Skip to content

Bump Next to 16.2.6#30

Merged
DeliciousBuding merged 1 commit into
mainfrom
chore/next-16.2.6-security-20260515
May 15, 2026
Merged

Bump Next to 16.2.6#30
DeliciousBuding merged 1 commit into
mainfrom
chore/next-16.2.6-security-20260515

Conversation

@DeliciousBuding
Copy link
Copy Markdown
Owner

Summary

Validation

  • npm ci
  • python scripts/check_public_boundary.py
  • npm --prefix apps/web run lint
  • npm --prefix apps/web run test
  • npm --prefix apps/web run build
  • go -C apps/api-go test ./...
  • go -C apps/api-go build ./cmd/platform-api

Copilot AI review requested due to automatic review settings May 15, 2026 07:31
@DeliciousBuding DeliciousBuding merged commit 8b8aaca into main May 15, 2026
4 of 5 checks passed
@DeliciousBuding DeliciousBuding deleted the chore/next-16.2.6-security-20260515 branch May 15, 2026 07:33
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the next dependency from version 16.2.4 to 16.2.6, including the necessary updates to the package-lock.json for various platform-specific binaries. A review comment identifies an inconsistency in the lockfile where the license field was omitted for the @next/swc-win32-x64-msvc package entry, despite being added to other similar SWC dependencies.

Comment thread package-lock.json
Comment on lines +645 to +647
"version": "16.2.6",
"resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.2.6.tgz",
"integrity": "sha512-F0+4i0h9J6C4eE3EAPWsoCk7UW/dbzOjyzxY0qnDUOYFu6FFmdZ6l97/XdV3/Nz3VYyO7UWjyEJUXkGqcoXfMA==",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The license field is missing for the @next/swc-win32-x64-msvc package entry, whereas it was added to all other @next/swc-* packages in this pull request (e.g., lines 539, 555, 571). This inconsistency in the lockfile should be corrected to ensure uniform metadata across all platform-specific binaries.

      "version": "16.2.6",
      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.2.6.tgz",
      "integrity": "sha512-F0+4i0h9J6C4eE3EAPWsoCk7UW/dbzOjyzxY0qnDUOYFu6FFmdZ6l97/XdV3/Nz3VYyO7UWjyEJUXkGqcoXfMA==",
      "license": "MIT",

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants