chore(deps): update next and related dependencies to latest versions - #1199
Merged
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
1 Skipped Deployment
|
JamieSinn
approved these changes
Dec 12, 2025
JamieSinn
enabled auto-merge (squash)
December 12, 2025 15:17
Contributor
There was a problem hiding this comment.
Pull request overview
This PR updates Next.js dependencies across the repository to address security vulnerabilities CVE-2025-55184 (DoS) and CVE-2025-55183 (Source Code Exposure). The updates use tilde version constraints that resolve to patch versions containing the security fixes.
Key Changes:
- Updated root package Next.js from ~15.2.6 to ~15.2.7 (resolves to 15.2.8)
- Updated e2e test apps Next.js from ~15.4.8 to ~15.4.9 (resolves to 15.4.10)
- Regenerated yarn lock files with updated dependency checksums and @next/env versions
Reviewed changes
Copilot reviewed 3 out of 6 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| package.json | Updated Next.js version constraint from ~15.2.6 to ~15.2.7 in root package dependencies |
| yarn.lock | Updated root Next.js resolution to 15.2.8 with corresponding @next/env and checksum updates |
| e2e/nextjs/pages-router/app/package.json | Updated Next.js version constraint from ~15.4.8 to ~15.4.9 for pages router e2e tests |
| e2e/nextjs/pages-router/app/yarn.lock | Updated pages router Next.js resolution to 15.4.10 with regenerated DevCycle local dependencies and checksums |
| e2e/nextjs/app-router/app/package.json | Updated Next.js version constraint from ~15.4.8 to ~15.4.9 for app router e2e tests |
| e2e/nextjs/app-router/app/yarn.lock | Updated app router Next.js resolution to 15.4.10 with regenerated DevCycle local dependencies and checksums |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Bump
nextto fix CVE-2025-55184 (DoS) and CVE-2025-55183 (Source Code Exposure)Changes
next15.2.6 → 15.2.7+next15.4.8 → 15.4.9+next15.4.8 → 15.4.9+