Skip to content

chore(deps): bump next and rapid-react-pkg-demo - #99

Merged
coston merged 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-536adf98de
Oct 26, 2026
Merged

coston merged 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-536adf98de

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026 •

Copy link
Copy Markdown
Contributor

Bumps next to 15.5.28 and updates ancestor dependency rapid-react-pkg-demo. These dependencies need to be updated together.

Updates next from 14.2.20 to 15.5.28

Release notes

Sourced from next's releases.

v15.5.28

This release contains security fixes for the following advisories:

Critical:

High:

v15.5.27

This release contains security fixes for the following advisories:

Medium:

v15.5.26

This release contains additional security hardening for next/og. For more information, check out https://nextjs.org/blog/nextjs-security-update-september-22-2026

v15.5.25

Follow-up release to v15.5.24 re-enabling AVIF Image Optimization when newer versions of sharp are installed (#97954).

v15.5.24

This release contains security fixes for the following advisories:

Critical:

Commits
  • 195cd6a v15.5.28
  • 1b53604 [cd] Allow branch to get published
  • 5e3b687 [lts-maintenance][next/image] Bump sharp (#232)
  • a2021b3 [lts-maintenance][react] Improve Server Component transport protocol (#194)
  • a836b53 [lts-maintenance] Fix google tag manager e2e test, assume GTM 200s instead of...
  • 9c1c1b1 [lts-maintenance][ci] Wire preview builds variables consistently (#99325)
  • def7eff v15.5.27
  • 52c94ab [lts-maintenance] Scope response cache keys to their source route (#219)
  • 785f4c2 [lts-maintenance] Match Next data paths case-sensitively (#197)
  • 7217d63 [lts-maintenance][webpack] Ensure dynamicParams is respected in `opengraph-...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.


Updates rapid-react-pkg-demo from 0.5.1 to 0.6.0

Release notes

Sourced from rapid-react-pkg-demo's releases.

v0.6.0

  • chore: fix version number 6ec3bf4
  • deps: bump react 9f43fc4
  • deps: bump husky from 8.0.3 to 9.1.7 (#34) 088e755
  • deps: bump eslint-plugin-react-hooks from 4.6.2 to 5.1.0 (#40) 82f638d
  • deps: bump @​babel/preset-typescript from 7.24.7 to 7.26.0 (#32) 8bc051e
  • deps: bump eslint-plugin-import from 2.29.1 to 2.31.0 (#15) bf354e5
  • deps: bump cross-spawn from 7.0.3 to 7.0.6 in the npm_and_yarn group (#35) 8fd0c11
  • deps: bump lint-staged from 12.5.0 to 15.3.0 (#47) 7b2b0ce
  • deps: bump eslint-plugin-react from 7.35.0 to 7.37.3 (#48) d5108de
  • deps: bump @​next/eslint-plugin-next from 14.2.7 to 15.1.3 (#49) 4518e79
  • deps: bump @​commitlint/config-conventional from 17.8.1 to 19.6.0 (#38) 3180358
  • deps: bump @​commitlint/cli from 17.8.1 to 19.6.0 (#36) 5cbcd26
  • deps: bump @​typescript-eslint/eslint-plugin from 8.14.0 to 8.18.0 (#41) b264514
  • deps: bump next from 14.2.15 to 15.0.3 (#33) 33e4a78
  • deps: bump eslint-plugin-jsx-a11y from 6.9.0 to 6.10.2 (#28) fee0c4d
  • deps: bump @​typescript-eslint/eslint-plugin from 8.3.0 to 8.14.0 (#29) fd2390c
  • Merge pull request #30 from coston/dependabot/npm_and_yarn/typescript-eslint/parser-8.14.0 e41fa1d
  • chore: update dependabot.yml 40ddf38
  • chore: automerge dependabot.yml 5333554
  • chore: update dependabot.yml 73e76e1
  • deps: bump @​typescript-eslint/parser from 8.3.0 to 8.14.0 bc333ed
  • deps: bump @​types/react from 18.3.5 to 18.3.12 (#27) 0609b55
  • deps: bump typescript from 5.5.4 to 5.6.3 (#21) bba0a37
  • deps: bump commander from 8.3.0 to 12.1.0 (#23) 75364ad
  • deps: bump @​types/react-dom from 18.3.0 to 18.3.1 (#10) d62ab1f
  • deps: bump babel-loader from 9.1.3 to 9.2.1 (#16) 89e75dc
  • deps: bump @​types/node from 20.16.2 to 22.7.6 (#14) 5bbd4c3
  • deps: bump next from 14.2.7 to 14.2.15 (#17) cce61d2
  • ci: update dependabot.yml 6e1a459
  • ci: update dependabot.yml 272fafe
  • ci: update dependabot.yml 7c28a0a
  • ci: create dependabot.yml b21985f

coston/rapid-react-pkg-demo@v0.5.1...v0.6.0

Commits
  • 64275b8 0.6.0
  • 6ec3bf4 chore: fix version number
  • 9f43fc4 deps: bump react
  • 088e755 deps: bump husky from 8.0.3 to 9.1.7 (#34)
  • 82f638d deps: bump eslint-plugin-react-hooks from 4.6.2 to 5.1.0 (#40)
  • 8bc051e deps: bump @​babel/preset-typescript from 7.24.7 to 7.26.0 (#32)
  • bf354e5 deps: bump eslint-plugin-import from 2.29.1 to 2.31.0 (#15)
  • 8fd0c11 deps: bump cross-spawn from 7.0.3 to 7.0.6 in the npm_and_yarn group (#35)
  • 7b2b0ce deps: bump lint-staged from 12.5.0 to 15.3.0 (#47)
  • d5108de deps: bump eslint-plugin-react from 7.35.0 to 7.37.3 (#48)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 25, 2026
@vercel

vercel Bot commented Oct 25, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
json-to-csv-export Error Error Oct 25, 2026 11:05pm UTC

Request Review

@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Oct 25, 2026
Bumps [next](https://github.com/vercel/next.js) to 15.5.28 and updates ancestor dependency [rapid-react-pkg-demo](https://github.com/coston/rapid-react-pkg-demo). These dependencies need to be updated together.


Updates `next` from 14.2.20 to 15.5.28
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v14.2.20...v15.5.28)

Updates `rapid-react-pkg-demo` from 0.5.1 to 0.6.0
- [Release notes](https://github.com/coston/rapid-react-pkg-demo/releases)
- [Commits](coston/rapid-react-pkg-demo@v0.5.1...v0.6.0)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 15.5.28
  dependency-type: indirect
- dependency-name: rapid-react-pkg-demo
  dependency-version: 0.6.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-536adf98de branch from d760381 to 6008fb5 Compare October 25, 2026 23:05

@coston coston left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CI passes. The red Vercel check is Vercel declining to build a bot's commit, not a build failure.

@coston
coston merged commit 6978501 into master Oct 26, 2026
2 of 3 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-536adf98de branch October 26, 2026 20:06

This branch had an error being deployed

1 failed deployment
Preview — 6008fb5b Deployed Oct 25, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant