florian/saatgut
Watch
1
0
Fork
You've already forked saatgut
 0
Code Issues 1 Pull requests 10 Projects Releases Packages Wiki Activity Actions

Update nextjs monorepo to v15.5.23 #4

Open
renovate wants to merge 1 commit from renovate/nextjs-monorepo into main
pull from: renovate/nextjs-monorepo
merge into: florian:main
Conversation 0 Commits 1 Files changed 2 +62 -50
renovate commented 2026-06-14 03:51:34 +02:00
Collaborator
Copy link

This PR contains the following updates:

Package Change Age Confidence
eslint-config-next (source) 15.5.14 → 15.5.23 age confidence
next (source) 15.5.14 → 15.5.23 age confidence

Release Notes

vercel/next.js (eslint-config-next)

v15.5.23

Compare Source

What's Changed

Full Changelog: https://github.com/vercel/next.js/compare/v15.5.22...v15.5.23

v15.5.22

Compare Source

What's Changed

Full Changelog: https://github.com/vercel/next.js/compare/v15.5.21...v15.5.22

v15.5.21

Compare Source

This release contains security fixes for the following advisories:

High:

Moderate:

v15.5.20

Compare Source

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 15.5.15.

v15.5.19: 15.5.19

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • [15.5.x] Don't drop FormData entries (#​94244)
Other
Credits

Huge thanks to @​eps1lon for helping!

v15.5.18

Compare Source

This release contains security fixes for the following advisories:

High:

Moderate:

Low:

v15.5.16

Compare Source

This release contains security fixes for the following advisories:

High:

Moderate:

Low:

v15.5.15

Compare Source

Please refer the following changelogs for more information about this security release:

