Skip to content

[Snyk] Upgrade next from 16.0.7 to 16.1.4#4

Open
VictorAzizJ wants to merge 1 commit into
masterfrom
snyk-upgrade-d7aa75270e41bc78b5fb831670e1be69
Open

[Snyk] Upgrade next from 16.0.7 to 16.1.4#4
VictorAzizJ wants to merge 1 commit into
masterfrom
snyk-upgrade-d7aa75270e41bc78b5fb831670e1be69

Conversation

@VictorAzizJ
Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to upgrade next from 16.0.7 to 16.1.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 76 versions ahead of your current version.

  • The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Deserialization of Untrusted Data
SNYK-JS-NEXT-14400636
796 Proof of Concept
medium severity Exposure of Sensitive System Information to an Unauthorized Control Sphere
SNYK-JS-NEXT-14400644
796 No Known Exploit
Release notes
Package name: next
  • 16.1.4 - 2026-01-19

    Note

    This release is backporting bug fixes. It does not include all pending features/changes on canary.

    Core Changes

    • Only filter next config if experimental flag is enabled (#88733)

    Credits

    Huge thanks to @ mischnic for helping!

  • 16.1.3 - 2026-01-16

    Note

    This release is backporting bug fixes. It does not include all pending features/changes on canary.

    Core Changes

    • Fix linked list bug in LRU deleteFromLru (#88652)
    • Fix relative same host redirects in node middleware (#88253)

    Credits

    Huge thanks to @ acdlite and @ ijjk for helping!

  • 16.1.2 - 2026-01-14

    Note

    This release is backporting bug fixes. It does not include all pending features/changes on canary.

    Core Changes

    • Turbopack: Update to swc_core v50.2.3 (#87841) (#88296)
      • Fixes a crash when processing mdx files with multibyte characters. (#87713)
    • Turbopack: mimalloc upgrade and enabling it on musl (#88503) (#87815) (#88426)
      • Fixes a significant performance issue on musl-based Linux distributions (e.g. Alpine in Docker) related to musl's allocator.
      • Other platforms have always used mimalloc, but we previously did not use mimalloc on musl because of compilation issues that have since been resolved.

    Credits

    Huge thanks to @ mischnic for helping!

  • 16.1.1 - 2025-12-22
  • 16.1.1-canary.36 - 2026-01-20
  • 16.1.1-canary.35 - 2026-01-20
  • 16.1.1-canary.34 - 2026-01-19

    Core Changes

    • Add negation pattern support to --debug-build-paths: #88654
    • Only filter next config if experimental flag is enabled: #88733
    • [Devtool Indicator] Fix cross alignment: #88664
    • Turbopack: don't use build id for pages router client-side manifests: #88641
    • Allow inspecting server with next start --inspect: #88744
    • Turbopack: Add --debug-build-paths support to filter routes: #88655
    • Upgrade React from bef88f7c-20260116 to 41b3e9a6-20260119: #88756
    • Use rewritten pathname for implicit cache tags: #88732

    Misc Changes

    • [ci] Enable Turborepo remote caching in e2e release deploy tests: #88746
    • [test] Deflake test/development/app-dir/browser-log-forwarding/fixtures/verbose-level/verbose-level.test.ts: #88754
    • Fix Build Commands section in AGENTS.md: #88757
    • [test] Deflake test/development/app-dir/hydration-error-count/hydration-error-count.test.ts: #88749
    • [ci] Exclude test/production from deploy tests: #88763
    • Apply buildArgs also for deploy tests (via package.json): #88731

    Credits

    Huge thanks to @ unstubbable, @ mischnic, @ williambout, and @ eps1lon for helping!

  • 16.1.1-canary.33 - 2026-01-19

    Misc Changes

    • Revert "[turbopack] Add bundling support for worker_threads": #88725

    Credits

    Huge thanks to @ sokra for helping!

  • 16.1.1-canary.32 - 2026-01-17

    Core Changes

    • fix: setImmediate[util.promisify.custom] access fails in edge runtime: #88685
    • Fix --debug-build-paths bracket escaping for glob patterns: #88660

    Misc Changes

    • [turbopack] Add bundling support for worker_threads: #87746
    • [cna] Ensure created app is not considered the workspace root in pnpm: #88647

    Credits

    Huge thanks to @ lukesandberg, @ eps1lon, @ lubieowoce, and @ unstubbable for helping!

  • 16.1.1-canary.31 - 2026-01-16

    Core Changes

    • Upgrade React from 4a3d993e-20260114 to bef88f7c-20260116: #88649
    • fix: make RedirectType constant properties literal types: #88653
    • Turbopack: add support for matching loaders on resource queries: #88644
    • fix: capture promisified setImmediate separately: #88346

    Misc Changes

    • Turbopack: use bugs.nextjs.org for Turbopack panic error reports: #88356
    • Turbopack: docs: condition.query will ship in 16.2.0, not 16.1.1: #88663

    Credits

    Huge thanks to @ naaa760, @ sokra, @ wbinnssmith, @ jgeschwendt, and @ bgw for helping!

  • 16.1.1-canary.30 - 2026-01-16

    Core Changes

    • Fix incorrect 'Ready in' time for next start: #88589
    • feat: server action logging: #88277
    • Log browser error and warnings in terminal: #88352

    Misc Changes

    • Turbopack: avoid removing cells for erroring tasks: #88305
    • [ci] Use native concurrency feature in build-and-test: #87287
    • doc: add details of mcp client integration: #88543
    • Turbopack: unflake unit test: #88620
    • Turbopack: snapshot the ModuleGraph to avoid (eventual) inconsistent graphs: #88340
    • Turbopack: Consistency for compute_async_module_info: #88409
    • Turbopack: follow tracing spans through aggregation update queue: #88410
    • Turbopack: avoid chunk_item_id task and use selective cell access instead: #88411
    • Turbopack: MappedReadRef should be Send and Sync: #88558
    • Turbopack: selective read for module_chunk_groups in ChunkGroupInfo: #88559
    • Turbopack: use selective reads for merged modules: #88560
    • Turbopack: add caching to chunking: #88561

    Credits

    Huge thanks to @ sokra, @ eps1lon, @ timneutkens, and @ huozhi for helping!

  • 16.1.1-canary.29 - 2026-01-15

    Core Changes

    • fetch(next/image): reduce maximumResponseBody from 300MB to 50MB: #88588
    • [CC] Fix dev validation error from server action bound args: #88600

    Misc Changes

    • feat: add TaskStorage derive macro and schema infrastructure: #88338
    • docs: fix Pages Router fonts documentation showing App Router examples: #88326
    • [ci] Don't retry/notify for failed deploy tests with custom tarball URLs: #88576
    • fix(turbopack): Collect declare global {} in VarDeclWithTsDeclareCollector: #88568
    • Update labeler.json: #88591
    • Fix optional parent_task_id compile failure w/tokio_tracing enabled: #88598
    • Turbopack: support disabling tsconfig lookup: #88529
    • Turbopack: run tasks with priority based on distance to leaf: #87662

    Credits

    Huge thanks to @ lukesandberg, @ timneutkens, @ unstubbable, @ kdy1, @ mischnic, @ mmastrac, @ sokra, @ styfle, and @ lubieowoce for helping!

  • 16.1.1-canary.28 - 2026-01-14

    Core Changes

    • Turbopack: more dead code: #88505
    • fix(build): prevent route handler manifests from inheriting unrelated client components: #88419
    • Upgrade React from 65eec428-20251218 to 3e1abcc8-20260113: #88530
    • Better typesafety for interopDefault: #88486
    • keep next-env.d.s unchanged between dev and build: #88428
    • Remove sibling caches from CacheNode tree: #87991
    • Upgrade React from 3e1abcc8-20260113 to 4a3d993e-20260114: #88547
    • Finish deleting Mutable from router implementation: #88046

    Misc Changes

    • Remove lerna bootstrap from the clean script in package.json: #88527
    • docs: add useSearchParams and useParams documentation for Pages Router: #88429
    • Turbopack: Clean up VcRead::Repr associated type: #88456
    • [cna] Avoid error with out-of-box Netlify config: #88546
    • [turbopack] Move some of the logic for issue filtering into the rust layer: #88511
    • Update Rspack production test manifest: #88469
    • Update Rspack development test manifest: #88470

    Credits

    Huge thanks to @ mischnic, @ timneutkens, @ unstubbable, @ huozhi, @ acdlite, @ bgw, @ karlhorky, @ lukesandberg, and @ vercel-release-bot for helping!

  • 16.1.1-canary.27 - 2026-01-14
  • 16.1.1-canary.26 - 2026-01-14
  • 16.1.1-canary.25 - 2026-01-13
  • 16.1.1-canary.24 - 2026-01-13
  • 16.1.1-canary.23 - 2026-01-12
  • 16.1.1-canary.22 - 2026-01-12
  • 16.1.1-canary.21 - 2026-01-11
  • 16.1.1-canary.20 - 2026-01-09
  • 16.1.1-canary.19 - 2026-01-08
  • 16.1.1-canary.18 - 2026-01-08
  • 16.1.1-canary.17 - 2026-01-07
  • 16.1.1-canary.16 - 2026-01-07
  • 16.1.1-canary.15 - 2026-01-06
  • 16.1.1-canary.14 - 2026-01-06
  • 16.1.1-canary.13 - 2026-01-05
  • 16.1.1-canary.12 - 2026-01-04
  • 16.1.1-canary.11 - 2026-01-03
  • 16.1.1-canary.10 - 2025-12-30
  • 16.1.1-canary.9 - 2025-12-29
  • 16.1.1-canary.8 - 2025-12-28
  • 16.1.1-canary.7 - 2025-12-28
  • 16.1.1-canary.6 - 2025-12-26
  • 16.1.1-canary.5 - 2025-12-23
  • 16.1.1-canary.4 - 2025-12-22
  • 16.1.1-canary.3 - 2025-12-22
  • 16.1.1-canary.2 - 2025-12-20
  • 16.1.1-canary.1 - 2025-12-19
  • 16.1.1-canary.0 - 2025-12-18
  • 16.1.0 - 2025-12-18
  • 16.1.0-canary.34 - 2025-12-18
  • 16.1.0-canary.33 - 2025-12-18
  • 16.1.0-canary.32 - 2025-12-17
  • 16.1.0-canary.31 - 2025-12-17
  • 16.1.0-canary.30 - 2025-12-16
  • 16.1.0-canary.29 - 2025-12-16
  • 16.1.0-canary.28 - 2025-12-16
  • 16.1.0-canary.27 - 2025-12-15
  • 16.1.0-canary.26 - 2025-12-15
  • 16.1.0-canary.25 - 2025-12-15
  • 16.1.0-canary.24 - 2025-12-15
  • 16.1.0-canary.22 - 2025-12-15
  • 16.1.0-canary.21 - 2025-12-14
  • 16.1.0-canary.20 - 2025-12-12
  • 16.1.0-canary.19 - 2025-12-11
  • 16.1.0-canary.18 - 2025-12-11
  • 16.1.0-canary.17 - 2025-12-11
  • 16.1.0-canary.16 - 2025-12-08
  • 16.1.0-canary.15 - 2025-12-05
  • 16.1.0-canary.14 - 2025-12-04
  • 16.1.0-canary.13 - 2025-12-03
  • 16.1.0-canary.12 - 2025-12-03
  • 16.1.0-canary.11 - 2025-12-02
  • 16.1.0-canary.10 - 2025-12-01
  • 16.1.0-canary.9 - 2025-11-30
  • 16.1.0-canary.4 - 2025-11-26
  • 16.1.0-canary.3 - 2025-11-26
  • 16.1.0-canary.2 - 2025-11-25
  • 16.1.0-canary.1 - 2025-11-24
  • 16.1.0-canary.0 - 2025-11-24
  • 16.0.11 - 2026-01-26
  • 16.0.10 - 2025-12-11
  • 16.0.9 - 2025-12-11
  • 16.0.8 - 2025-12-08
  • 16.0.7 - 2025-12-03
from next GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade next from 16.0.7 to 16.1.4.

See this package in npm:
next

See this project in Snyk:
https://app.snyk.io/org/victorazizj/project/4975ccb2-236d-4500-bd02-0688a58a3e06?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants