Conversation
Snyk has created this PR to upgrade next from 15.1.5 to 15.4.6. See this package in npm: next See this project in Snyk: https://app.snyk.io/org/kimsoo527/project/f246dd76-64d7-4f1e-8b0e-d3eb84866fa6?utm_source=github&utm_medium=referral&page=upgrade-pr
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
Codex Review: Here are some suggestions.
About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you open a pull request for review, mark a draft as ready, or comment "@codex review". If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex fix this CI failure" or "@codex address that feedback".
| "dependencies": { | ||
| "dotenv": "^17.2.1", | ||
| "next": "15.1.5", | ||
| "next": "^15.4.6", | ||
| "react": "^19.0.0", |
There was a problem hiding this comment.
[P1] Align lockfile entry with pinned Next.js version
The lockfile now declares the root dependency on next as ^15.4.6 while package.json pins it to 15.4.6. This mismatch will cause npm ci to fail because the lockfile no longer matches package.json, and it defeats the intent of pinning by allowing future installs to float to 15.?.x when the lockfile is regenerated. Update the lockfile so that the dependency spec matches the exact version in package.json.
Useful? React with 👍 / 👎.
2 participants
Snyk has created this PR to upgrade next from 15.1.5 to 15.4.6.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 356 versions ahead of your current version.
The recommended version was released a month ago.
Issues fixed by the recommended upgrade:
SNYK-JS-NEXT-10598339
SNYK-JS-NEXT-10176058
SNYK-JS-NEXT-12301496
SNYK-JS-NEXT-10259370
SNYK-JS-NEXT-12265451
SNYK-JS-NEXT-9508709
Release notes
Package name: next
Core Changes
_errorpage'sreq.urlcan be overwritten to dynamic param on minimal mode: #82347asPathfor query-only navigation withuseRouter: #82236Misc Changes
is_developmenttonext_page_config: #82363Credits
Huge thanks to @ huperniketes, @ mischnic, @ xusd320, @ devjiwonchoi, @ MichalMoravik, @ gnoff, @ Cy-Tek, and @ ztanner for helping!
Core Changes
c260b38d-20250731tobe11cb5c-20250804: #82339Example Changes
Misc Changes
jsonc-parser, dedupe with SWC: #82343Credits
Huge thanks to @ mischnic, @ eps1lon, @ lubieowoce, @ PuppyOne, @ acdlite, @ icyJoseph, @ bgw, and @ lukesandberg for helping!
Core Changes
Credits
Huge thanks to @ vercel-release-bot for helping!
Core Changes
eslint-plugin-react-hooksin React sync: #82294Misc Changes
lazy-regexdependency: #82288Credits
Huge thanks to @ bgub, @ bgw, @ gnoff, @ sokra, @ eps1lon, and @ lukesandberg for helping!
Core Changes
Misc Changes
find_server_entriesin the whole_app_module_graph case: #81943Credits
Huge thanks to @ sokra, @ candymask0712, @ lubieowoce, @ mischnic, @ lukesandberg, @ wyattjoh, @ stepan662, and @ vercel-release-bot for helping!
Core Changes
Misc Changes
Credits
Huge thanks to @ lukesandberg, @ sokra, and @ Jarred-Sumner for helping!
Core Changes
9784cb37-20250730toc260b38d-20250731: #82247Misc Changes
Credits
Huge thanks to @ dlehmhus, @ mischnic, @ Cy-Tek, @ lubieowoce, and @ acdlite for helping!
Core Changes
Misc Changes
Credits
Huge thanks to @ acdlite, @ sokra, and @ vercel-release-bot for helping!
Core Changes
Misc Changes
Credits
Huge thanks to @ vercel-release-bot, @ sokra, and @ huozhi for helping!
Core Changes
9be531cd-20250729to9784cb37-20250730: #82207TURBOPACKenv before loading config: #82162outputFileTracingRootorturbopack.rootoption is provided: #82164Misc Changes
Path/PathBuffor all of the invalidation logic: #82132O(n)traversals when finding child paths: #82133ignored_subpathsfeature from DiskWatcher: #82210Credits
Huge thanks to @ lubieowoce, @ huozhi, @ bgw, @ startracex, @ chadfennell, and @ devjiwonchoi for helping!