https://vercel.com/changelog/summary-of-cve-2026-23869

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [eslint-config-next](https://nextjs.org/docs/app/api-reference/config/eslint) ([source](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next)) | [`15.5.14` → `15.5.23`](https://renovatebot.com/diffs/npm/eslint-config-next/15.5.14/15.5.23) | ![age](https://developer.mend.io/api/mc/badges/age/npm/eslint-config-next/15.5.23?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/eslint-config-next/15.5.14/15.5.23?slim=true) | | [next](https://nextjs.org) ([source](https://github.com/vercel/next.js)) | [`15.5.14` → `15.5.23`](https://renovatebot.com/diffs/npm/next/15.5.14/15.5.23) | ![age](https://developer.mend.io/api/mc/badges/age/npm/next/15.5.23?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/next/15.5.14/15.5.23?slim=true) | --- ### Release Notes <details> <summary>vercel/next.js (eslint-config-next)</summary> ### [`v15.5.23`](https://github.com/vercel/next.js/releases/tag/v15.5.23) [Compare Source](https://github.com/vercel/next.js/compare/v15.5.22...v15.5.23) ##### What's Changed - \[15.x] Port ReplyServer traversal guards to FlightClient [@&#8203;eps1lon](https://github.com/eps1lon) in [#&#8203;96405](https://github.com/vercel/next.js/pull/96405) **Full Changelog**: <https://github.com/vercel/next.js/compare/v15.5.22...v15.5.23> ### [`v15.5.22`](https://github.com/vercel/next.js/releases/tag/v15.5.22) [Compare Source](https://github.com/vercel/next.js/compare/v15.5.21...v15.5.22) ##### What's Changed - \[15.5] Reject TypeScript >= 7.0 with an actionable error by [@&#8203;lukesandberg](https://github.com/lukesandberg) in [#&#8203;96110](https://github.com/vercel/next.js/pull/96110) **Full Changelog**: <https://github.com/vercel/next.js/compare/v15.5.21...v15.5.22> ### [`v15.5.21`](https://github.com/vercel/next.js/releases/tag/v15.5.21) [Compare Source](https://github.com/vercel/next.js/compare/v15.5.20...v15.5.21) This release contains security fixes for the following advisories: High: - [Denial of Service in App Router using Server Actions](https://github.com/vercel/next.js/security/advisories/GHSA-m99w-x7hq-7vfj) - [Middleware / Proxy bypass in App Router applications using Turbopack and single locale](https://github.com/vercel/next.js/security/advisories/GHSA-6gpp-xcg3-4w24) - [Server-Side Request Forgery in rewrites via attacker-controlled destination hostname](https://github.com/vercel/next.js/security/advisories/GHSA-p9j2-gv94-2wf4) - [Server-Side Request Forgery in Server Actions on custom servers](https://github.com/vercel/next.js/security/advisories/GHSA-89xv-2m56-2m9x) Moderate: - [Cache confusion of response bodies for requests with bodies](https://github.com/vercel/next.js/security/advisories/GHSA-68g3-v927-f742) - [Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences](https://github.com/vercel/next.js/security/advisories/GHSA-4633-3j49-mh5q) - [Denial of Service in the Image Optimization API using SVGs](https://github.com/vercel/next.js/security/advisories/GHSA-q8wf-6r8g-63ch) - [Unauthenticated disclosure of internal Server Function endpoints](https://github.com/vercel/next.js/security/advisories/GHSA-955p-x3mx-jcvp) - [Unbounded Server Action payload in Edge runtime](https://github.com/vercel/next.js/security/advisories/GHSA-4c39-4ccg-62r3) ### [`v15.5.20`](https://github.com/vercel/next.js/releases/tag/v15.5.20) [Compare Source](https://github.com/vercel/next.js/compare/v15.5.19...v15.5.20) Contains no changes except publishing `@next/swc-wasm-web` which was accidentally not published since 15.5.15. ### [`v15.5.19`](https://github.com/vercel/next.js/releases/tag/v15.5.19): 15.5.19 [Compare Source](https://github.com/vercel/next.js/compare/v15.5.18...v15.5.19) > \[!NOTE] > This release is backporting bug fixes. It does **not** include all pending features/changes on canary. ##### Core Changes - \[15.5.x] Don't drop `FormData` entries ([#&#8203;94244](https://github.com/vercel/next.js/issues/94244)) ##### Other - \[15.5.x] Fix CI ([#&#8203;94281](https://github.com/vercel/next.js/issues/94281)) ##### Credits Huge thanks to [@&#8203;eps1lon](https://github.com/eps1lon) for helping! ### [`v15.5.18`](https://github.com/vercel/next.js/releases/tag/v15.5.18) [Compare Source](https://github.com/vercel/next.js/compare/v15.5.16...v15.5.18) This release contains security fixes for the following advisories: High: - [GHSA-8h8q-6873-q5fj: Denial of Service with Server Components](https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj) - [GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes](https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f) - [GHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up](https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6) - [GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components](https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx) - [GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection](https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv) - [GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades](https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r) - [GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n](https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5) Moderate: - [GHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces](https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q) - [GHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input](https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h) - [GHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API](https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh) - [GHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses](https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7) Low: - [GHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting](https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949) - [GHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned](https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq) ### [`v15.5.16`](https://github.com/vercel/next.js/releases/tag/v15.5.16) [Compare Source](https://github.com/vercel/next.js/compare/v15.5.15...v15.5.16) This release contains security fixes for the following advisories: High: - [GHSA-8h8q-6873-q5fj: Denial of Service with Server