Skip to content

[Snyk] Upgrade next from 13.1.6 to 15.4.4 #1046

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

nerdy-tech-com-gitub
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade next from 13.1.6 to 15.4.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 1530 versions ahead of your current version.

  • The recommended version was released 25 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Excessive Platform Resource Consumption within a Loop
SNYK-JS-BRACES-6838727
140 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230
140 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ES5EXT-6095076
140 Proof of Concept
high severity Uncontrolled Recursion
SNYK-JS-NEXT-8186172
140 No Known Exploit
high severity Missing Authorization
SNYK-JS-NEXT-8520073
140 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELRUNTIME-10044504
140 Proof of Concept
medium severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
140 No Known Exploit
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085
140 No Known Exploit
medium severity Race Condition
SNYK-JS-NEXT-10176058
140 Proof of Concept
medium severity Resource Exhaustion
SNYK-JS-NEXT-6032387
140 Proof of Concept
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JS-NEXT-8602067
140 No Known Exploit
medium severity Improper Input Validation
SNYK-JS-POSTCSS-5926692
140 No Known Exploit
medium severity Improper Input Validation
SNYK-JS-POSTCSS-5926692
140 No Known Exploit
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073
140 Proof of Concept
low severity Missing Origin Validation in WebSockets
SNYK-JS-NEXT-10259370
140 No Known Exploit
critical severity Improper Authorization
SNYK-JS-NEXT-9508709
140 Mature
Release notes
Package name: next
  • 15.4.4 - 2025-07-24
  • 15.4.3 - 2025-07-22

    Note

    This release is backporting bug fixes. It does not include all pending features/changes on canary.

    Core Changes

    • Turbopack: fix dist dir on Windows (#81758)

    Credits

    Huge thanks to @ mischnic for helping!

  • 15.4.2 - 2025-07-18

    Note

    This release is backporting bug fixes. It does not include all pending features/changes on canary.

    Core Changes

    • pages router metadata bugs with React 19 (#81733)
    • [metadata] replace for initial body icon case (#81688)
    • Ensure custom NextServer config is honored (#81681)

    Credits

    Huge thanks to @ huozhi, @ ijjk, and @ ztanner for helping!

  • 15.4.2-canary.53 - 2025-08-18
  • 15.4.2-canary.52 - 2025-08-17
  • 15.4.2-canary.51 - 2025-08-16
  • 15.4.2-canary.50 - 2025-08-16
  • 15.4.2-canary.49 - 2025-08-15
  • 15.4.2-canary.48 - 2025-08-14
  • 15.4.2-canary.47 - 2025-08-14
  • 15.4.2-canary.46 - 2025-08-13
  • 15.4.2-canary.45 - 2025-08-13
  • 15.4.2-canary.44 - 2025-08-13
  • 15.4.2-canary.43 - 2025-08-13
  • 15.4.2-canary.42 - 2025-08-12
  • 15.4.2-canary.41 - 2025-08-12
  • 15.4.2-canary.40 - 2025-08-12
  • 15.4.2-canary.39 - 2025-08-12
  • 15.4.2-canary.38 - 2025-08-11
  • 15.4.2-canary.37 - 2025-08-11
  • 15.4.2-canary.36 - 2025-08-11
  • 15.4.2-canary.35 - 2025-08-09
  • 15.4.2-canary.34 - 2025-08-08
  • 15.4.2-canary.33 - 2025-08-07
  • 15.4.2-canary.32 - 2025-08-06
  • 15.4.2-canary.31 - 2025-08-05
  • 15.4.2-canary.30 - 2025-08-04
  • 15.4.2-canary.29 - 2025-08-03
  • 15.4.2-canary.28 - 2025-08-02
  • 15.4.2-canary.27 - 2025-08-01
  • 15.4.2-canary.26 - 2025-08-01
  • 15.4.2-canary.25 - 2025-07-31
  • 15.4.2-canary.24 - 2025-07-31
  • 15.4.2-canary.23 - 2025-07-31
  • 15.4.2-canary.22 - 2025-07-30
  • 15.4.2-canary.21 - 2025-07-30
  • 15.4.2-canary.20 - 2025-07-29
  • 15.4.2-canary.19 - 2025-07-28
  • 15.4.2-canary.18 - 2025-07-26
  • 15.4.2-canary.17 - 2025-07-25
  • 15.4.2-canary.16 - 2025-07-24
  • 15.4.2-canary.15 - 2025-07-23

    Core Changes

    • Upgrade React from e9638c33-20250721 to 7513996f-20250722: #81940
    • Upgrade to swc v33: #81750
    • Remove extra base-server code: #81944
    • Turbopack: flatten sourceInfo to avoid objects, reorder args, compress node.js entry: #81545
    • Fix dynamicParams false layout case in dev: #81990

    Misc Changes

    • [test] workaround test that needs stylus: #81965
    • Bump to swc_sourcemap 9.3.3: #81971
    • fix(Turbopack): Remove the duplicate SlowFilesystem warning: #81972
    • CI: add workflow_branch data to deploy test failure message: #81949
    • Update Rspack production test manifest: #81961
    • Update Rspack development test manifest: #81960
    • [turbopack] Rename ClientReferenceSet: #81942
    • Turbopack: fix scope hoisting variable renaming bug: #81640
    • Revert "[test] workaround test that needs stylus": #81981
    • [docs] fix rewrites example wording: #81985

    Credits

    Huge thanks to @ huozhi, @ mischnic, @ Cy-Tek, @ ztanner, @ vercel-release-bot, @ ijjk, @ lukesandberg, @ sokra, and @ allenzhou101 for helping!

  • 15.4.2-canary.14 - 2025-07-22

    Misc Changes

    • Update Rspack development test manifest: #81913
    • Update Rspack production test manifest: #81914
    • Turbopack: Use workaround for rustc miscompilation bug on macos intel: #81950

    Credits

    Huge thanks to @ vercel-release-bot and @ bgw for helping!

  • 15.4.2-canary.13 - 2025-07-22

    Core Changes

    • Stabilize node middleware support: #81907
    • Add run-turbopack-compiler trace span: #81917
    • fix: support calling onClose multiple times in edge-ssr-app: #81911
    • fix: logging the correct process for listened port: #81903
    • Build: Include rewrites in manifest generation: #81894
    • Routing: Clean up some code: #81932
    • [sourcemaps] Ensure codeframe when calling Client Functions from Server: #81918
    • [segment explorer] missing file suggestion: #81617
    • [turbopack] Always print trace labels in headers: #81728
    • Revert "[metadata] use https protocol for schema urls": #81934

    Misc Changes

    • Turbopack: Track variable usage inside of visit_assign_target_pat: #81654
    • Turbopack: Replace current_value set/restore mutation pattern with a safer with_pat_value helper: #81696
    • Docs: Document global-not-found: #81803
    • [router-act] Fixes related to segment inlining: #81896
    • [test] Add dedicated test for error when client functions are called from server components: #81930
    • Fix an issue in how css references are collected under next build --turbopack: #81704
    • Turbopack: Update notify-rs crate, remove workaround for fixed bug: #81909

    Credits

    Huge thanks to @ bgw, @ ijjk, @ mischnic, @ delbaoliveira, @ lubieowoce, @ huozhi, @ timneutkens, @ acdlite, @ eps1lon, and @ lukesandberg for helping!

  • 15.4.2-canary.12 - 2025-07-21

    Core Changes

    • Upgrade React from dffacc7b-20250717 to e9638c33-20250721: #81899
    • chore(devtools): sync todos to linear: #81901
    • Introduce 'use cache: private': #81816
    • chore(deps): update browserslist: #81851
    • Remove web-server from edge-ssr-app: #81389

    Misc Changes

    • Remove experimental.strictNextHead: #81882
    • Remove some random commas: #81875
    • Turbopack: Add cache for reqwest clients: #81742
    • Update Rspack development test manifest: #81878
    • Update Rspack production test manifest: #81879

    Credits

    Huge thanks to @ RobPruzan, @ eps1lon, @ unstubbable, @ MidnightDesign, @ bgw, @ stephenliang, @ vercel-release-bot, and @ ijjk for helping!

  • 15.4.2-canary.11 - 2025-07-21

    Core Changes

    • [sourcemaps] Try VM for retrieving source maps first: #81869
    • [devtools] save user config inside .next/cache: #81807
    • Server: Remove unused code: #81886
    • refactor: encapsulate content type within RenderResult: #81861
    • refactor: handle null RenderResult responses gracefully: #81895

    Misc Changes

    • Turbopack: fix unhelpful error message when deleting folder fails: #81718

    Credits

    Huge thanks to @ eps1lon, @ devjiwonchoi, @ timneutkens, @ wyattjoh, and @ sokra for helping!

  • 15.4.2-canary.10 - 2025-07-19

    Core Changes

    • Turbopack: fix dist dir on Windows: #81758
    • fix: remove boundary sentinel from RSC responses: #81857

    Credits

    Huge thanks to @ mischnic and @ wyattjoh for helping!

