Skip to content

Bump next from 15.5.21 to 16.2.12 in /apps/web - #300

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/web/next-16.2.10
Closed

Bump next from 15.5.21 to 16.2.12 in /apps/web#300
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/web/next-16.2.10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Contributor

Bumps next from 15.5.21 to 16.2.12.

Release notes

Sourced from next's releases.

v16.2.12

What's Changed

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

Moderate:

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Backport documentation fixes for v16.2 (#93804)
  • [backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
  • [backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
  • [backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)
  • [backport] Encode non-ASCII characters in cache tags at construction (#93918)
  • [backport] Fix server action forwarding loop with middleware rewrites (#93919)
  • [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
  • [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

... (truncated)

Commits
  • 2234717 v16.2.12
  • 957f5ed [Backport] Fixes to support TypeScript 7 (#95831)
  • b56eb16 Backport/docs fixes 16.2 - July round (#96031)
  • 9beca08 v16.2.11
  • 3c48c7a [16.x] Fix Turbopack middleware matcher with i18n single locale
  • ac1eff3 [16.x] Improve performance of checking valid MPA form submissions
  • 9a4651e [16.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
  • b512063 [16.x] Set correct origin for internal redirects in custom server
  • d303326 [16.x] Ensure exotic rewrite param values are properly encoded
  • 73b9487 [16.x] fix(fetch-cache): key fetch(Request, init) by the effective request
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apps/web/next-16.2.10 branch 5 times, most recently from 8d8f66d to 0fe2b00 Compare July 21, 2026 14:59
@dependabot dependabot Bot changed the title Bump next from 15.5.20 to 16.2.10 in /apps/web Bump next from 15.5.21 to 16.2.11 in /apps/web Jul 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apps/web/next-16.2.10 branch 2 times, most recently from 6cffecb to 23d5352 Compare July 24, 2026 09:57
@dependabot dependabot Bot changed the title Bump next from 15.5.21 to 16.2.11 in /apps/web Bump next from 15.5.21 to 16.2.12 in /apps/web Jul 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apps/web/next-16.2.10 branch from 23d5352 to dd9a9bd Compare July 28, 2026 08:18
@samrusani

Copy link
Copy Markdown
Owner

Kept open deliberately. These three are one coupled migration, not three bumps, and were tested together on 2026-07-28:

  • TypeScript 6 cannot land under Next 15: app/layout.tsx fails with TS2882 on the CSS side-effect import, and only typechecks under Next 16.
  • Next 16 pulls eslint-config-next 16, which ships native flat config. The current apps/web/eslint.config.mjs wraps it in FlatCompat, which then fails inside the eslintrc validator with a circular-structure TypeError. Fix is to import eslint-config-next/core-web-vitals directly.
  • With the config migrated, the new config enables react-hooks/set-state-in-effect, which flags 13 real violations in components/approval-detail.tsx, components/calendar-event-ingest-form.tsx, components/gmail-message-ingest-form.tsx, components/vnext-brain-workspace.tsx and components/workflow-memory-writeback-form.tsx.
  • Also note Next 16 auto-adds ".next/dev/types/**/*.ts" to apps/web/tsconfig.json; that belongs with this migration.

With all three applied plus the eslint config migration, typecheck, build and the full unit suite pass and only those 13 lint findings remain. They are genuine React correctness findings about setState inside useEffect, so they need a considered fix with UI verification rather than a rushed one inside a dependency sweep.

Bumps [next](https://github.com/vercel/next.js) from 15.5.21 to 16.2.12.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.21...v16.2.12)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.10
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@samrusani

Copy link
Copy Markdown
Owner

Superseded by #332, which lands next 16.2.12, eslint-config-next 16.2.12 and typescript 6.0.3 together.

These three could not be merged separately. TypeScript 6 fails under Next 15 with TS2882 on the globals.css side-effect import in app/layout.tsx, and Next 16 needs eslint-config-next 16, whose native flat config breaks the current FlatCompat bridge. That combination also enables react-hooks/set-state-in-effect, which required 13 real component fixes. #332 carries all of it with every web gate green.

@samrusani samrusani closed this Jul 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/apps/web/next-16.2.10 branch July 28, 2026 13:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant