Skip to content

chore(deps): bump the npm_and_yarn group across 18 directories with 14 updates#83

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/apps/database-new/npm_and_yarn-de085ba519
Open

chore(deps): bump the npm_and_yarn group across 18 directories with 14 updates#83
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/apps/database-new/npm_and_yarn-de085ba519

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Mar 20, 2026

Bumps the npm_and_yarn group with 1 update in the /apps/database-new directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/docs directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/studio directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/www directory: next.
Bumps the npm_and_yarn group with 2 updates in the /examples/auth/nextjs directory: next and flatted.
Bumps the npm_and_yarn group with 1 update in the /examples/caching/with-cloudflare-workers-kv directory: undici.
Bumps the npm_and_yarn group with 2 updates in the /examples/caching/with-nextjs-13 directory: next and flatted.
Bumps the npm_and_yarn group with 2 updates in the /examples/caching/with-nextjs-13-server-components directory: next and flatted.
Bumps the npm_and_yarn group with 2 updates in the /examples/realtime/nextjs-auth-presence directory: next and flatted.
Bumps the npm_and_yarn group with 1 update in the /examples/slack-clone/nextjs-slack-clone directory: next.
Bumps the npm_and_yarn group with 2 updates in the /examples/todo-list/nextjs-todo-list directory: next and flatted.
Bumps the npm_and_yarn group with 5 updates in the /examples/user-management/angular-user-management directory:

Package From To
@tootallnate/once 2.0.0 removed
flatted 3.2.7 3.4.2
immutable 4.3.7 4.3.8
serialize-javascript 6.0.2 7.0.4
@angular/core 14.2.5 21.2.5

Bumps the npm_and_yarn group with 2 updates in the /examples/user-management/expo-push-notifications directory: fast-xml-parser and tar.
Bumps the npm_and_yarn group with 3 updates in the /examples/user-management/expo-user-management directory: fast-xml-parser, tar and svgo.
Bumps the npm_and_yarn group with 2 updates in the /examples/user-management/nextjs-user-management directory: next and flatted.
Bumps the npm_and_yarn group with 6 updates in the /examples/user-management/nuxt3-user-management directory:

Package From To
flatted 3.3.1 3.4.2
undici 5.28.4 removed
svgo 3.3.2 3.3.3
devalue 5.0.0 5.6.4
simple-git 3.26.0 3.33.0
unhead 1.10.4 2.1.12

Bumps the npm_and_yarn group with 1 update in the /examples/user-management/sveltekit-user-management directory: undici.
Bumps the npm_and_yarn group with 1 update in the /examples/with-cloudflare-workers directory: undici.

Updates next from 14.2.35 to 16.2.0

Release notes

Sourced from next's releases.

v16.2.0

[!TIP]
Check out our Next v16.2 Blog Post to learn more about this release.

Core Changes

  • Upgrade React from f93b9fd4-20251217 to 65eec428-20251218: #87323
  • Turbopack: Create junction points instead of symlinks on Windows: #87606
  • Turbopack: Symlink handling follow-up: #87637
  • Add experimental routing package for resolving adapter routes: #86404
  • Ensure outputs are correct with cache components in deployment adapters: #87018
  • Move off of deprecated url.parse: #87257
  • [strict-route-types] Add experimental.strictRouteTypes config: #87378
  • misc: fix type check log for CI envs: #87838
  • fix: revalidateTag with profile should not trigger client cache invalidation: #88069
  • chore: warn when running tests against stale build: #88001
  • Redesign default error pages with cleaner, more user-friendly UI: #87988
  • dx: avoid next-env.d.ts change in dev: #88103
  • prevent browser cache from using stale RSC responses from previous builds: #86554
  • [strict-route-types] Typecheck App Router page props: #87386
  • [strict-route-types] Enforce common React Component return types in App Router: #87389
  • [strict-route-types] Switch to satisfies when validating page and route modules: #87398
  • [strict-route-types] Don't reject number in config.api.bodyParser.sizeLimit when validating route: #87633
  • Revert "dx: avoid next-env.d.ts change in dev": #88153
  • [strict-route-types] Typecheck pages router routes in absence of App Router: #87628
  • [strict-route-types] Ensure cache profiles and routes are type-checked even if .next is excluded: #87768
  • add compilation error for taint when not enabled: #88173
  • feat(next/image)!: add images.maximumResponseBody config: #88183
  • Add maximum size limit for postponed body parsing: #88175
  • metadata: use fixed segment in dynamic routes with static metadata files: #88113
  • feat: add --experimental-cpu-prof flag for dev, build, and start: #87946
  • Add experimental option to use no-cache instead of no-store in dev: #88182
  • fix overlay frames cannot be opened sometimes: #88210
  • Handle pnpm-workspace.yaml while searching for monorepo root: #74818
  • Add more debug logs to 'use cache' wrapper: #88219
  • Omit unused arguments from 'use cache' function calls: #86920
  • Only log pending revalidates... debug log if applicable: #88221
  • fix(next/image): bump sharp@0.34.5: #88238
  • Disallow javascript urls in router methods and redirects: #88185
  • Fix relative same host redirects in node middleware: #88253
  • Remove loadConfig from main development process, pass value from child process: #88230
  • Update deploy adapters outputs and handler interfaces for node and edge: #88247
  • Move Ready in time before handler initialization: #88235
  • next/image: support custom cache handlers: #88248
  • feat: add Claude Code plugin marketplace with Cache Components skill: #87993
  • refactor: consolidate PPR into cacheComponents architecture: #88243
  • Turbopack: include fewer traced files for standalone: #88322
  • feat(turbopack): add resolve plugin condition variant of Always and Never: #88190
  • perf: use length = 0 to clear the logging array: #88244
  • Time logs: Show full millisecond instead of 1 decimal: #88313