  • 15.4.2-canary.9 - 2025-07-18

    Core Changes

    • [devtool] migrate css reset to global.css: #81783
    • [dev-tools] Robust shortcut detection: #81756
    • [segment explorer] hide for pages router: #81813
    • [devtool] fix scrollbar styling: #81814
    • fix(ppr): ensure fallback route params trigger dynamic resume: #81812
    • [devtools] restart server pending state: #80858

    Misc Changes

    • [turbopack] use require to load chunks in our node runtime: #81738

    Credits

    Huge thanks to @ huozhi, @ raunofreiberg, @ lukesandberg, @ wyattjoh, and @ devjiwonchoi for helping!

  • 15.4.2-canary.8 - 2025-07-18

    Core Changes

    • [devtool] move font styling to global.css: #81782
    • [devtool] copy decoded info of error details: #81735
    • fix(build): add sourcePage context for PPR dynamic route lambda creation: #81781
    • refactor: rename experimental.dynamicIO to experimental.cacheComponents: #81562
    • Properly handle hanging promise rejections during prerendering: #81754
    • Upgrade React from d85ec5f5-20250716 to dffacc7b-20250717: #81767
    • Refactor: Get rid of overly generic getExpectedRequestStore function: #81791

    Misc Changes

    • Update Rspack production test manifest: #81746
    • Update Rspack development test manifest: #81747
    • Turbopack: Split DynamicEqHash trait into smaller traits in a separate re-usable crate: #81741
    • [turbopack] Reuse shared Promise for loaded chunks: #81755
    • Add VSCode tasks to show TypeScript compilation errors in problems view: #81799
    • Turbopack: remove unneeded manifests for API routes: #81536

    Credits

    Huge thanks to @ vercel-release-bot, @ huozhi, @ bgw, @ wyattjoh, @ unstubbable, @ eps1lon, and @ mischnic for helping!

  • 15.4.2-canary.7 - 2025-07-17
  • 15.4.2-canary.6 - 2025-07-17
  • 15.4.2-canary.5 - 2025-07-16
  • 15.4.2-canary.4 - 2025-07-16
  • 15.4.2-canary.3 - 2025-07-16
  • 15.4.2-canary.2 - 2025-07-16
  • 15.4.2-canary.1 - 2025-07-15
  • 15.4.2-canary.0 - 2025-07-14
  • 15.4.1 - 2025-07-14
  • 15.4.0 - 2025-05-30
  • 15.4.0-canary.130 - 2025-07-14
  • 15.4.0-canary.129 - 2025-07-13
  • 15.4.0-canary.128 - 2025-07-12
  • 15.4.0-canary.127 - 2025-07-11
  • 15.4.0-canary.126 - 2025-07-11
  • 15.4.0-canary.123 - 2025-07-09
  • 15.4.0-canary.122 - 2025-07-09
  • 15.4.0-canary.121 - 2025-07-09
  • 15.4.0-canary.120 - 2025-07-09
  • 15.4.0-canary.119 - 2025-07-08
  • 15.4.0-canary.118 - 2025-07-08
  • 15.4.0-canary.116 - 2025-07-06
  • 15.4.0-canary.115 - 2025-07-05
  • 15.4.0-canary.114 - 2025-07-04
  • 15.4.0-canary.113 - 2025-07-03
  • 15.4.0-canary.112 - 2025-07-03
  • 15.4.0-canary.111 - 2025-07-03
  • 15.4.0-canary.110 - 2025-07-02
  • 15.4.0-canary.109 - 2025-07-02
  • 15.4.0-canary.108 - 2025-07-01
  • 15.4.0-canary.107 - 2025-07-01
  • 15.4.0-canary.106 - 2025-07-01
  • 15.4.0-canary.105 - 2025-07-01
  • 15.4.0-canary.104 - 2025-06-30
  • 15.4.0-canary.103 - 2025-06-29
  • 15.4.0-canary.102 - 2025-06-27
  • 15.4.0-canary.101 - 2025-06-27
  • 15.4.0-canary.100 - 2025-06-26
  • 15.4.0-canary.99 - 2025-06-26
  • 15.4.0-canary.98 - 2025-06-26
  • 15.4.0-canary.97 - 2025-06-26
  • 15.4.0-canary.96 - 2025-06-25
  • 15.4.0-canary.95 - 2025-06-24
  • 15.4.0-canary.94 - 2025-06-23
  • 15.4.0-canary.93 - 2025-06-23
  • 15.4.0-canary.92 - 2025-06-22
  • 15.4.0-canary.91 - 2025-06-21
  • 15.4.0-canary.90 - 2025-06-21
  • 15.4.0-canary.89 - 2025-06-20
  • 15.4.0-canary.88 - 2025-06-20
  • 15.4.0-canary.87 - 2025-06-19
  • 15.4.0-canary.86 - 2025-06-18
  • 15.4.0-canary.85 - 2025-06-18
  • 15.4.0-canary.84 - 2025-06-16
  • 15.4.0-canary.83 - 2025-06-14
  • 15.4.0-canary.82 - 2025-06-13
  • 15.4.0-canary.81 - 2025-06-13
  • 15.4.0-canary.80 - 2025-06-12
  • 15.4.0-canary.79 - 2025-06-11
  • 15.4.0-canary.78 - 2025-06-11
  • 15.4.0-canary.77 - 2025-06-11
  • 15.4.0-canary.76 - 2025-06-10
  • 15.4.0-canary.75 - 2025-06-10
  • 15.4.0-canary.74 - 2025-06-10
  • 15.4.0-canary.73 - 2025-06-09
  • 15.4.0-canary.72 - 2025-06-08
  • 15.4.0-canary.71 - 2025-06-07
  • 15.4.0-canary.70 - 2025-06-06
  • 15.4.0-canary.69 - 2025-06-06
  • 15.4.0-canary.68 - 2025-06-05
  • 15.4.0-canary.67 - 2025-06-04
  • 15.4.0-canary.66 - 2025-06-04
  • 15.4.0-canary.65 - 2025-06-04
  • 15.4.0-canary.64 - 2025-06-04
  • 15.4.0-canary.63 - 2025-06-03
  • 15.4.0-canary.62 - 2025-06-03
  • 15.4.0-canary.61 - 2025-06-01
  • 15.4.0-canary.60 - 2025-05-31
  • 15.4.0-canary.59 - 2025-05-30
  • 15.4.0-canary.58 - 2025-05-30
  • 15.4.0-canary.57 - 2025-05-29
  • 15.4.0-canary.56 - 2025-05-28
  • 15.4.0-canary.55 - 2025-05-27
  • 15.4.0-canary.54 - 2025-05-27
  • 15.4.0-canary.53 - 2025-05-26
  • 15.4.0-canary.52 - 2025-05-25
  • 15.4.0-canary.51 - 2025-05-24
  • 15.4.0-canary.50 - 2025-05-23
  • 15.4.0-canary.49 - 2025-05-23
  • 15.4.0-canary.48 - 2025-05-22
  • 15.4.0-canary.47 - 2025-05-21
  • 15.4.0-canary.46 - 2025-05-21
  • 15.4.0-canary.45 - 2025-05-21
  • 15.4.0-canary.44 - 2025-05-20
  • 15.4.0-canary.43 - 2025-05-20
  • 15.4.0-canary.42 - 2025-05-19
  • 15.4.0-canary.41 - 2025-05-19
  • 15.4.0-canary.40 - 2025-05-19
  • 15.4.0-canary.39 - 2025-05-18
  • 15.4.0-canary.38 - 2025-05-17
  • 15.4.0-canary.37 - 2025-05-16
  • 15.4.0-canary.36 - 2025-05-15
  • 15.4.0-canary.35 - 2025-05-15
  • 15.4.0-canary.34 - 2025-05-13
  • 15.4.0-canary.33 - 2025-05-13
  • 15.4.0-canary.31 - 2025-05-10
  • 15.4.0-canary.30 - 2025-05-09
  • 15.4.0-canary.29 - 2025-05-09
  • 15.4.0-canary.28 - 2025-05-08
  • 15.4.0-canary.27 - 2025-05-08
  • 15.4.0-canary.26 - 2025-05-07
  • 15.4.0-canary.24 - 2025-05-06
  • 15.4.0-canary.23 - 2025-05-05
  • 15.4.0-canary.22 - 2025-05-05
  • 15.4.0-canary.21 - 2025-05-05
  • 15.4.0-canary.20 - 2025-05-03
  • 15.4.0-canary.19 - 2025-05-02
  • 15.4.0-canary.18 - 2025-05-01
  • 15.4.0-canary.17 - 2025-04-30
  • 15.4.0-canary.16 - 2025-04-30
  • 15.4.0-canary.15 - 2025-04-29
  • ...

Snyk has created this PR to upgrade next from 13.1.6 to 15.4.4.

See this package in npm:
next

See this project in Snyk:
https://app.snyk.io/org/nerds-github/project/cd0ad9f1-9f38-4860-92f7-d76da4843eb0?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants