Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade next from 12.1.6 to 15.1.2 #581

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

q1blue
Copy link
Collaborator

@q1blue q1blue commented Jan 9, 2025

snyk-top-banner

Snyk has created this PR to upgrade next from 12.1.6 to 15.1.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 1405 versions ahead of your current version.

  • The recommended version was released 21 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Uncontrolled Recursion
SNYK-JS-NEXT-8186172
44 No Known Exploit
high severity Missing Authorization
SNYK-JS-NEXT-8520073
44 No Known Exploit
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085
44 No Known Exploit
medium severity Resource Exhaustion
SNYK-JS-NEXT-6032387
44 Proof of Concept
medium severity Improper Input Validation
SNYK-JS-POSTCSS-5926692
44 No Known Exploit
Release notes
Package name: next
  • 15.1.2 - 2024-12-19
  • 15.1.1 - 2024-12-17

    Note

    This release is backporting bug fixes. It does not include all pending features/changes on canary.

    Core Changes

    • fix(turbo): sassOptions silenceDeprecations was not overwritten with user options: #73937
    • refactor collectAppPageSegments: #73908

    Credits

    Huge thanks to @ devjiwonchoi and @ ztanner for helping!

  • 15.1.1-canary.27 - 2025-01-07
  • 15.1.1-canary.26 - 2025-01-06
  • 15.1.1-canary.25 - 2025-01-03
  • 15.1.1-canary.24 - 2025-01-02
  • 15.1.1-canary.23 - 2024-12-28
  • 15.1.1-canary.22 - 2024-12-27
  • 15.1.1-canary.21 - 2024-12-26
  • 15.1.1-canary.20 - 2024-12-25
  • 15.1.1-canary.19 - 2024-12-24
  • 15.1.1-canary.18 - 2024-12-23
  • 15.1.1-canary.17 - 2024-12-22
  • 15.1.1-canary.16 - 2024-12-20
  • 15.1.1-canary.15 - 2024-12-20
  • 15.1.1-canary.14 - 2024-12-19
  • 15.1.1-canary.13 - 2024-12-18

    Core Changes

    • Add storybook for UI testing: #74032
    • [Segment Cache] Support for non-PPR projects/pages: #73960
    • exclude .stories. and .test. files from taskfile watch and error plugin: #74064
    • Upgrade React from 7283a213-20241206 to 372ec00c-20241209: #73749
    • fix: aria attribute typo for error overlay: #74074
    • fix: set x-deployment-id to every middleware prefetch request: #71193
    • Add middleware handler for error code telemetry: #74088
    • Create ErrorOverlay component: #74073

    Example Changes

    • examples: update with-mdx-remote example to utilize the App Router: #74067
    • Removed duplicated cn function declaration from lib dir: #74065

    Misc Changes

    • docs(redirect): add typescript example and fix params as promise: #73963
    • docs: Fix filename for Turbopack traces: #74066
    • Fix flakey deploy test assertion: #74060
    • Specify PPR test dimension via environment variable only: #74031
    • Name default Jest project according to used env variables: #74084
    • test: assert that app exited without signal: #74087
    • sync-react: Handle version bumps across SemVer minors and release channels: #74091

    Credits

    Huge thanks to @ devjiwonchoi, @ acdlite, @ devpla, @ mischnic, @ ijjk, @ eps1lon, @ abvthecity, @ JamBalaya56562, @ damiensedgwick, @ lubieowoce, and @ gaojude for helping!

  • 15.1.1-canary.12 - 2024-12-18

    Core Changes

    • refactor(turbopack): Make various types directly or indirectly included in State<T> types into OperationValues and/or NonLocalValues: #74008
    • Fork react-dev-overlay for new UI: #74017
    • fix: added fallback source route to prerender manifest: #74052

    Credits

    Huge thanks to @ bgw, @ devjiwonchoi, and @ wyattjoh for helping!

  • 15.1.1-canary.11 - 2024-12-17

    Core Changes

    • refactor: cache lowercasing all the locales: #74038
    • Add SRI support for Node.js Runtime : #73891
    • Separate bots detection utils: #74000
    • docs: remove a duplicated word in redirect code comment: #74043
    • examples: update gitignore files for parity for yarn recommendations: #71956
    • chore: update turbopack document path in the warning message: #72597
    • Clean up react-dev-overlay before fork: #74016
    • chore(next/image): improve imgopt api bypass detection for unsupported images: #73909
    • [Segment Cache] Add CacheStatus.Empty: #73667
    • chore: move static paths utils into own folder: #73928
    • Delete unused GroupedStackFrames.tsx: #74028
    • [Segment Cache] Move cache key creation to client : #73853
    • feat: added partial shell generation using root params: #73816
    • feat: added error when there's missing root params in generateStaticParams: #73933
    • Remove parentRendered argument: #73877
    • Generate per-segment responses for any static page: #73945
    • feat: added fallback route params to prerender manifest: #74004

    Example Changes

    • examples: update next-config-js document path: #73774
    • examples: convert @ next/third-parties examples from JS to TS: #73602
    • updated with-orbit-components example to utilize the App Router.: #73266
    • examples: update with-styled-components README: #73729
    • examples: update with-orbit-components README: #74011

    Misc Changes

    • Make ChunkItems reference only OutputAssets: #73824
    • Install Vercel CLI at start of E2E deploy tests: #74047
    • Fixed small typo in the doc: #73971
    • docs: fixed regex for parsing base64String, and updated subscribeToPush function.: #73940
    • exclude some modules from auto-import: #74020
    • [Docs]: Clarify redirects in next.config to negate potential infinite redirects: #74019
    • Update Turbopack development test manifest: #74013
    • Turbopack: use old client reference collection implementation: #74029
    • Create Jest project for Turbopack: #73769
    • [Turbopack] move git version info to top-level crate to fix caching issues: #74015

    Credits

    Huge thanks to @ JamBalaya56562, @ wyattjoh, @ unstubbable, @ wbinnssmith, @ ijjk, @ huozhi, @ suu3, @ Marukome0743, @ PapatMayuri, @ Sahil4883, @ abyii, @ devjiwonchoi, @ lubieowoce, @ styfle, @ molebox, @ mischnic, @ eps1lon, @ acdlite, @ wyattjoh, @ sokra, and @ maciej-ka for helping!

  • 15.1.1-canary.10 - 2024-12-17

    Core Changes

    • refactor: make locales array immutable: #74037
    • fix: skip rendering dynamic root segment routes: #74039

    Misc Changes

    • chore(turbopack): Fix build error when CI environment variable is not supplied: #74041

    Credits

    Huge thanks to @ wyattjoh and @ bgw for helping!

  • 15.1.1-canary.7 - 2024-12-16

    Core Changes

    • Ignore RSC fetch errors after hard navigation: #73975
    • Fix error code check in windows: #73981
    • Separate viewport and metadata in rsc and cache: #73867
    • Add feature flag for new dev overlay: #73977
    • Restore RSC fetch error handling after navigating back: #73985

    Misc Changes

    • docs: fix sitemap changelog table formatting: #73760
    • fix(docs): vitest manual setup: #73754
    • docs: fix file extension and missing export: #73842
    • docs: update tailwind.config.ts to use satisfies operator: #73924
    • docs: Fix MDX syntax error: #73970
    • chore(next-custom-transforms): Mark fixture outputs as generated: #73918
    • docs(use-cache): add missing jsx switcher example and types: #73473
    • docs(internalization): add typescript examples and fix params as promise: #73240
    • docs: add missing quotation marks in exmaple code: #73720
    • chore(turbo-tasks-macros): Remove use of associated items for NativeFunction construction: #73929
    • refactor(turbo-tasks-macros): Strip (already hidden) doc attributes from inline function signatures: #73931
    • chore(github): fix wrong-issue-template body: #74003

    Credits

    Huge thanks to @ davidhu2000, @ attilarepka, @ JamBalaya56562, @ mischnic, @ unstubbable, @ gaojude, @ bgw, @ devpla, @ dydals3440, @ huozhi, @ devjiwonchoi, and @ samcx for helping!