... (truncated)

Commits
  • c5c94df v16.2.0
  • 649d302 Unflake router events deploy test (#91589)
  • bcd9c19 docs: Clarify ignoreBuildErrors behavior (#91367)
  • 3683192 v16.2.0-canary.104
  • b61823d SRI turbopack documentation (#90477)
  • 0ca967b Add group depth tracking to instant validation boundary discovery (#91208)
  • a41bef9 improve allowedDevOrigins error (#91521)
  • 75c51c6 Turbopack: Use debug = "line-tables-only" for dev builds (#91539)
  • 39e705c Turbopack: Merge release-with-assertions-no-lto profile into release-with-ass...
  • 4de2201 [turbopack] Share scratch buffer across shards using thread local (#90167)
  • Additional commits viewable in compare view

Updates next from 14.2.35 to 16.2.0

Release notes

Sourced from next's releases.

v16.2.0

[!TIP]
Check out our Next v16.2 Blog Post to learn more about this release.

Core Changes

  • Upgrade React from f93b9fd4-20251217 to 65eec428-20251218: #87323
  • Turbopack: Create junction points instead of symlinks on Windows: #87606
  • Turbopack: Symlink handling follow-up: #87637
  • Add experimental routing package for resolving adapter routes: #86404
  • Ensure outputs are correct with cache components in deployment adapters: #87018
  • Move off of deprecated url.parse: #87257
  • [strict-route-types] Add experimental.strictRouteTypes config: #87378
  • misc: fix type check log for CI envs: #87838
  • fix: revalidateTag with profile should not trigger client cache invalidation: #88069
  • chore: warn when running tests against stale build: #88001
  • Redesign default error pages with cleaner, more user-friendly UI: #87988
  • dx: avoid next-env.d.ts change in dev: #88103
  • prevent browser cache from using stale RSC responses from previous builds: #86554
  • [strict-route-types] Typecheck App Router page props: #87386
  • [strict-route-types] Enforce common React Component return types in App Router: #87389
  • [strict-route-types] Switch to satisfies when validating page and route modules: #87398
  • [strict-route-types] Don't reject number in config.api.bodyParser.sizeLimit when validating route: #87633
  • Revert "dx: avoid next-env.d.ts change in dev": #88153
  • [strict-route-types] Typecheck pages router routes in absence of App Router: #87628
  • [strict-route-types] Ensure cache profiles and routes are type-checked even if .next is excluded: #87768
  • add compilation error for taint when not enabled: #88173
  • feat(next/image)!: add images.maximumResponseBody config: #88183
  • Add maximum size limit for postponed body parsing: #88175
  • metadata: use fixed segment in dynamic routes with static metadata files: #88113
  • feat: add --experimental-cpu-prof flag for dev, build, and start: #87946
  • Add experimental option to use no-cache instead of no-store in dev: #88182
  • fix overlay frames cannot be opened sometimes: #88210
  • Handle pnpm-workspace.yaml while searching for monorepo root: #74818
  • Add more debug logs to 'use cache' wrapper: #88219
  • Omit unused arguments from 'use cache' function calls: #86920
  • Only log pending revalidates... debug log if applicable: #88221
  • fix(next/image): bump sharp@0.34.5: #88238
  • Disallow javascript urls in router methods and redirects: #88185
  • Fix relative same host redirects in node middleware: #88253
  • Remove loadConfig from main development process, pass value from child process: #88230
  • Update deploy adapters outputs and handler interfaces for node and edge: #88247
  • Move Ready in time before handler initialization: #88235
  • next/image: support custom cache handlers: #88248
  • feat: add Claude Code plugin marketplace with Cache Components skill: #87993
  • refactor: consolidate PPR into cacheComponents architecture: #88243
  • Turbopack: include fewer traced files for standalone: #88322
  • feat(turbopack): add resolve plugin condition variant of Always and Never: #88190
  • perf: use length = 0 to clear the logging array: #88244
  • Time logs: Show full millisecond instead of 1 decimal: #88313

... (truncated)

Commits
  • c5c94df v16.2.0
  • 649d302 Unflake router events deploy test (#91589)
  • bcd9c19 docs: Clarify ignoreBuildErrors behavior (#91367)
  • 3683192 v16.2.0-canary.104
  • b61823d SRI turbopack documentation (#90477)
  • 0ca967b Add group depth tracking to instant validation boundary discovery (#91208)
  • a41bef9 improve allowedDevOrigins error (#91521)
  • 75c51c6 Turbopack: Use debug = "line-tables-only" for dev builds (#91539)
  • 39e705c Turbopack: Merge release-with-assertions-no-lto profile into release-with-ass...
  • 4de2201 [turbopack] Share scratch buffer across shards using thread local (#90167)
  • Additional commits viewable in compare view

Updates next from 14.2.35 to 16.2.0

Release notes

Sourced from next's releases.

v16.2.0

[!TIP]
Check out our Next v16.2 Blog Post to learn more about this release.

Core Changes

  • Upgrade React from f93b9fd4-20251217 to 65eec428-20251218: #87323
  • Turbopack: Create junction points instead of symlinks on Windows: #87606
  • Turbopack: Symlink handling follow-up: #87637
  • Add experimental routing package for resolving adapter routes: #86404
  • Ensure outputs are correct with cache components in deployment adapters: #87018
  • Move off of deprecated url.parse: #87257
  • [strict-route-types] Add experimental.strictRouteTypes config: #87378
  • misc: fix type check log for CI envs: #87838
  • fix: revalidateTag with profile should not trigger client cache invalidation: #88069
  • chore: warn when running tests against stale build: #88001
  • Redesign default error pages with cleaner, more user-friendly UI: #87988
  • dx: avoid next-env.d.ts change in dev: #88103
  • prevent browser cache from using stale RSC responses from previous builds: #86554
  • [strict-route-types] Typecheck App Router page props: #87386
  • [strict-route-types] Enforce common React Component return types in App Router: #87389
  • [strict-route-types] Switch to satisfies when validating page and route modules: #87398
  • [strict-route-types] Don't reject number in config.api.bodyParser.sizeLimit when validating route: #87633
  • Revert "dx: avoid next-env.d.ts change in dev": #88153
  • [strict-route-types] Typecheck pages router routes in absence of App Router: #87628
  • [strict-route-types] Ensure cache profiles and routes are type-checked even if .next is excluded: #87768
  • add compilation error for taint when not enabled: #88173
  • feat(next/image)!: add images.maximumResponseBody config: #88183
  • Add maximum size limit for postponed body parsing: #88175
  • metadata: use fixed segment in dynamic routes with static metadata files: #88113
  • feat: add --experimental-cpu-prof flag for dev, build, and start: #87946
  • Add experimental option to use no-cache instead of no-store in dev: #88182
  • fix overlay frames cannot be opened sometimes: #88210
  • Handle pnpm-workspace.yaml while searching for monorepo root: #74818
  • Add more debug logs to 'use cache' wrapper: #88219
  • Omit unused arguments from 'use cache' function calls: #86920
  • Only log pending revalidates... debug log if applicable: #88221
  • fix(next/image): bump sharp@0.34.5: #88238
  • Disallow javascript urls in router methods and redirects: #88185
  • Fix relative same host redirects in node middleware: #88253
  • Remove loadConfig from main development process, pass value from child process: #88230
  • Update deploy adapters outputs and handler interfaces for node and edge: #88247
  • Move Ready in time before handler initialization: #88235
  • next/image: support custom cache handlers: #88248
  • feat: add Claude Code plugin marketplace with Cache Components skill: #87993
  • refactor: consolidate PPR into cacheComponents architecture: #88243
  • Turbopack: include fewer traced files for standalone: #88322
  • feat(turbopack): add resolve plugin condition variant of Always and Never: #88190
  • perf: use length = 0 to clear the logging array: #88244
  • Time logs: Show full millisecond instead of 1 decimal: #88313

