engineering/tpmjs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2.2k

fix(security): update Next.js to 16.0.8 to address CVE-2025-66478

Browse source
This commit is contained in:
Ajax Davis 2025-12-11 11:14:43 +10:00
parent ac98491928
commit 1469b0a060
3 changed files with 49 additions and 50 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apps/playground/package.json
View file

@ -23,7 +23,7 @@
"ai": "6.0.0-beta.124",
"firecrawl-aisdk": "^0.7.2",
"nanoid": "^5.1.6",
"next": "^16.0.4",
"next": "^16.0.8",
"next-themes": "^0.4.6",
"openai": "^6.9.1",
"react": "^19.0.0",

2
apps/web/package.json
View file

@ -22,7 +22,7 @@
"@types/react-syntax-highlighter": "^15.5.13",
"ai": "6.0.0-beta.124",
"bm25": "^0.1.1",
"next": "^16.0.4",
"next": "^16.0.8",
"next-themes": "^0.4.6",
"openai": "^6.9.1",
"react": "^19.0.0",

95
pnpm-lock.yaml generated
View file

@ -84,8 +84,8 @@ importers:
specifier: ^5.1.6
version: 5.1.6
next:
specifier: ^16.0.4
version: 16.0.4(@babel/core@7.28.5)(@opentelemetry/api@1.9.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
specifier: ^16.0.8
version: 16.0.8(@babel/core@7.28.5)(@opentelemetry/api@1.9.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
next-themes:
specifier: ^0.4.6
version: 0.4.6(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
@ -131,10 +131,10 @@ importers:
version: 10.4.22(postcss@8.5.6)
eslint:
specifier: ^9.39.1
version: 9.39.1(jiti@1.21.7)
version: 9.39.1(jiti@2.6.1)
eslint-config-next:
specifier: ^16.0.4
version: 16.0.4(eslint@9.39.1(jiti@1.21.7))(typescript@5.9.3)
version: 16.0.4(eslint@9.39.1(jiti@2.6.1))(typescript@5.9.3)
postcss:
specifier: ^8.5.1
version: 8.5.6
@ -190,8 +190,8 @@ importers:
specifier: ^0.1.1
version: 0.1.1
next:
specifier: ^16.0.4
version: 16.0.4(@babel/core@7.28.5)(@opentelemetry/api@1.9.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
specifier: ^16.0.8
version: 16.0.8(@babel/core@7.28.5)(@opentelemetry/api@1.9.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
next-themes:
specifier: ^0.4.6
version: 0.4.6(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
@ -249,10 +249,10 @@ importers:
version: 10.4.22(postcss@8.5.6)
eslint:
specifier: ^9.39.1
version: 9.39.1(jiti@2.6.1)
version: 9.39.1(jiti@1.21.7)
eslint-config-next:
specifier: ^16.0.4
version: 16.0.4(eslint@9.39.1(jiti@2.6.1))(typescript@5.9.3)
version: 16.0.4(eslint@9.39.1(jiti@1.21.7))(typescript@5.9.3)
postcss:
specifier: ^8.5.1
version: 8.5.6
@ -1809,56 +1809,56 @@ packages:
'@napi-rs/wasm-runtime@1.0.7':
resolution: {integrity: sha512-SeDnOO0Tk7Okiq6DbXmmBODgOAb9dp9gjlphokTUxmt8U3liIP1ZsozBahH69j/RJv+Rfs6IwUKHTgQYJ/HBAw==}
'@next/env@16.0.4':
resolution: {integrity: sha512-FDPaVoB1kYhtOz6Le0Jn2QV7RZJ3Ngxzqri7YX4yu3Ini+l5lciR7nA9eNDpKTmDm7LWZtxSju+/CQnwRBn2pA==}
'@next/env@16.0.8':
resolution: {integrity: sha512-xP4WrQZuj9MdmLJy3eWFHepo+R3vznsMSS8Dy3wdA7FKpjCiesQ6DxZvdGziQisj0tEtCgBKJzjcAc4yZOgLEQ==}