Components](https://github.com/vercel/next.js/security/advisories/GHSA-8h8q-6873-q5fj) - [GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes](https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f) - [GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components](https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx) - [GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection](https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv) - [GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades](https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r) - [GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n](https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5) Moderate: - [GHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces](https://github.com/vercel/next.js/security/advisories/GHSA-ffhc-5mcf-pf4q) - [GHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input](https://github.com/vercel/next.js/security/advisories/GHSA-gx5p-jg67-6x7h) - [GHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API](https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh) - [GHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses](https://github.com/vercel/next.js/security/advisories/GHSA-wfc6-r584-vfw7) Low: - [GHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting](https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949) - [GHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned](https://github.com/vercel/next.js/security/advisories/GHSA-3g8h-86w9-wvmq) ### [`v15.5.15`](https://github.com/vercel/next.js/releases/tag/v15.5.15) [Compare Source](https://github.com/vercel/next.js/compare/v15.5.14...v15.5.15) Please refer the following changelogs for more information about this security release: <https://vercel.com/changelog/summary-of-cve-2026-23869> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMjAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjI5LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
Update nextjs monorepo to v15.5.19
Some checks failed
CI / verify (pull_request) Failing after 2s
Details
CI / publish-images (pull_request) Has been skipped
Details
611238f3fe
renovate force-pushed renovate/nextjs-monorepo from 611238f3fe
Some checks failed
CI / verify (pull_request) Failing after 2s
Details
CI / publish-images (pull_request) Has been skipped
Details
to 52e938c529
Some checks failed
CI / verify (pull_request) Failing after 2s
Details
CI / publish-images (pull_request) Has been skipped
Details
2026-06-16 02:54:31 +02:00 Compare
renovate force-pushed renovate/nextjs-monorepo from 52e938c529
Some checks failed
CI / verify (pull_request) Failing after 2s
Details
CI / publish-images (pull_request) Has been skipped
Details
to e81faf5c80
Some checks failed
CI / verify (pull_request) Failing after 2s
Details
CI / publish-images (pull_request) Has been skipped
Details
2026-07-02 02:44:06 +02:00 Compare
renovate changed title from Update nextjs monorepo to v15.5.19 to Update nextjs monorepo to v15.5.20 2026-07-02 02:44:08 +02:00
renovate force-pushed renovate/nextjs-monorepo from e81faf5c80
Some checks failed
CI / verify (pull_request) Failing after 2s
Details
CI / publish-images (pull_request) Has been skipped
Details
to ae2c3c5d4c
Some checks failed
CI / verify (pull_request) Failing after 2s
Details
CI / publish-images (pull_request) Has been skipped
Details
2026-07-10 02:46:26 +02:00 Compare
renovate force-pushed renovate/nextjs-monorepo from ae2c3c5d4c
Some checks failed
CI / verify (pull_request) Failing after 2s
Details
CI / publish-images (pull_request) Has been skipped
Details
to b6c61a584e
Some checks failed
CI / verify (pull_request) Failing after 2s
Details
CI / publish-images (pull_request) Has been skipped
Details
2026-07-16 02:46:30 +02:00 Compare
renovate force-pushed renovate/nextjs-monorepo from b6c61a584e
Some checks failed
CI / verify (pull_request) Failing after 2s
Details
CI / publish-images (pull_request) Has been skipped
Details
to 56c9daaf47
Some checks failed
CI / verify (pull_request) Failing after 2s
Details
CI / publish-images (pull_request) Has been skipped
Details
2026-07-22 02:46:38 +02:00 Compare
renovate changed title from Update nextjs monorepo to v15.5.20 to Update nextjs monorepo to v15.5.21 2026-07-22 02:46:40 +02:00
renovate force-pushed renovate/nextjs-monorepo from 56c9daaf47
Some checks failed
CI / verify (pull_request) Failing after 2s
Details
CI / publish-images (pull_request) Has been skipped
Details
to 661d02136b
Some checks failed
CI / verify (pull_request) Failing after 2s
Details
CI / publish-images (pull_request) Has been skipped
Details
2026-07-26 02:47:41 +02:00 Compare
renovate changed title from Update nextjs monorepo to v15.5.21 to Update nextjs monorepo to v15.5.22 2026-07-26 02:47:44 +02:00
renovate force-pushed renovate/nextjs-monorepo from 661d02136b
Some checks failed
CI / verify (pull_request) Failing after 2s
Details
CI / publish-images (pull_request) Has been skipped
Details
to d2ec51c198
Some checks failed
CI / verify (pull_request) Failing after 1s
Details
CI / publish-images (pull_request) Has been skipped
Details
2026-08-07 02:47:32 +02:00 Compare
renovate changed title from Update nextjs monorepo to v15.5.22 to Update nextjs monorepo to v15.5.23 2026-08-07 02:47:35 +02:00
Some checks failed
CI / verify (pull_request) Failing after 1s
Details
CI / publish-images (pull_request) Has been skipped
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/nextjs-monorepo:renovate/nextjs-monorepo
git switch renovate/nextjs-monorepo

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/nextjs-monorepo
git switch renovate/nextjs-monorepo
git rebase main
git switch main
git merge --ff-only renovate/nextjs-monorepo
git switch renovate/nextjs-monorepo
git rebase main
git switch main
git merge --no-ff renovate/nextjs-monorepo
git switch main
git merge --squash renovate/nextjs-monorepo
git switch main
git merge --ff-only renovate/nextjs-monorepo
git switch main
git merge renovate/nextjs-monorepo
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something isn't working

  
documentation
Improvements or additions to documentation

  
duplicate
This issue or pull request already exists

  
enhancement
New feature or request

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
invalid
This doesn't seem right

  
question
Further information is requested

  
wontfix
This will not be worked on

No labels
bug
documentation
duplicate
enhancement
good first issue
help wanted
invalid
question
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
florian/saatgut!4
No description provided.