  • 15.1.1-canary.6 - 2024-12-15

    Example Changes

    • examples: remove with-tailwindcss example: #73919

    Misc Changes

    • Docs: fix typo in examples page: #73907
    • docs: add next.config.ts code switcher to Redirecting docs: #73848
    • docs: add tsx switcher to linking and navigation: #73846
    • docs: update file structure on contribution guide: #73778
    • docs: add next-intlayer into i18n solution list: #73750
    • docs: minor typos and fixes: #73955

    Credits

    Huge thanks to @ delbaoliveira, @ JamBalaya56562, @ aymericzip, and @ leerob for helping!

  • 15.1.1-canary.5 - 2024-12-14

    Core Changes

    • Turbopack: ignore empty NEXT_TURBOPACK_TRACING var: #73903

    Misc Changes

    • chore(github): add issue_wrong_template workflow: #73882
    • docs(mdx): add a dynamic imports section for App Router: #73466
    • chore: increase test sharding: #73852
    • fix(turbo): sassOptions silenceDeprecations was not overwritten with user options: #73937

    Credits

    Huge thanks to @ samcx, @ wyattjoh, @ mischnic, and @ devjiwonchoi for helping!

  • 15.1.1-canary.4 - 2024-12-13
  • 15.1.1-canary.3 - 2024-12-13
  • 15.1.1-canary.2 - 2024-12-12
  • 15.1.1-canary.1 - 2024-12-11
  • 15.1.1-canary.0 - 2024-12-10
  • 15.1.0 - 2024-12-10
  • 15.0.4 - 2024-12-05
  • 15.0.4-canary.52 - 2024-12-10
  • 15.0.4-canary.51 - 2024-12-10
  • 15.0.4-canary.50 - 2024-12-10
  • 15.0.4-canary.49 - 2024-12-09
  • 15.0.4-canary.48 - 2024-12-08
  • 15.0.4-canary.47 - 2024-12-07
  • 15.0.4-canary.46 - 2024-12-06
  • 15.0.4-canary.45 - 2024-12-05
  • 15.0.4-canary.44 - 2024-12-05
  • 15.0.4-canary.43 - 2024-12-05
  • 15.0.4-canary.42 - 2024-12-05
  • 15.0.4-canary.41 - 2024-12-04
  • 15.0.4-canary.40 - 2024-12-04
  • 15.0.4-canary.39 - 2024-12-04
  • 15.0.4-canary.38 - 2024-12-04
  • 15.0.4-canary.37 - 2024-12-03
  • 15.0.4-canary.36 - 2024-12-03
  • 15.0.4-canary.34 - 2024-12-02
  • 15.0.4-canary.33 - 2024-11-30
  • 15.0.4-canary.32 - 2024-11-29
  • 15.0.4-canary.31 - 2024-11-28
  • 15.0.4-canary.30 - 2024-11-27
  • 15.0.4-canary.29 - 2024-11-26
  • 15.0.4-canary.28 - 2024-11-25
  • 15.0.4-canary.27 - 2024-11-24
  • 15.0.4-canary.26 - 2024-11-24
  • 15.0.4-canary.25 - 2024-11-23
  • 15.0.4-canary.24 - 2024-11-22
  • 15.0.4-canary.23 - 2024-11-21
  • 15.0.4-canary.22 - 2024-11-21
  • 15.0.4-canary.21 - 2024-11-20
  • 15.0.4-canary.20 - 2024-11-19
  • 15.0.4-canary.19 - 2024-11-18
  • 15.0.4-canary.18 - 2024-11-18
  • 15.0.4-canary.17 - 2024-11-18
  • 15.0.4-canary.16 - 2024-11-18
  • 15.0.4-canary.15 - 2024-11-17
  • 15.0.4-canary.14 - 2024-11-16
  • 15.0.4-canary.13 - 2024-11-15
  • 15.0.4-canary.12 - 2024-11-14
  • 15.0.4-canary.11 - 2024-11-13
  • 15.0.4-canary.10 - 2024-11-13
  • 15.0.4-canary.9 - 2024-11-13
  • 15.0.4-canary.8 - 2024-11-13
  • 15.0.4-canary.7 - 2024-11-12
  • 15.0.4-canary.6 - 2024-11-11
  • 15.0.4-canary.5 - 2024-11-10
  • 15.0.4-canary.4 - 2024-11-09
  • 15.0.4-canary.3 - 2024-11-08
  • 15.0.4-canary.2 - 2024-11-08
  • 15.0.3 - 2024-11-07
  • 15.0.3-canary.9 - 2024-11-07
  • 15.0.3-canary.8 - 2024-11-06
  • 15.0.3-canary.7 - 2024-11-05
  • 15.0.3-canary.6 - 2024-11-04
  • 15.0.3-canary.5 - 2024-11-03
  • 15.0.3-canary.4 - 2024-11-01
  • 15.0.3-canary.3 - 2024-10-31
  • 15.0.3-canary.2 - 2024-10-30
  • 15.0.3-canary.1 - 2024-10-29
  • 15.0.3-canary.0 - 2024-10-29
  • 15.0.2 - 2024-10-29
  • 15.0.2-canary.11 - 2024-10-29
  • 15.0.2-canary.10 - 2024-10-28
  • 15.0.2-canary.9 - 2024-10-27
  • 15.0.2-canary.8 - 2024-10-26
  • 15.0.2-canary.7 - 2024-10-25
  • 15.0.2-canary.6 - 2024-10-24
  • 15.0.2-canary.5 - 2024-10-24
  • 15.0.2-canary.4 - 2024-10-24
  • 15.0.2-canary.3 - 2024-10-24
  • 15.0.2-canary.2 - 2024-10-23
  • 15.0.2-canary.1 - 2024-10-23
  • 15.0.2-canary.0 - 2024-10-23
  • 15.0.1 - 2024-10-23
  • 15.0.1-canary.3 - 2024-10-22
  • 15.0.1-canary.2 - 2024-10-22
  • 15.0.1-canary.1 - 2024-10-21
  • 15.0.1-canary.0 - 2024-10-21
  • 15.0.0 - 2024-10-21
  • 15.0.0-rc.1 - 2024-10-15
  • 15.0.0-rc.0 - 2024-05-23
  • 15.0.0-canary.205 - 2024-10-21
  • 15.0.0-canary.204 - 2024-10-21
  • 15.0.0-canary.203 - 2024-10-21
  • 15.0.0-canary.202 - 2024-10-20
  • 15.0.0-canary.201 - 2024-10-20
  • 15.0.0-canary.200 - 2024-10-19
  • 15.0.0-canary.199 - 2024-10-19
  • 15.0.0-canary.198 - 2024-10-18
  • 15.0.0-canary.197 - 2024-10-17
  • 15.0.0-canary.196 - 2024-10-16
  • 15.0.0-canary.195 - 2024-10-15
  • 15.0.0-canary.194 - 2024-10-15
  • 15.0.0-canary.193 - 2024-10-15
  • 15.0.0-canary.192 - 2024-10-15
  • 15.0.0-canary.191 - 2024-10-14
  • 15.0.0-canary.190 - 2024-10-13
  • 15.0.0-canary.189 - 2024-10-13
  • 15.0.0-canary.188 - 2024-10-13
  • 15.0.0-canary.187 - 2024-10-12
  • 15.0.0-canary.186 - 2024-10-12
  • 15.0.0-canary.185 - 2024-10-11
  • 15.0.0-canary.184 - 2024-10-11
  • 15.0.0-canary.183 - 2024-10-10
  • 15.0.0-canary.182 - 2024-10-09
  • 15.0.0-canary.181 - 2024-10-09
  • 15.0.0-canary.179 - 2024-10-04
  • 15.0.0-canary.178 - 2024-10-04
  • 15.0.0-canary.177 - 2024-10-02
  • 15.0.0-canary.176 - 2024-10-02
  • 15.0.0-canary.175 - 2024-10-01
  • 15.0.0-canary.174 - 2024-10-01
  • 15.0.0-canary.173 - 2024-09-28
  • 15.0.0-canary.172 - 2024-09-27
  • 15.0.0-canary.171 - 2024-09-25

Snyk has created this PR to upgrade next from 12.1.6 to 15.1.2.

See this package in npm:
next

See this project in Snyk:
https://app.snyk.io/org/q1blue-rxw/project/09d5ac16-0c31-4125-9796-e457446a1750?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants