Skip to content

chore(deps): Bump next from 16.4.1 to 16.4.3 - #1338

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/next-16.4.3
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/next-16.4.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

Bumps next from 16.4.1 to 16.4.3.

Release notes

Sourced from next's releases.

v16.4.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • [lts-active][cd] Gate release bot credentials behind GitHub environments (#100123)
  • [lts-active] test: Pin react-virtualized (#100545)
  • [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#100572)
  • [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #100324, #100350, #100552, #100583) (#100542)
  • [lts-active] Avoid loading standalone React in server bootstrap (#100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

v16.4.2

What's Changed

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

Commits
  • 29bbeab v16.4.3
  • 5117201 [lts-active] Avoid loading standalone React in server bootstrap (#100610)
  • 37d603b [lts-active] Keep OpenTelemetry request traces together (#100349, #100294, #1...
  • cf9d27d [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (...
  • 3f6a632 [lts-active] test: Pin react-virtualized (#100545)
  • f715bba [lts-active][cd] Gate release bot credentials behind GitHub environments (#10...
  • c864c78 [lts-active] Revert "Turbopack: loader change invalidation (#95732)" (#100438)
  • f3ff943 [lts-active] Don't load the app-page runtime in proxy.ts (#100423)
  • f697cf5 [lts-active] Fix extensionless Google font URLs in both bundlers (#100277)
  • 2864b17 v16.4.2
  • Additional commits viewable in compare view

@vercel

vercel Bot commented Oct 29, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
rate Ready Ready Preview Oct 31, 2026 5:27am UTC

Request Review

@dependabot dependabot Bot added dependencies javascript Pull requests that update javascript code labels Oct 29, 2026

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Code review skipped — your organization has no extra usage available to pay for this review.

If your organization's extra usage balance is empty, an organization admin can add extra usage credits at claude.ai/admin-settings/usage. If its monthly spend limit was reached, an admin can raise it on the same page. If neither applies, contact Anthropic support.

Once extra usage is available, someone with write access to this repository can comment @claude review on this pull request to trigger a review.

@coderabbitai

coderabbitai Bot commented Oct 29, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: fbd3ab56-6893-45ee-b224-e33d7d61e762

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

dos[bot]
dos Bot approved these changes Oct 29, 2026

@dos dos Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⏱️ Code Review completed (2 eligible files · 742 chars · 1 model call(s) · 1 PR unit(s))

Whole diff with bounded context at base 40ddb30 / head af8725e.
Excluded by noise policy: pnpm-lock.yaml.

✅ CLEAN_PASS: Complete diff reviewed

🔒 Dependency check

✅ Passed. Every new package version comes from the public registry or a source this lockfile already used for it, its checksum is pinned where the format records one, and OSV lists no new malicious package or high or critical vulnerability for the versions it was asked about.

Changed packages (11)
Package From To Lockfile
@next/env 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-arm64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-x64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-arm64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-x64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
baseline-browser-mapping 2.11.30 2.11.33 pnpm-lock.yaml
next 16.4.1 16.4.3 pnpm-lock.yaml

dos[bot]
dos Bot approved these changes Oct 30, 2026

@dos dos Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⏱️ Code Review completed (2 eligible files · 742 chars · 1 model call(s) · 1 PR unit(s))

Whole diff with bounded context at base 992630d / head b99ba5b.
Excluded by noise policy: pnpm-lock.yaml.

✅ CLEAN_PASS: Complete diff reviewed

🔒 Dependency check

✅ Passed. Every new package version comes from the public registry or a source this lockfile already used for it, its checksum is pinned where the format records one, and OSV lists no new malicious package or high or critical vulnerability for the versions it was asked about.

Changed packages (14)
Package From To Lockfile
@next/env 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-arm64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-x64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-arm64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-x64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
baseline-browser-mapping 2.11.30 2.11.33 pnpm-lock.yaml
browserslist new 4.29.5 pnpm-lock.yaml
electron-to-chromium new 1.5.465 pnpm-lock.yaml
next 16.4.1 16.4.3 pnpm-lock.yaml
node-releases new 2.0.60 pnpm-lock.yaml

dos[bot]
dos Bot approved these changes Oct 30, 2026

@dos dos Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⏱️ Code Review completed (2 eligible files · 742 chars · 1 model call(s) · 1 PR unit(s))

Whole diff with bounded context at base cc5de70 / head 2f48ea0.
Excluded by noise policy: pnpm-lock.yaml.

✅ CLEAN_PASS: Complete diff reviewed

🔒 Dependency check

✅ Passed. Every new package version comes from the public registry or a source this lockfile already used for it, its checksum is pinned where the format records one, and OSV lists no new malicious package or high or critical vulnerability for the versions it was asked about.

