changes
with-supabaseexample to use the Supabase Auth block: #78913Misc Changes
build: #77730vardeclarations: #77954config.experimental.reactOwnerstack: #78021"use cache"andcacheLifeAPI references: #78024useLinkStatusAPI reference: #78022new Workerwithnew URL: #78010swc_coretov22.3.1: #78129docs/appanddocs/pagespages: #78151Guides: #78189Guides: #78195Guides: #78193deployingpage: #77720Guides: #78238require.contextcalls: #78251Guides: #78240verify_sst_contentfeature, improve unit test performance: #78388Static Exportsto guides, createSelf-hostingguide: #78244/appguide: #78416guides: #78412metadataandgenerateMetadatafixtures: #78409mdxjs-rstov1: #78469next/*subpackages: #78447srcfolder page to API reference: #78499experimental.turbo: #78507publicfolder API reference: #78531to_resolved. s/strongly/statically/: #78560ImportBindingfragments: #78470selfarguments: #78554EsRegexintoturbo-esregexcrate: #78639"use server"inline example: #78653pnpm installafterpnpm buildinbuild_reusable.yml: #78720TEST_CONCURRENCYby default inrun-tests.js: #78731ignoreListby Turbopack in browser sourcemaps: #78822build_and_test.yml: #78732fsmethod to track a glob.: #78686swc_coretov23.2.0: #78885swc_coretov23.2.0": #78935ChunkingType::Parallelwithhoistedbool: #78922__dirnameand__filename: #78843swc_coretov23.1.0again with macos build fix: #78940Resultfor failed local font files: #78941Update static-exports.mdx: #79091modularize_imports: #79012swc_coretov24.0.0: #79092swc_coretov24.0.0": #79102traverse_edges_fixed_point: #79078swc_bundler: #79113turbopack-coreRust 2024: #79131"use cache"misplacement error: #79151'use client'directive: #79114'use client'directive and client components: #79115EcmascriptInputTransform::CommonJs: #79148debug-brkpackage script: #79097next_page_static_info: #79009"use cache"misplacement error": #79160swc_coretov24.0.0: #79103vitest.mdx(How to set up Vitest with Next.js): #78654read_globfromnode_native_bindings: #79154rustc-icefiles to gitignore: #79167mjscodeblocks tojs: #79163launch.jsonto improve debugging in VSCode (#76559)": #79206Byte::from_staticwhen possible: #79215read_globfunction: #79166"use cache"misplacement error: #79222ShrinkToFitforAutoMap: #79218cacheLifeandcacheTagfor prerender-missing-suspense error: #79247minify(): #79261minify()": #79296sourcemapto makeflatten()faster: #79297--rspackflag for create next app: #79077swc_coretov25.0.0: #79319dynamicIOin global default cache handler test: #79300server-source-maps: #79108pprconfigs from Dynamic IO tests: #79305write fileeffect: #79318nextand@next/swcversions: #79036nextand@next/swcversions: #79036RuleCondition::matchesThis trades allocations due toBox::pincalls during recursion for an explicit stack and a tiny interpreter loop.: #79310swc_coretov26.0.0: #79411htmlLimitedBotsconfig value should be a RegExp: #79454swc_coretov26.0.1andstyled-jsx: #79464swc_coretov26.0.1andstyled-jsx: #79464chunksinrscModuleMappingempty: #79511signatureso that it works in a web worker.: #79509PassFactory: #79555"use cache"deploy tests: #79586stabledist tag for backport releases instead oflatest: #79596GITHUB_TOKENis needed to open release pr: #79609backportNPM dist tag instead ofstablefor backports: #79612backportNPM dist tag for backports: #79538(#number)at last: #79611Undefined default exporttest: #79632turbo-tasks-memorybackend: #79560Caching and Revalidatingpage: #79493ld+jsonscript: #79627swc_coretov26.2.2: #79756force-staticw/ revalidate, revalidatePath, and revalidateTag: #79780pnpm unpack-next: #79626styled-jsxin lightningcss mode: #79802--features turbo-tasks-backend/lmdb: #79530ResultforRope#read: #80004rust-sourcemaptov9.2.2: #80066Lightningcssprefix for CSS types: #80067swc_coretov26.3.3: #80059Codeforminify(): #79991--all-features: #80117intoand from and cell involving RcStr: #80076swc_coretov26.4.4: #80161Value<ClientContextType>by makingClientContextTypea TaskInput: #80127Value<ReferenceType>by makingReferenceTypea TaskInput: #80130types-and-precompiled: #80162'use cache'works ingenerateMetadata: #80172Value<Pattern>with justPatternValue<ExecutionEnvironment>with justExecutionEnvironment: #80135Value<ContentSourceData>with justContentSourceData: #80140Value<..>instead make the payloads impl Taskinput: #80141Value<..>instead make the payloads impl TaskinputValue<..>and delete the type: #80144_for_inputoptions fromturbo_tasks::valueand theTypedForInputtrait.: #80185Ropecorrectly: #80335sourcesfield in the source map: #80337swc_coretov27.0.1: #80338turbo_tasks::value_traititems be annotated withturbo-tasks::function: #79178browserWithResponse()method inempty-fallback-shellstests: #80406swc_coretov27.0.2: #80412styled-jsxSWC plugin: #80459swc_coretov27.0.4: #80467empty-fallback-shellstest suite to justfallback-shells: #80461value_traititems to not be annotated withturbo_tasks::function: #79217static-exports.mdx: #80541Request::parse(Pattern)the recursive portion doesn't need to be async: #80510turbo_tasks::functionfromAssetContext::layer: #80592swc_coretov27.0.6: #80626sourceMap.file: #80625awaitas non-async: #80628is_immutableflag dynamically: #80506generateStaticParamstofallback-shellssuite: #80462turbotracefeature: #80572turbo-tasks-fsto take&selfinstead: #80633inject_helperspass multiple times: #80755HELPERSof SWC: #80791swc_coretov29.1.2: #80659FunctionId: #80809swc_coreto29.1.4: #80872assert/strictas external: #80884evalin dev: #80857thiswhen accessing named properties of namespace: #80896mimallocfor codspeed to make it realistic: #80877swc_coretov29.2.0: #80919canarybranch: #80928ModuleIdtype: #80605thisexpressions to fix a subtle esm bug and simplify the client side runtime: #80925swc_ecma_minifierto turbopack trace target: #80977Code::generate_source_map: #80978TaskIds: #80830JSON.parse <anonymous> (0:0)stack frames in test snapshots: #81044create_visitorrustfmt-able: #81053tokio::fsusages: #80674FileSystemPathinstead ofVc<T>: #80634.tsext is most commonly used for middleware and routes: #81059typeof windowin node_modules for server: #80945thisanalysis: #81076swc_coretov29.4.0: #81092concurrentof the SWC minifier.: #80981Issue::sourceon more Issue subtypes: #80874Issue::sourceon more Issue subtypes: #80874dynamicIOsync IO access test suite: #81045ReducedGraphsandfind_server_entries: #81118ExecuteContextImpl::lower_read_transaction: #80822BackingStorageforEither, replaceNextTurboTaskswith a type alias: #80823swc_coretov30.0.1: #81179EcmascriptExports::Unknown: #81214primary_chunkable_referenced_modules: #81206swc_coretov30.1.1: #81276File=> json faster: #81279blurDataURL: null: #81387headinstead of the end of thebody: #81425segment cache (CDN cache busting)redirect test: #80967EsRegex::capturesto return an iterator, useNonefor unmatched capture groups: #81200'use cache': #81431clone_valueagain: #81539@opentelemetry/apiresolve fallback: #81541*.single.csschunks in dev: #81490fallback-shellsdeploy test: #81593traverse_edges_from_entries_topologicaltotraverse_edges_from_entries_dfs: #81481Credits
Huge thanks to @sokra, @huozhi, @Marukome0743, @mischnic, @wbinnssmith, @eps1lon, @razzeee, @delbaoliveira, @kdy1, @wyattjoh, @acdlite, @ztanner, @bgw, @jantimon, @lubieowoce, @Fonger, @ospira, @gnoff, @styfle, @Cy-Tek, @timneutkens, @raunofreiberg, @devchaudhary24k, @Neschadin, @OreQr, @drewlong314, @ijjk, @praizjosh, @unstubbable, @lukesandberg, @ScriptedAlchemy, @sqidermad, @Juneezee, @devjiwonchoi, @Kamitenshi, @feedthejim, @leerob, @mauerbac, @miki-tebe, @gaearon, @mrbadri, @luwes, @lucacasonato, @M4xymm, @jirihofman, @vicb, @jackwilson323, @SyMind, @kevva, @xyf7, @gaojude, @dario-piotrowicz, @mastoj, @nicole0707, @lourd, @Karibash, @chipit24, @icyJoseph, @xusd320, @fireairforce, @GenhaoLi, @igas, @Macw07, @amannn, @bcdipesh, @r34son, @ivasilov, @lpalmes, @imskyleen, @teamleaderleo, @vitaliemiron, @agadzik, @chdeskur, @nakanoh, @luiscobot, @GameRoMan, @dferber90, @maurobonfietti, @navandstokes, @sajadtorkamani, @bobziroll, @lumirlumir, @KkOoSsTtAa, @msabramo, @sommeeeer, @schoenwaldnils, @remcohaszing, @HerringtonDarkholme, @nebrelbug, @RobPruzan, @lmammino, @MohammedYehia, @extoci, @padmaia, @aacosta11, @vercel-release-bot, @maral, @ethanniser, @MichalMoravik, @rajrawat37, @kidonng, @dnhn, @kristian240, @rachnac-emeritus, @rortan134, and @nick20name17 for helping!
v15.4.0Compare Source
v15.3.9Compare Source
Please see this changelog for more information about this security patch.
v15.3.8Compare Source
Please see the Next.js Security Update for information about this security patch.
v15.3.7Compare Source
v15.3.6Compare Source
Please see CVE-2025-66478 for additional details about this release.
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
If you want to rebase/retry this PR, check this boxThis PR has been generated by Renovate Bot.
dddd66fc6fto61e1cd06de61e1cd06deto53acca80de53acca80deto991ccc9e5a991ccc9e5ato2d79449b782d79449b78to0301d168c30301d168c3to88fee039ed88fee039edto58a2a52de658a2a52de6tod220610702d220610702tobf031789abbf031789abto16f76af3c516f76af3c5to7a43ff52b87a43ff52b8toc2084e34a9c2084e34a9tod87cdb40acd87cdb40acto30fb6e458c30fb6e458ctof5ad24918ff5ad24918fto640d34b703Major update: Next.js 15 → 16 (+ eslint-config-next). Large lockfile diff (877 additions). Next.js major versions often involve API changes (App Router, config format, middleware). Recommend local build + smoke test before merging. Flagging for patron review.
Pull request closed