'@next/eslint-plugin-next@16.0.4':
resolution: {integrity: sha512-0emoVyL4Z5NEkRNb63ko/BqLC9OFULcY7mJ3lSerBCqgh/UFcjnvodyikV2bTl7XygwcamJxJAfxCo1oAVfH6g==}
'@next/swc-darwin-arm64@16.0.4':
resolution: {integrity: sha512-TN0cfB4HT2YyEio9fLwZY33J+s+vMIgC84gQCOLZOYusW7ptgjIn8RwxQt0BUpoo9XRRVVWEHLld0uhyux1ZcA==}
'@next/swc-darwin-arm64@16.0.8':
resolution: {integrity: sha512-yjVMvTQN21ZHOclQnhSFbjBTEizle+1uo4NV6L4rtS9WO3nfjaeJYw+H91G+nEf3Ef43TaEZvY5mPWfB/De7tA==}
engines: {node: '>= 10'}
cpu: [arm64]
os: [darwin]
'@next/swc-darwin-x64@16.0.4':
resolution: {integrity: sha512-XsfI23jvimCaA7e+9f3yMCoVjrny2D11G6H8NCcgv+Ina/TQhKPXB9P4q0WjTuEoyZmcNvPdrZ+XtTh3uPfH7Q==}
'@next/swc-darwin-x64@16.0.8':
resolution: {integrity: sha512-+zu2N3QQ0ZOb6RyqQKfcu/pn0UPGmg+mUDqpAAEviAcEVEYgDckemOpiMRsBP3IsEKpcoKuNzekDcPczEeEIzA==}
engines: {node: '>= 10'}
cpu: [x64]
os: [darwin]
'@next/swc-linux-arm64-gnu@16.0.4':
resolution: {integrity: sha512-uo8X7qHDy4YdJUhaoJDMAbL8VT5Ed3lijip2DdBHIB4tfKAvB1XBih6INH2L4qIi4jA0Qq1J0ErxcOocBmUSwg==}
'@next/swc-linux-arm64-gnu@16.0.8':
resolution: {integrity: sha512-LConttk+BeD0e6RG0jGEP9GfvdaBVMYsLJ5aDDweKiJVVCu6sGvo+Ohz9nQhvj7EQDVVRJMCGhl19DmJwGr6bQ==}
engines: {node: '>= 10'}
cpu: [arm64]
os: [linux]
'@next/swc-linux-arm64-musl@16.0.4':
resolution: {integrity: sha512-pvR/AjNIAxsIz0PCNcZYpH+WmNIKNLcL4XYEfo+ArDi7GsxKWFO5BvVBLXbhti8Coyv3DE983NsitzUsGH5yTw==}
'@next/swc-linux-arm64-musl@16.0.8':
resolution: {integrity: sha512-JaXFAlqn8fJV+GhhA9lpg6da/NCN/v9ub98n3HoayoUSPOVdoxEEt86iT58jXqQCs/R3dv5ZnxGkW8aF4obMrQ==}
engines: {node: '>= 10'}
cpu: [arm64]
os: [linux]
'@next/swc-linux-x64-gnu@16.0.4':
resolution: {integrity: sha512-2hebpsd5MRRtgqmT7Jj/Wze+wG+ZEXUK2KFFL4IlZ0amEEFADo4ywsifJNeFTQGsamH3/aXkKWymDvgEi+pc2Q==}
'@next/swc-linux-x64-gnu@16.0.8':
resolution: {integrity: sha512-O7M9it6HyNhsJp3HNAsJoHk5BUsfj7hRshfptpGcVsPZ1u0KQ/oVy8oxF7tlwxA5tR43VUP0yRmAGm1us514ng==}
engines: {node: '>= 10'}
cpu: [x64]
os: [linux]
'@next/swc-linux-x64-musl@16.0.4':
resolution: {integrity: sha512-pzRXf0LZZ8zMljH78j8SeLncg9ifIOp3ugAFka+Bq8qMzw6hPXOc7wydY7ardIELlczzzreahyTpwsim/WL3Sg==}
'@next/swc-linux-x64-musl@16.0.8':
resolution: {integrity: sha512-8+KClEC/GLI2dLYcrWwHu5JyC5cZYCFnccVIvmxpo6K+XQt4qzqM5L4coofNDZYkct/VCCyJWGbZZDsg6w6LFA==}
engines: {node: '>= 10'}
cpu: [x64]
os: [linux]
'@next/swc-win32-arm64-msvc@16.0.4':
resolution: {integrity: sha512-7G/yJVzum52B5HOqqbQYX9bJHkN+c4YyZ2AIvEssMHQlbAWOn3iIJjD4sM6ihWsBxuljiTKJovEYlD1K8lCUHw==}
'@next/swc-win32-arm64-msvc@16.0.8':
resolution: {integrity: sha512-rpQ/PgTEgH68SiXmhu/cJ2hk9aZ6YgFvspzQWe2I9HufY6g7V02DXRr/xrVqOaKm2lenBFPNQ+KAaeveywqV+A==}
engines: {node: '>= 10'}
cpu: [arm64]
os: [win32]
'@next/swc-win32-x64-msvc@16.0.4':
resolution: {integrity: sha512-0Vy4g8SSeVkuU89g2OFHqGKM4rxsQtihGfenjx2tRckPrge5+gtFnRWGAAwvGXr0ty3twQvcnYjEyOrLHJ4JWA==}
'@next/swc-win32-x64-msvc@16.0.8':