... (truncated)

Commits
  • c5c94df v16.2.0
  • 649d302 Unflake router events deploy test (#91589)
  • bcd9c19 docs: Clarify ignoreBuildErrors behavior (#91367)
  • 3683192 v16.2.0-canary.104
  • b61823d SRI turbopack documentation (#90477)
  • 0ca967b Add group depth tracking to instant validation boundary discovery (#91208)
  • a41bef9 improve allowedDevOrigins error (#91521)
  • 75c51c6 Turbopack: Use debug = "line-tables-only" for dev builds (#91539)
  • 39e705c Turbopack: Merge release-with-assertions-no-lto profile into release-with-ass...
  • 4de2201 [turbopack] Share scratch buffer across shards using thread local (#90167)
  • Additional commits viewable in compare view

Updates next from 14.2.35 to 16.2.0

Release notes

Sourced from next's releases.

v16.2.0

[!TIP]
Check out our Next v16.2 Blog Post to learn more about this release.

Core Changes

  • Upgrade React from f93b9fd4-20251217 to 65eec428-20251218: #87323
  • Turbopack: Create junction points instead of symlinks on Windows: #87606
  • Turbopack: Symlink handling follow-up: #87637
  • Add experimental routing package for resolving adapter routes: #86404
  • Ensure outputs are correct with cache components in deployment adapters: #87018
  • Move off of deprecated url.parse: #87257
  • [strict-route-types] Add experimental.strictRouteTypes config: #87378
  • misc: fix type check log for CI envs: #87838
  • fix: revalidateTag with profile should not trigger client cache invalidation: #88069
  • chore: warn when running tests against stale build: #88001
  • Redesign default error pages with cleaner, more user-friendly UI: #87988
  • dx: avoid next-env.d.ts change in dev: #88103
  • prevent browser cache from using stale RSC responses from previous builds: #86554
  • [strict-route-types] Typecheck App Router page props: #87386
  • [strict-route-types] Enforce common React Component return types in App Router: #87389
  • [strict-route-types] Switch to satisfies when validating page and route modules: #87398
  • [strict-route-types] Don't reject number in config.api.bodyParser.sizeLimit when validating route: #87633
  • Revert "dx: avoid next-env.d.ts change in dev": #88153
  • [strict-route-types] Typecheck pages router routes in absence of App Router: #87628
  • [strict-route-types] Ensure cache profiles and routes are type-checked even if .next is excluded: #87768
  • add compilation error for taint when not enabled: #88173
  • feat(next/image)!: add images.maximumResponseBody config: #88183
  • Add maximum size limit for postponed body parsing: #88175
  • metadata: use fixed segment in dynamic routes with static metadata files: #88113
  • feat: add --experimental-cpu-prof flag for dev, build, and start: #87946
  • Add experimental option to use no-cache instead of no-store in dev: #88182
  • fix overlay frames cannot be opened sometimes: #88210
  • Handle pnpm-workspace.yaml while searching for monorepo root: #74818
  • Add more debug logs to 'use cache' wrapper: #88219
  • Omit unused arguments from 'use cache' function calls: #86920
  • Only log pending revalidates... debug log if applicable: #88221
  • fix(next/image): bump sharp@0.34.5: #88238
  • Disallow javascript urls in router methods and redirects: #88185
  • Fix relative same host redirects in node middleware: #88253
  • Remove loadConfig from main development process, pass value from child process: #88230
  • Update deploy adapters outputs and handler interfaces for node and edge: #88247
  • Move Ready in time before handler initialization: #88235
  • next/image: support custom cache handlers: #88248
  • feat: add Claude Code plugin marketplace with Cache Components skill: #87993
  • refactor: consolidate PPR into cacheComponents architecture: #88243
  • Turbopack: include fewer traced files for standalone: #88322
  • feat(turbopack): add resolve plugin condition variant of Always and Never: #88190
  • perf: use length = 0 to clear the logging array: #88244
  • Time logs: Show full millisecond instead of 1 decimal: #88313

... (truncated)

Commits
  • c5c94df v16.2.0
  • 649d302 Unflake router events deploy test (#91589)
  • bcd9c19 docs: Clarify ignoreBuildErrors behavior (#91367)
  • 3683192 v16.2.0-canary.104
  • b61823d SRI turbopack documentation (#90477)
  • 0ca967b Add group depth tracking to instant validation boundary discovery (#91208)
  • a41bef9 improve allowedDevOrigins error (#91521)
  • 75c51c6 Turbopack: Use debug = "line-tables-only" for dev builds (#91539)
  • 39e705c Turbopack: Merge release-with-assertions-no-lto profile into release-with-ass...
  • 4de2201 [turbopack] Share scratch buffer across shards using thread local (#90167)
  • Additional commits viewable in compare view

Updates next from 13.4.3 to 15.5.14

Release notes

Sourced from next's releases.

v16.2.0

[!TIP]
Check out our Next v16.2 Blog Post to learn more about this release.

Core Changes

  • Upgrade React from f93b9fd4-20251217 to 65eec428-20251218: #87323
  • Turbopack: Create junction points instead of symlinks on Windows: #87606
  • Turbopack: Symlink handling follow-up: #87637
  • Add experimental routing package for resolving adapter routes: #86404
  • Ensure outputs are correct with cache components in deployment adapters: #87018
  • Move off of deprecated url.parse: #87257
  • [strict-route-types] Add experimental.strictRouteTypes config: #87378
  • misc: fix type check log for CI envs: #87838
  • fix: revalidateTag with profile should not trigger client cache invalidation: #88069
  • chore: warn when running tests against stale build: #88001
  • Redesign default error pages with cleaner, more user-friendly UI: #87988
  • dx: avoid next-env.d.ts change in dev: #88103
  • prevent browser cache from using stale RSC responses from previous builds: #86554
  • [strict-route-types] Typecheck App Router page props: #87386
  • [strict-route-types] Enforce common React Component return types in App Router: #87389
  • [strict-route-types] Switch to satisfies when validating page and route modules: #87398
  • [strict-route-types] Don't reject number in config.api.bodyParser.sizeLimit when validating route: #87633
  • Revert "dx: avoid next-env.d.ts change in dev": #88153
  • [strict-route-types] Typecheck pages router routes in absence of App Router: #87628
  • [strict-route-types] Ensure cache profiles and routes are type-checked even if .next is excluded: #87768
  • add compilation error for taint when not enabled: #88173
  • feat(next/image)!: add images.maximumResponseBody config: #88183
  • Add maximum size limit for postponed body parsing: #88175
  • metadata: use fixed segment in dynamic routes with static metadata files: #88113
  • feat: add --experimental-cpu-prof flag for dev, build, and start: #87946
  • Add experimental option to use no-cache instead of no-store in dev: #88182
  • fix overlay frames cannot be opened sometimes: #88210
  • Handle pnpm-workspace.yaml while searching for monorepo root: #74818
  • Add more debug logs to 'use cache' wrapper: #88219
  • Omit unused arguments from 'use cache' function calls: #86920
  • Only log pending revalidates... debug log if applicable: #88221
  • fix(next/image): bump sharp@0.34.5: #88238
  • Disallow javascript urls in router methods and redirects: #88185
  • Fix relative same host redirects in node middleware: #88253
  • Remove loadConfig from main development process, pass value from child process: #88230
  • Update deploy adapters outputs and handler interfaces for node and edge: #88247
  • Move Ready in time before handler initialization: #88235
  • next/image: support custom cache handlers: #88248
  • feat: add Claude Code plugin marketplace with Cache Components skill: #87993
  • refactor: consolidate PPR into cacheComponents architecture: #88243
  • Turbopack: include fewer traced files for standalone: #88322
  • feat(turbopack): add resolve plugin condition variant of Always and Never: #88190
  • perf: use length = 0 to clear the logging array: #88244
  • Time logs: Show full millisecond instead of 1 decimal: #88313

... (truncated)

Commits
  • c5c94df v16.2.0
  • 649d302 Unflake router events deploy test (#91589)
  • bcd9c19 docs: Clarify ignoreBuildErrors behavior (#91367)
  • 3683192 v16.2.0-canary.104
  • b61823d SRI turbopack documentation (#90477)
  • 0ca967b Add group depth tracking to instant validation boundary discovery (#91208)
  • a41bef9 improve allowedDevOrigins error (#91521)
  • 75c51c6 Turbopack: Use debug = "line-tables-only" for dev builds (#91539)
  • 39e705c Turbopack: Merge release-with-assertions-no-lto profile into release-with-ass...
  • 4de2201 [turbopack] Share scratch buffer across shards using thread local (#90167)
  • Additional commits viewable in compare view

Updates flatted from 3.2.7 to 3.4.2

Commits
  • 3bf0909 3.4.2
  • 885ddcc fix CWE-1321
  • 0bdba70 added flatted-view to the benchmark
  • 2a02dce 3.4.1
  • fba4e8f Merge pull request #89 from WebReflection/python-fix
  • 5fe8648 added "when in Rome" also a test for PHP
  • 53517ad some minor improvement
  • b3e2a0c Fixing recursion issue in Python too
  • c4b46db Add SECURITY.md for security policy and reporting
  • f86d071 Create dependabot.yml for version updates
  • Additional commits viewable in compare view

Updates undici from 5.20.0 to 7.24.4

Release notes

Sourced from undici's releases.

v7.24.4

What's Changed

Full Changelog: nodejs/undici@v7.24.3...v7.24.4

v7.24.3

What's Changed

Full Changelog: nodejs/undici@v7.24.2...v7.24.3

v7.24.2

What's Changed

Full Changelog: nodejs/undici@v7.24.1...v7.24.2

v7.24.1

What's Changed

Full Changelog: nodejs/undici@v7.24.0...v7.24.1

v7.24.0

Undici v7.24.0 Security Release Notes

This release addresses multiple security vulnerabilities in Undici.

Upgrade guidance

All users on v7 should upgrade to v7.24.0 or later.

Fixed advisories

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for undici since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates next from 13.0.0 to 15.5.14

Release notes

Sourced from next's releases.

v16.2.0

[!TIP]
Check out our Next v16.2 Blog Post to learn more about this release.

Core Changes

  • Upgrade React from f93b9fd4-20251217 to 65eec428-20251218: #87323
  • Turbopack: Create junction points instead of symlinks on Windows: #87606
  • Turbopack: Symlink handling follow-up: #87637
  • Add experimental routing package for resolving adapter routes: #86404
  • Ensure outputs are correct with cache components in deployment adapters: #87018
  • Move off of deprecated url.parse: #87257
  • [strict-route-types] Add experimental.strictRouteTypes config: #87378
  • misc: fix type check log for CI envs: #87838
  • fix: revalidateTag with profile should not trigger client cache invalidation: #88069
  • chore: warn when running tests against stale build: #88001
  • Redesign default error pages with cleaner, more user-friendly UI: #87988
  • dx: avoid next-env.d.ts change in dev: #88103
  • prevent browser cache from using stale RSC responses from previous builds: #86554
  • [strict-route-types] Typecheck App Router page props: #87386
  • [strict-route-types] Enforce common React Component return types in App Router: #87389
  • [strict-route-types] Switch to satisfies when validating page and route modules: #87398
  • [strict-route-types] Don't reject number in config.api.bodyParser.sizeLimit when validating route: #87633
  • Revert "dx: avoid next-env.d.ts change in dev": #88153
  • [strict-route-types] Typecheck pages router routes in absence of App Router: #87628
  • [strict-route-types] Ensure cache profiles and routes are type-checked even if .next is excluded: #87768
  • add compilation error for taint when not enabled: #88173
  • feat(next/image)!: add images.maximumResponseBody config: #88183
  • Add maximum size limit for postponed body parsing: #88175
  • metadata: use fixed segment in dynamic routes with static metadata files: #88113
  • feat: add --experimental-cpu-prof flag for dev, build, and start: #87946
  • Add experimental option to use no-cache instead of no-store in dev: #88182
  • fix overlay frames cannot be opened sometimes: #88210
  • Handle pnpm-workspace.yaml while searching for monorepo root: #74818
  • Add more debug logs to 'use cache' wrapper: #88219
  • Omit unused arguments from 'use cache' function calls: #86920
  • Only log pending revalidates... debug log if applicable: #88221
  • fix(next/image): bump sharp@0.34.5: #88238
  • Disallow javascript urls in router methods and redirects: #88185
  • Fix relative same host redirects in node middleware: #88253
  • Remove loadConfig from main development process, pass value from child process: #88230
  • Update deploy adapters outputs and handler interfaces for node and edge: #88247
  • Move Ready in time before handler initialization:

@dependabot
chore(deps): bump the npm_and_yarn group across 18 directories with 1…
4a3a64f 
…4 updates

Bumps the npm_and_yarn group with 1 update in the /apps/database-new directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /apps/docs directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /apps/studio directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /apps/www directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 2 updates in the /examples/auth/nextjs directory: [next](https://github.com/vercel/next.js) and [flatted](https://github.com/WebReflection/flatted).
Bumps the npm_and_yarn group with 1 update in the /examples/caching/with-cloudflare-workers-kv directory: [undici](https://github.com/nodejs/undici).
Bumps the npm_and_yarn group with 2 updates in the /examples/caching/with-nextjs-13 directory: [next](https://github.com/vercel/next.js) and [flatted](https://github.com/WebReflection/flatted).
Bumps the npm_and_yarn group with 2 updates in the /examples/caching/with-nextjs-13-server-components directory: [next](https://github.com/vercel/next.js) and [flatted](https://github.com/WebReflection/flatted).
Bumps the npm_and_yarn group with 2 updates in the /examples/realtime/nextjs-auth-presence directory: [next](https://github.com/vercel/next.js) and [flatted](https://github.com/WebReflection/flatted).
Bumps the npm_and_yarn group with 1 update in the /examples/slack-clone/nextjs-slack-clone directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 2 updates in the /examples/todo-list/nextjs-todo-list directory: [next](https://github.com/vercel/next.js) and [flatted](https://github.com/WebReflection/flatted).
Bumps the npm_and_yarn group with 5 updates in the /examples/user-management/angular-user-management directory:

| Package | From | To |
| --- | --- | --- |
| [@tootallnate/once](https://github.com/TooTallNate/once) | `2.0.0` | `removed` |
| [flatted](https://github.com/WebReflection/flatted) | `3.2.7` | `3.4.2` |
| [immutable](https://github.com/immutable-js/immutable-js) | `4.3.7` | `4.3.8` |
| [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `6.0.2` | `7.0.4` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `14.2.5` | `21.2.5` |

Bumps the npm_and_yarn group with 2 updates in the /examples/user-management/expo-push-notifications directory: [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [tar](https://github.com/isaacs/node-tar).
Bumps the npm_and_yarn group with 3 updates in the /examples/user-management/expo-user-management directory: [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser), [tar](https://github.com/isaacs/node-tar) and [svgo](https://github.com/svg/svgo).
Bumps the npm_and_yarn group with 2 updates in the /examples/user-management/nextjs-user-management directory: [next](https://github.com/vercel/next.js) and [flatted](https://github.com/WebReflection/flatted).
Bumps the npm_and_yarn group with 6 updates in the /examples/user-management/nuxt3-user-management directory:

| Package | From | To |
| --- | --- | --- |
| [flatted](https://github.com/WebReflection/flatted) | `3.3.1` | `3.4.2` |
| [undici](https://github.com/nodejs/undici) | `5.28.4` | `removed` |
| [svgo](https://github.com/svg/svgo) | `3.3.2` | `3.3.3` |
| [devalue](https://github.com/sveltejs/devalue) | `5.0.0` | `5.6.4` |
| [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.26.0` | `3.33.0` |
| [unhead](https://github.com/unjs/unhead/tree/HEAD/packages/unhead) | `1.10.4` | `2.1.12` |

Bumps the npm_and_yarn group with 1 update in the /examples/user-management/sveltekit-user-management directory: [undici](https://github.com/nodejs/undici).
Bumps the npm_and_yarn group with 1 update in the /examples/with-cloudflare-workers directory: [undici](https://github.com/nodejs/undici).


Updates `next` from 14.2.35 to 16.2.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.35...v16.2.0)

Updates `next` from 14.2.35 to 16.2.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.35...v16.2.0)

Updates `next` from 14.2.35 to 16.2.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.35...v16.2.0)

Updates `next` from 14.2.35 to 16.2.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.35...v16.2.0)

Updates `next` from 13.4.3 to 15.5.14
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.35...v16.2.0)

Updates `flatted` from 3.2.7 to 3.4.2
- [Commits](WebReflection/flatted@v3.2.7...v3.4.2)

Updates `undici` from 5.20.0 to 7.24.4
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v5.20.0...v7.24.4)

Updates `next` from 13.0.0 to 15.5.14
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.35...v16.2.0)

Updates `flatted` from 3.2.7 to 3.4.2
- [Commits](WebReflection/flatted@v3.2.7...v3.4.2)

Updates `next` from 13.0.3 to 15.5.14
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.35...v16.2.0)

Updates `flatted` from 3.2.7 to 3.4.2
- [Commits](WebReflection/flatted@v3.2.7...v3.4.2)

Updates `next` from 13.1.6 to 15.5.14
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.35...v16.2.0)

Updates `flatted` from 3.2.7 to 3.4.2
- [Commits](WebReflection/flatted@v3.2.7...v3.4.2)

Updates `next` from 12.1.5 to 16.2.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.35...v16.2.0)

Updates `next` from 13.1.6 to 15.5.14
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.35...v16.2.0)

Updates `flatted` from 3.2.7 to 3.4.2
- [Commits](WebReflection/flatted@v3.2.7...v3.4.2)

Removes `@tootallnate/once`

Updates `flatted` from 3.2.7 to 3.4.2
- [Commits](WebReflection/flatted@v3.2.7...v3.4.2)

Updates `immutable` from 4.3.7 to 4.3.8
- [Release notes](https://github.com/immutable-js/immutable-js/releases)
- [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md)
- [Commits](immutable-js/immutable-js@v4.3.7...v4.3.8)

Updates `serialize-javascript` from 6.0.2 to 7.0.4
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v6.0.2...v7.0.4)

Updates `tar` from 6.2.1 to 7.5.12
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.0...v6.2.1)

Updates `@angular/core` from 14.2.5 to 21.2.5
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.5/packages/core)

Updates `fast-xml-parser` from 4.3.2 to 4.5.4
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v4.3.2...v4.5.4)

Updates `tar` from 6.2.0 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.0...v6.2.1)

Updates `fast-xml-parser` from 4.5.0 to 4.5.4
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v4.3.2...v4.5.4)

Removes `tar`

Updates `svgo` from 2.8.0 to 2.8.2
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](svg/svgo@v2.8.0...v2.8.2)

Updates `next` from 14.1.1 to 15.5.14
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.35...v16.2.0)

Updates `flatted` from 3.2.7 to 3.4.2
- [Commits](WebReflection/flatted@v3.2.7...v3.4.2)

Updates `flatted` from 3.3.1 to 3.4.2
- [Commits](WebReflection/flatted@v3.2.7...v3.4.2)

Removes `undici`

Updates `svgo` from 3.3.2 to 3.3.3
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](svg/svgo@v2.8.0...v2.8.2)

Updates `devalue` from 5.0.0 to 5.6.4
- [Release notes](https://github.com/sveltejs/devalue/releases)
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md)
- [Commits](sveltejs/devalue@v5.0.0...v5.6.4)

Updates `h3` from 1.12.0 to 1.15.9
- [Release notes](https://github.com/h3js/h3/releases)
- [Changelog](https://github.com/h3js/h3/blob/v1.15.9/CHANGELOG.md)
- [Commits](h3js/h3@v1.12.0...v1.15.9)

Updates `simple-git` from 3.26.0 to 3.33.0
- [Release notes](https://github.com/steveukx/git-js/releases)
- [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md)
- [Commits](https://github.com/steveukx/git-js/commits/simple-git@3.33.0/simple-git)

Updates `unhead` from 1.10.4 to 2.1.12
- [Release notes](https://github.com/unjs/unhead/releases)
- [Commits](https://github.com/unjs/unhead/commits/v2.1.12/packages/unhead)

Removes `undici`

Updates `devalue` from 4.3.3 to 5.6.4
- [Release notes](https://github.com/sveltejs/devalue/releases)
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md)
- [Commits](sveltejs/devalue@v5.0.0...v5.6.4)

Updates `undici` from 5.20.0 to 7.24.4
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v5.20.0...v7.24.4)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 16.2.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 16.2.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 16.2.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.14
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-version: 7.24.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.14
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.14
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.14
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 16.2.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.14
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@tootallnate/once"
  dependency-version: 
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: immutable
  dependency-version: 4.3.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serialize-javascript
  dependency-version: 7.0.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tar
  dependency-version: 7.5.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@angular/core"
  dependency-version: 21.2.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: fast-xml-parser
  dependency-version: 4.5.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tar
  dependency-version: 6.2.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: fast-xml-parser
  dependency-version: 4.5.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tar
  dependency-version: 
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: svgo
  dependency-version: 2.8.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.14
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-version: 
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: svgo
  dependency-version: 3.3.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: devalue
  dependency-version: 5.6.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: h3
  dependency-version: 1.15.9
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: simple-git
  dependency-version: 3.33.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: unhead
  dependency-version: 2.1.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-version: 
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: devalue
  dependency-version: 5.6.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-version: 7.24.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 20, 2026
@dependabot dependabot bot mentioned this pull request Mar 20, 2026
Closed
@github-actions
Copy link
Copy Markdown

github-actions bot commented Mar 20, 2026

Qodana Community for JVM

It seems all right 👌

No new problems were found according to the checks applied

View the detailed Qodana report

To be able to view the detailed Qodana report, you can either:

To get *.log files or any other Qodana artifacts, run the action with upload-result option set to true,
so that the action will upload the files as the job artifacts:

      - name: 'Qodana Scan'
        uses: JetBrains/qodana-action@v2024.1.9
        with:
          upload-result: true
Contact Qodana team

Contact us at qodana-support@jetbrains.com

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants