Skip to content

Conversation

@perkinsjr
Copy link
Contributor

@perkinsjr perkinsjr commented Dec 3, 2025

What does this PR do?

This patches CVE-2025-66478

If there is not an issue for this, please create one first. This is used to tracking purposes and also helps use understand why this PR exists

Type of change

  • Bug fix (non-breaking change which fixes an issue)
  • Chore (refactoring code, technical debt, workflow improvements)
  • Blog post
  • Changelog
  • Enhancement (small improvements)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)

How should this be tested?

  • Test A
  • Test B

Checklist

Required

  • Filled out the "How to test" section in this PR
  • Read Contributing Guide
  • Self-reviewed my own code
  • Commented on my code in hard-to-understand areas
  • Ran pnpm build
  • Ran pnpm fmt
  • Checked for warnings, there are none
  • Removed all console.logs
  • Merged the latest changes from main onto my branch with git pull origin main
  • My changes don't cause any responsiveness issues

Appreciated

  • If a UI change was made: Added a screen recording or screenshots to this PR

Summary by CodeRabbit

  • Chores
    • Updated Next.js framework dependencies to latest patch versions across applications for improved stability, performance, and security enhancements.

✏️ Tip: You can customize this high-level summary in your review settings.

@vercel
Copy link

vercel bot commented Dec 3, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
play Ready Ready Preview Comment Dec 3, 2025 5:16pm
ratelimit Ready Ready Preview Comment Dec 3, 2025 5:16pm
www Ready Ready Preview Comment Dec 3, 2025 5:16pm

@perkinsjr perkinsjr merged commit abdcaba into main Dec 3, 2025
6 of 7 checks passed
@perkinsjr perkinsjr deleted the next-upgrade branch December 3, 2025 17:16
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Dec 3, 2025

Caution

Review failed

The pull request is closed.

Walkthrough

Next.js dependencies updated across two apps: ratelimit app upgraded from version 15.4.2 to 15.5.7, and www app upgraded from 16.0.0 to 16.0.7. No functional code changes or logic modifications introduced.

Changes

Cohort / File(s) Change Summary
Dependency Updates
apps/ratelimit/package.json, apps/www/package.json
Next.js version bumps: ratelimit from 15.4.2 → 15.5.7; www from 16.0.0 → 16.0.7

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

  • Verify version numbers are correctly specified in both package.json files
  • Confirm no unintended dependency modifications alongside the version bumps

Poem

🐰 Hop, hop—the Next versions fly high,
From 15 to 15.5, reaching toward the sky,
And sixteen grows from zero to seven,
These little bumps feel close to heaven!
Dependencies dance, so light and neat,
CodeRabbit hops in rhythm to the beat! 🎉

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch next-upgrade

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 0451575 and da63fac.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (2)
  • apps/ratelimit/package.json (1 hunks)
  • apps/www/package.json (1 hunks)

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants