Skip to content

Update Next.js dependencies - #52

Open
anumol-baby wants to merge 1 commit into
mainfrom
fix/next-security-upgrade
Open

Update Next.js dependencies#52
anumol-baby wants to merge 1 commit into
mainfrom
fix/next-security-upgrade

Conversation

@anumol-baby

@anumol-baby anumol-baby commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

Summary

  • upgrade Next.js from 16.2.6 to 16.3.0
  • remove the obsolete PostCSS override now that Next.js pins a patched release
  • update transitive PostCSS, Nano ID, Sharp, and native Sharp packages
  • resolve the production dependency vulnerabilities reported by npm audit

Why

Next.js 16.3.0 updates its dependency chain to patched versions of PostCSS and Sharp. Updating the framework avoids maintaining application-level overrides for framework-owned dependencies and also picks up the current Next.js security fixes.

Validation

  • npm ci
  • npm audit --omit=dev --audit-level=high (0 vulnerabilities)
  • npm run build
  • git diff --check

Copilot AI balanced review requested due to automatic review settings August 10, 2026 21:47

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates Next.js and its transitive dependencies to patched releases, removing the obsolete PostCSS override.

Changes:

  • Upgrades Next.js from 16.2.6 to 16.3.0.
  • Removes the PostCSS override.
  • Refreshes PostCSS, Sharp, Nano ID, and related packages.
Show a summary per file
File Description
package.json Updates Next.js and removes the override.
package-lock.json Locks the updated dependency tree and native packages.

Review details

Tip

Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

  • Files reviewed: 1/2 changed files
  • Comments generated: 0
  • Review effort level: Balanced

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants