Skip to content

Upgrade Next.js to 16.3.8 (critical RCE advisories) #9

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ralyodio merged 1 commit into from
Oct 1, 2026
Merged

Upgrade Next.js to 16.3.8 (critical RCE advisories) #9

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 13 additions & 11 deletions apps/web/eslint.config.mjs
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,16 +1,18 @@
import { dirname } from 'path'
import { fileURLToPath } from 'url'
import { FlatCompat } from '@eslint/eslintrc'

const __filename = fileURLToPath(import.meta.url)
const __dirname = dirname(__filename)

const compat = new FlatCompat({
baseDirectory: __dirname,
})
// eslint-config-next 16 ships a native flat config; FlatCompat over it now
// throws "Converting circular structure to JSON".
import nextVitals from 'eslint-config-next/core-web-vitals'

const eslintConfig = [
...compat.extends('next/core-web-vitals'),
...nextVitals,
{
// New React Compiler rules from eslint-plugin-react-hooks 7 (pulled in by
// eslint-config-next 16). Existing components trip them; warn until they
// are refactored rather than fail CI on a security bump.
rules: {
'react-hooks/set-state-in-effect': 'warn',
'react-hooks/immutability': 'warn',
},
},
{
ignores: ['.next/**', 'node_modules/**'],
},
Expand Down
4 changes: 2 additions & 2 deletions apps/web/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@
"jsonwebtoken": "^9.0.3",
"leaflet": "^1.9.4",
"leaflet.markercluster": "^1.5.3",
"next": "^16.1.3",
"next": "16.3.8",
"nodemailer": "^6.9.16",
"react": "^19.0.0",
"react-dom": "^19.0.0",
Expand All @@ -47,7 +47,7 @@
"@vitejs/plugin-react": "^4.3.4",
"dotenv": "^17.2.3",
"eslint": "^9.17.0",
"eslint-config-next": "^15.1.1",
"eslint-config-next": "16.3.8",
"jsdom": "^25.0.1",
"postcss": "^8.4.49",
"tailwindcss": "^4.0.0",
Expand Down
Loading
Loading