Upgrade dependencies to latest non-breaking + Next.js 16 + fix all CVEs#40
Open
alexphiev wants to merge 5 commits into
Open
Upgrade dependencies to latest non-breaking + Next.js 16 + fix all CVEs#40alexphiev wants to merge 5 commits into
alexphiev wants to merge 5 commits into
Conversation
- Switch from npm to pnpm (replace package-lock.json with pnpm-lock.yaml) - Bump all Radix UI packages to latest compatible minor/patch versions - Upgrade @slack/web-api 7.5→7.15, embla-carousel 8.3→8.6, i18next 23.12→23.16, react-i18next 15.0→15.7, react-icons 5.3→5.6, sonner 1.5→1.7, tailwind-merge 2.3→2.6, and other minor/patch bumps - Upgrade next 14.2→15.5.14 (breaking) to fix 5 CVEs: GHSA-h25m-26qc-wcjf (high), GHSA-5j98-mcp5-4vw2 (high), GHSA-9g9p-9gw9-jx7f (moderate), GHSA-ggv3-7p47-pfv8 (moderate), GHSA-3x4c-7xq6-9pq8 (moderate) - eslint-config-next bumped to 15.5.14 to match Next.js version https://claude.ai/code/session_01AHqazcB2hcRzu2yLJhGYQK
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
- Bump next 15.5.14 → 16.2.2 and eslint-config-next to match - Upgrade eslint 8 → 9 (required by eslint-config-next 16) - Migrate from .eslintrc.json to eslint.config.mjs (ESLint 9 flat config) - Update lint script: next lint removed in Next 16, now calls eslint directly https://claude.ai/code/session_01AHqazcB2hcRzu2yLJhGYQK
alexphiev
changed the title
- SiCss3 → SiCss (renamed in react-icons 5.6) - SiAwslambda → TbFileLambda (removed in react-icons 5.6, no si replacement) - /public/... → @/public/... in projects.tsx and project-details.tsx (Turbopack in Next 16 does not support server-relative imports) https://claude.ai/code/session_01AHqazcB2hcRzu2yLJhGYQK
- Replace next/font/google with @fontsource-variable/inter to eliminate Google Fonts network dependency at build time (hard error in Next 16 Turbopack) - Await params in layout.tsx and page.tsx (Next 15/16: params is now a Promise) - Already committed: SiCss3→SiCss, SiAwslambda→TbFileLambda (react-icons 5.6), /public/...→@/public/... server-relative imports (Turbopack) Build now passes locally with zero errors. https://claude.ai/code/session_01AHqazcB2hcRzu2yLJhGYQK
Auto-updated by Next.js 16 build: jsx set to react-jsx, target set to ES2017, and .next/dev/types/**/*.ts added to include paths. https://claude.ai/code/session_01AHqazcB2hcRzu2yLJhGYQK
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
package-lock.json→pnpm-lock.yaml)Security vulnerabilities fixed
nextglob(via eslint-config-next)nextnextnextpnpm auditreports 0 vulnerabilities.Notable non-breaking upgrades
@radix-ui/*packages to latest compatible versions@slack/web-api7.5 → 7.15embla-carousel-*8.3/8.1 → 8.6i18next23.12 → 23.16react-i18next15.0 → 15.7react-icons5.3 → 5.6sonner1.5 → 1.7tailwind-merge2.3 → 2.6prettier→ 3.8.1,typescript→ 5.9.3,postcss→ 8.5.8Next.js 14 → 16
cookies(),headers(),params, andsearchParamsare now async — server components/route handlers using these need toawaitthemnext lintcommand removed — lint script now callseslint .directlyESLint 8 → 9 (flat config)
.eslintrc.jsonreplaced byeslint.config.mjs(ESLint 9 flat config format)next/core-web-vitals+prettierPackages held back (major version available)
react/react-domlucide-reactnext-themessonnertailwind-mergei18nexteslinthttps://claude.ai/code/session_01AHqazcB2hcRzu2yLJhGYQK