Changed packages (14)
Package From To Lockfile
@next/env 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-arm64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-x64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-arm64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-x64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
baseline-browser-mapping 2.11.30 2.11.33 pnpm-lock.yaml
browserslist new 4.29.5 pnpm-lock.yaml
electron-to-chromium new 1.5.465 pnpm-lock.yaml
next 16.4.1 16.4.3 pnpm-lock.yaml
node-releases new 2.0.60 pnpm-lock.yaml

dos[bot]
dos Bot approved these changes Oct 30, 2026

@dos dos Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⏱️ Code Review completed (2 eligible files · 742 chars · 1 model call(s) · 1 PR unit(s))

Whole diff with bounded context at base 39cdbf4 / head b6eeda3.
Excluded by noise policy: pnpm-lock.yaml.

✅ CLEAN_PASS: Complete diff reviewed

🔒 Dependency check

✅ Passed. Every new package version comes from the public registry or a source this lockfile already used for it, its checksum is pinned where the format records one, and OSV lists no new malicious package or high or critical vulnerability for the versions it was asked about.

Changed packages (14)
Package From To Lockfile
@next/env 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-arm64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-x64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-arm64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-x64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
baseline-browser-mapping 2.11.30 2.11.33 pnpm-lock.yaml
browserslist new 4.29.5 pnpm-lock.yaml
electron-to-chromium new 1.5.465 pnpm-lock.yaml
next 16.4.1 16.4.3 pnpm-lock.yaml
node-releases new 2.0.60 pnpm-lock.yaml

dos[bot]
dos Bot approved these changes Oct 30, 2026

@dos dos Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⏱️ Code Review completed (2 eligible files · 742 chars · 1 model call(s) · 1 PR unit(s))

Whole diff with bounded context at base 254cbc3 / head 571bcba.
Excluded by noise policy: pnpm-lock.yaml.

✅ CLEAN_PASS: Complete diff reviewed

🔒 Dependency check

✅ Passed. Every new package version comes from the public registry or a source this lockfile already used for it, its checksum is pinned where the format records one, and OSV lists no new malicious package or high or critical vulnerability for the versions it was asked about.

Changed packages (14)
Package From To Lockfile
@next/env 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-arm64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-x64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-arm64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-x64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
baseline-browser-mapping 2.11.30 2.11.33 pnpm-lock.yaml
browserslist new 4.29.5 pnpm-lock.yaml
electron-to-chromium new 1.5.465 pnpm-lock.yaml
next 16.4.1 16.4.3 pnpm-lock.yaml
node-releases new 2.0.60 pnpm-lock.yaml

dos[bot]
dos Bot approved these changes Oct 30, 2026

@dos dos Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⏱️ Code Review completed (2 eligible files · 742 chars · 1 model call(s) · 1 PR unit(s))

Whole diff with bounded context at base ad1a5b3 / head a6c3237.
Excluded by noise policy: pnpm-lock.yaml.

✅ CLEAN_PASS: Complete diff reviewed

🔒 Dependency check

✅ Passed. Every new package version comes from the public registry or a source this lockfile already used for it, its checksum is pinned where the format records one, and OSV lists no new malicious package or high or critical vulnerability for the versions it was asked about.

Changed packages (14)
Package From To Lockfile
@next/env 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-arm64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-x64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-arm64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-x64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
baseline-browser-mapping 2.11.30 2.11.33 pnpm-lock.yaml
browserslist new 4.29.5 pnpm-lock.yaml
electron-to-chromium new 1.5.465 pnpm-lock.yaml
next 16.4.1 16.4.3 pnpm-lock.yaml
node-releases new 2.0.60 pnpm-lock.yaml

@dependabot dependabot Bot changed the title chore(deps): Bump next from 16.4.1 to 16.4.3 build(deps): Bump next from 16.4.1 to 16.4.3 Oct 30, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-16.4.3 branch from a6c3237 to a1accac Compare October 30, 2026 05:36
dos[bot]
dos Bot approved these changes Oct 30, 2026

@dos dos Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⏱️ Code Review completed (2 eligible files · 742 chars · 1 model call(s) · 1 PR unit(s))

Whole diff with bounded context at base 1d53641 / head a1accac.
Excluded by noise policy: pnpm-lock.yaml.

✅ CLEAN_PASS: Complete diff reviewed

🔒 Dependency check

✅ Passed. Every new package version comes from the public registry or a source this lockfile already used for it, its checksum is pinned where the format records one, and OSV lists no new malicious package or high or critical vulnerability for the versions it was asked about.

Changed packages (14)
Package From To Lockfile
@next/env 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-arm64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-x64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-arm64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-x64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
baseline-browser-mapping 2.11.30 2.11.33 pnpm-lock.yaml
browserslist new 4.29.5 pnpm-lock.yaml
electron-to-chromium new 1.5.465 pnpm-lock.yaml
next 16.4.1 16.4.3 pnpm-lock.yaml
node-releases new 2.0.60 pnpm-lock.yaml

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-16.4.3 branch from a1accac to 220d358 Compare October 30, 2026 06:33
dos[bot]
dos Bot approved these changes Oct 30, 2026

@dos dos Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⏱️ Code Review completed (2 eligible files · 742 chars · 1 model call(s) · 1 PR unit(s))

Whole diff with bounded context at base b360597 / head 220d358.
Excluded by noise policy: pnpm-lock.yaml.

✅ CLEAN_PASS: Complete diff reviewed

🔒 Dependency check

✅ Passed. Every new package version comes from the public registry or a source this lockfile already used for it, its checksum is pinned where the format records one, and OSV lists no new malicious package or high or critical vulnerability for the versions it was asked about.

Changed packages (14)
Package From To Lockfile
@next/env 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-arm64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-x64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-arm64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-x64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
baseline-browser-mapping 2.11.30 2.11.33 pnpm-lock.yaml
browserslist new 4.29.5 pnpm-lock.yaml
electron-to-chromium new 1.5.465 pnpm-lock.yaml
next 16.4.1 16.4.3 pnpm-lock.yaml
node-releases new 2.0.60 pnpm-lock.yaml

dos[bot]
dos Bot approved these changes Oct 30, 2026

@dos dos Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⏱️ Code Review completed (2 eligible files · 742 chars · 1 model call(s) · 1 PR unit(s))

Whole diff with bounded context at base b6ecc90 / head 8e0ff77.
Excluded by noise policy: pnpm-lock.yaml.

✅ CLEAN_PASS: Complete diff reviewed

🔒 Dependency check

✅ Passed. Every new package version comes from the public registry or a source this lockfile already used for it, its checksum is pinned where the format records one, and OSV lists no new malicious package or high or critical vulnerability for the versions it was asked about.

Changed packages (14)
Package From To Lockfile
@next/env 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-arm64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-x64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-arm64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-x64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
baseline-browser-mapping 2.11.30 2.11.33 pnpm-lock.yaml
browserslist new 4.29.5 pnpm-lock.yaml
electron-to-chromium new 1.5.465 pnpm-lock.yaml
next 16.4.1 16.4.3 pnpm-lock.yaml
node-releases new 2.0.60 pnpm-lock.yaml

@dependabot dependabot Bot changed the title build(deps): Bump next from 16.4.1 to 16.4.3 chore(deps): Bump next from 16.4.1 to 16.4.3 Oct 30, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-16.4.3 branch from 8e0ff77 to 21566e4 Compare October 30, 2026 10:22

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Code review skipped — your organization has no extra usage available to pay for this review.

If your organization's extra usage balance is empty, an organization admin can add extra usage credits at claude.ai/admin-settings/usage. If its monthly spend limit was reached, an admin can raise it on the same page. If neither applies, contact Anthropic support.

Once extra usage is available, someone with write access to this repository can comment @claude review on this pull request to trigger a review.

dos[bot]
dos Bot approved these changes Oct 30, 2026

@dos dos Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⏱️ Code Review completed (2 eligible files · 742 chars · 1 model call(s) · 1 PR unit(s))

Whole diff with bounded context at base d464f32 / head 21566e4.
Excluded by noise policy: pnpm-lock.yaml.

✅ CLEAN_PASS: Complete diff reviewed

🔒 Dependency check

✅ Passed. Every new package version comes from the public registry or a source this lockfile already used for it, its checksum is pinned where the format records one, and OSV lists no new malicious package or high or critical vulnerability for the versions it was asked about.

Changed packages (14)
Package From To Lockfile
@next/env 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-arm64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-x64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-arm64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-x64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
baseline-browser-mapping 2.11.30 2.11.33 pnpm-lock.yaml
browserslist new 4.29.5 pnpm-lock.yaml
electron-to-chromium new 1.5.465 pnpm-lock.yaml
next 16.4.1 16.4.3 pnpm-lock.yaml
node-releases new 2.0.60 pnpm-lock.yaml

dos[bot]
dos Bot approved these changes Oct 30, 2026

@dos dos Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⏱️ Code Review completed (2 eligible files · 742 chars · 1 model call(s) · 1 PR unit(s))

Whole diff with bounded context at base 09f18af / head ebd38b3.
Excluded by noise policy: pnpm-lock.yaml.

✅ CLEAN_PASS: Complete diff reviewed

🔒 Dependency check

✅ Passed. Every new package version comes from the public registry or a source this lockfile already used for it, its checksum is pinned where the format records one, and OSV lists no new malicious package or high or critical vulnerability for the versions it was asked about.

Changed packages (14)
Package From To Lockfile
@next/env 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-arm64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-darwin-x64 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-arm64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-gnu 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-linux-x64-musl 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-arm64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
@next/swc-win32-x64-msvc 16.4.1 16.4.3 pnpm-lock.yaml
baseline-browser-mapping 2.11.30 2.11.33 pnpm-lock.yaml
browserslist new 4.29.5 pnpm-lock.yaml
electron-to-chromium new 1.5.465 pnpm-lock.yaml
next 16.4.1 16.4.3 pnpm-lock.yaml
node-releases new 2.0.60 pnpm-lock.yaml

Bumps [next](https://github.com/vercel/next.js) from 16.4.1 to 16.4.3.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.4.1...v16.4.3)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 31, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot cannot update to the required version. Because of this, Dependabot cannot update this pull request.

This branch was successfully deployed

1 active deployment
Preview — 3aebd73d Deployed Oct 31, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:frontend Frontend / Next.js / UI dependencies javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants