Title: chore(deps): bump next from 10.2.3 to 16.1.7 by dependabot[bot] · Pull Request #12 · https-github-com-PAVDSSVD/transform · GitHub
Open Graph Title: chore(deps): bump next from 10.2.3 to 16.1.7 by dependabot[bot] · Pull Request #12 · https-github-com-PAVDSSVD/transform
X Title: chore(deps): bump next from 10.2.3 to 16.1.7 by dependabot[bot] · Pull Request #12 · https-github-com-PAVDSSVD/transform
Description: Bumps next from 10.2.3 to 16.1.7.
Release notes
Sourced from next's releases.
v16.1.7
[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.
Core Changes
[Cache Components] Prevent streaming fetch calls from hanging in dev (#89194)
Apply server actions transform to node_modules in route handlers (#89380)
ensure maxPostponedStateSize is always respected (See: CVE-2026-27979)
feat(next/image): add lru disk cache and images.maximumDiskCacheSize (See: CVE-2026-27980)
Allow blocking cross-site dev-only websocket connections from privacy-sensitive origins (See: CVE-2026-27977)
Disallow Server Action submissions from privacy-sensitive contexts by default (See: CVE-2026-27978)
fix: patch http-proxy to prevent request smuggling in rewrites (See: CVE-2026-29057)
Credits
Huge thanks to @unstubbable, @styfle, @eps1lon, and @ztanner for helping!
v16.1.6
[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.
Core Changes
Upgrade to swc 54 (#88207)
implement LRU cache with invocation ID scoping for minimal mode response cache (#88509)
tweak LRU sentinel key (#89123)
Credits
Huge thanks to @mischnic, @wyattjoh, and @ztanner for helping!
v15.5.13
[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.
Core Changes
fix: patch http-proxy to prevent request smuggling in rewrites (See: CVE-2026-29057)
Credits
Huge thanks to @ztanner for helping!
v15.5.12
[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.
fix unlock in publish-native
This is a re-release of v15.5.11 applying the turbopack changes.
v15.5.11
... (truncated)
Commits
bdf3e35 v16.1.7
dc98c04 [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...
9023c0a [backport] Disallow Server Action submissions from privacy-sensitive contexts...
36a97b9 Allow blocking cross-site dev-only websocket connections from privacy-sensiti...
93c3993 [backport]: feat(next/image): add lru disk cache and `images.maximumDiskCache...
c68d62d Backport documentation fixes for 16.1.x (#90655)
5214ac1 [backport]: ensure maxPostponedStateSize is always respected (#90060) (#90471)
c95e357 Backport/docs fixes 16.1.x (#90125)
cba6144 [backport] Apply server actions transform to node_modules in route handlers...
3db9063 [backport] [Cache Components] Prevent streaming fetch calls from hanging in d...
Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by vercel-release-bot, a new releaser for next since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show
Open Graph Description: Bumps next from 10.2.3 to 16.1.7. Release notes Sourced from next's releases. v16.1.7 [!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canar...
X Description: Bumps next from 10.2.3 to 16.1.7. Release notes Sourced from next's releases. v16.1.7 [!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on c...
Opengraph URL: https://github.com/https-github-com-PAVDSSVD/transform/pull/12
X: @github
Domain: github.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:aa3dcbe8-dcb2-8439-91aa-b9eaac7cb156 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | 8BD2:36239B:3B9091:517BB8:6A514446 |
| html-safe-nonce | 8b2029fdc86997a0038ef4cdd7831dafc598e9be4e18892d486235947cb9775c |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4QkQyOjM2MjM5QjozQjkwOTE6NTE3QkI4OjZBNTE0NDQ2IiwidmlzaXRvcl9pZCI6Ijc5MTk4ODk0Njc2Mjc4ODE1NDIiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 9fcdd428ca9c4b7f00e4f5274f80700d13128b03b2e14dbeebc8709b08d93085 |
| hovercard-subject-tag | pull_request:3420527008 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/https-github-com-PAVDSSVD/transform/pull/12/files |
| twitter:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| og:image:alt | Bumps next from 10.2.3 to 16.1.7. Release notes Sourced from next's releases. v16.1.7 [!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canar... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | e840f405b2718e8f2d55aafa9ff27dbce17e29d0c253011d05ea0fea3c78baff |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/https-github-com-PAVDSSVD/transform git https://github.com/https-github-com-PAVDSSVD/transform.git |
| octolytics-dimension-user_id | 148691212 |
| octolytics-dimension-user_login | https-github-com-PAVDSSVD |
| octolytics-dimension-repository_id | 1045449561 |
| octolytics-dimension-repository_nwo | https-github-com-PAVDSSVD/transform |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | true |
| octolytics-dimension-repository_parent_id | 94473513 |
| octolytics-dimension-repository_parent_nwo | ritz078/transform |
| octolytics-dimension-repository_network_root_id | 94473513 |
| octolytics-dimension-repository_network_root_nwo | ritz078/transform |
| turbo-body-classes | logged-out env-production page-responsive full-width |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | b78565f6aa43cc5323c9935ec11b22cca7bb0a62 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width