resolution: {integrity: sha512-jWpWjWcMQu2iZz4pEK2IktcfR+OA9+cCG8zenyLpcW8rN4rzjfOzH4yj/b1FiEAZHKS+5Vq8+bZyHi+2yqHbFA==}
engines: {node: '>= 10'}
cpu: [x64]
os: [win32]
@ -4899,10 +4899,9 @@ packages:
react: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
react-dom: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
next@16.0.4:
resolution: {integrity: sha512-vICcxKusY8qW7QFOzTvnRL1ejz2ClTqDKtm1AcUjm2mPv/lVAdgpGNsftsPRIDJOXOjRQO68i1dM8Lp8GZnqoA==}
next@16.0.8:
resolution: {integrity: sha512-LmcZzG04JuzNXi48s5P+TnJBsTGPJunViNKV/iE4uM6kstjTQsQhvsAv+xF6MJxU2Pr26tl15eVbp0jQnsv6/g==}
engines: {node: '>=20.9.0'}
deprecated: This version has a security vulnerability. Please upgrade to a patched version. See https://nextjs.org/blog/CVE-2025-66478 for more details.
hasBin: true
peerDependencies:
'@opentelemetry/api': ^1.1.0
@ -7331,34 +7330,34 @@ snapshots:
'@tybys/wasm-util': 0.10.1
optional: true
'@next/env@16.0.4': {}
'@next/env@16.0.8': {}
'@next/eslint-plugin-next@16.0.4':
dependencies:
fast-glob: 3.3.1
'@next/swc-darwin-arm64@16.0.4':
'@next/swc-darwin-arm64@16.0.8':
optional: true
'@next/swc-darwin-x64@16.0.4':
'@next/swc-darwin-x64@16.0.8':
optional: true
'@next/swc-linux-arm64-gnu@16.0.4':
'@next/swc-linux-arm64-gnu@16.0.8':
optional: true
'@next/swc-linux-arm64-musl@16.0.4':
'@next/swc-linux-arm64-musl@16.0.8':
optional: true
'@next/swc-linux-x64-gnu@16.0.4':
'@next/swc-linux-x64-gnu@16.0.8':
optional: true
'@next/swc-linux-x64-musl@16.0.4':
'@next/swc-linux-x64-musl@16.0.8':
optional: true
'@next/swc-win32-arm64-msvc@16.0.4':
'@next/swc-win32-arm64-msvc@16.0.8':
optional: true
'@next/swc-win32-x64-msvc@16.0.4':
'@next/swc-win32-x64-msvc@16.0.8':
optional: true
'@nodelib/fs.scandir@2.1.5':
@ -11276,9 +11275,9 @@ snapshots:
react: 19.2.0
react-dom: 19.2.0(react@19.2.0)
next@16.0.4(@babel/core@7.28.5)(@opentelemetry/api@1.9.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0):
next@16.0.8(@babel/core@7.28.5)(@opentelemetry/api@1.9.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0):
dependencies:
'@next/env': 16.0.4
'@next/env': 16.0.8
'@swc/helpers': 0.5.15
caniuse-lite: 1.0.30001757
postcss: 8.4.31
@ -11286,14 +11285,14 @@ snapshots:
react-dom: 19.2.0(react@19.2.0)
styled-jsx: 5.1.6(@babel/core@7.28.5)(react@19.2.0)
optionalDependencies:
'@next/swc-darwin-arm64': 16.0.4
'@next/swc-darwin-x64': 16.0.4
'@next/swc-linux-arm64-gnu': 16.0.4
'@next/swc-linux-arm64-musl': 16.0.4
'@next/swc-linux-x64-gnu': 16.0.4
'@next/swc-linux-x64-musl': 16.0.4
'@next/swc-win32-arm64-msvc': 16.0.4
'@next/swc-win32-x64-msvc': 16.0.4
'@next/swc-darwin-arm64': 16.0.8
'@next/swc-darwin-x64': 16.0.8
'@next/swc-linux-arm64-gnu': 16.0.8
'@next/swc-linux-arm64-musl': 16.0.8
'@next/swc-linux-x64-gnu': 16.0.8
'@next/swc-linux-x64-musl': 16.0.8
'@next/swc-win32-arm64-msvc': 16.0.8
'@next/swc-win32-x64-msvc': 16.0.8
'@opentelemetry/api': 1.9.0
sharp: 0.34.5
transitivePeerDependencies: