Skip to content

chore(deps): bump next from 16.2.1 to 16.2.3#782

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/next-16.2.3
Closed

chore(deps): bump next from 16.2.1 to 16.2.3#782
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/next-16.2.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 10, 2026

Bumps next from 16.2.1 to 16.2.3.

Release notes

Sourced from next's releases.

v16.2.3

[!NOTE] This release is backporting security and bug fixes. For more information about the fixed security vulnerability, please see https://vercel.com/changelog/summary-of-cve-2026-23869. The release does not include all pending features/changes on canary.

Core Changes

  • Ensure app-page reports stale ISR revalidation errors via onRequestError (#92282)
  • Fix [Bug]: manifest.ts breaks HMR in Next.js 16.2 (#91981 through #92273)
  • Deduplicate output assets and detect content conflicts on emit (#92292)
  • Fix styled-jsx race condition: styles lost due to concurrent rendering (#92459)
  • turbo-tasks-backend: stability fixes for task cancellation and error handling (#92254)

Credits

Huge thanks to @​icyJoseph, @​sokra, @​wbinnssmith, @​eps1lon and @​ztanner for helping!

v16.2.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • backport: Move expanded adapters docs to API reference (#92115) (#92129)
  • Backport: TypeScript v6 deprecations for baseUrl and moduleResolution (#92130)
  • [create-next-app] Skip interactive prompts when CLI flags are provided (#91840)
  • next.config.js: Accept an option for serverFastRefresh (#91968)
  • Turbopack: enable server HMR for app route handlers (#91466)
  • Turbopack: exclude metadata routes from server HMR (#92034)
  • Fix CI for glibc linux builds
  • Backport: disable bmi2 in qfilter #92177
  • [backport] Fix CSS HMR on Safari (#92174)

Credits

Huge thanks to @​nextjs-bot, @​icyJoseph, @​ijjk, @​gaojude, @​wbinnssmith, @​lukesandberg, and @​bgw for helping!

Commits
  • d5f649b v16.2.3
  • 2873928 [16.x] Avoid consuming cyclic models multiple times (#75)
  • d7c7765 [backport]: Ensure app-page reports stale ISR revalidation errors via onReque...
  • c573e8c fix(server-hmr): metadata routes overwrite page runtime HMR handler (#92273)
  • 57b8f65 next-core: deduplicate output assets and detect content conflicts on emit (#9...
  • f158df1 Fix styled-jsx race condition: styles lost due to concurrent rendering (#92459)
  • 356d605 turbo-tasks-backend: stability fixes for task cancellation and error handling...
  • 3b77a6e Fix DashMap read-write self-deadlock in task_cache causing hangs (#92210)
  • b2f208a Backport: new view-transitions guide, update and fixes (#92264)
  • 52faae3 v16.2.2
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 10, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/next-16.2.3 branch from 14df1a6 to 323dc64 Compare April 27, 2026 21:26
@dependabot dependabot Bot requested review from lane711 and mmcintosh as code owners April 27, 2026 21:26
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/next-16.2.3 branch from 323dc64 to 0f6b5ef Compare April 29, 2026 20:19
Bumps [next](https://github.com/vercel/next.js) from 16.2.1 to 16.2.3.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.2.1...v16.2.3)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/next-16.2.3 branch from 0f6b5ef to fa482f0 Compare April 30, 2026 20:14
@lane711
Copy link
Copy Markdown
Collaborator

lane711 commented May 8, 2026

Superseded by #828, which batches this and other low-risk dependabot bumps into a single PR.

@lane711 lane711 closed this May 8, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 8, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/next-16.2.3 branch May 8, 2026 20:33
lane711 added a commit that referenced this pull request May 8, 2026
Bundles 9 dependabot PRs into a single update:

- hono 4.12.12 → 4.12.18 (root, packages/core, packages/stats, my-sonicjs-app) — supersedes #797, #798, #820
- next ^16 → ^16.2.3 (www) — supersedes #782
- axios 1.15.0 → 1.16.0 (packages/stats, transitive) — supersedes #821
- follow-redirects 1.15.11 → 1.16.0 (packages/stats, transitive) — supersedes #790
- fast-xml-builder 1.1.4 → 1.2.0 (root, transitive) — supersedes #826
- fast-xml-parser & @aws-sdk/xml-builder bumps (root, transitive) — supersedes #806
- postcss 8.5.6 → 8.5.14 (my-sonicjs-app, transitive) — supersedes #813

Verified locally:
- npm run build:core (clean)
- npm run type-check (clean)
- npm test (1477 passed, 328 skipped)

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant