fix(deps): update nextjs monorepo to v15.2.4 #460

Open
kjuulh wants to merge 1 commits from renovate/nextjs-monorepo into main
Owner

This PR contains the following updates:

Package Type Update Change
eslint-config-next (source) devDependencies patch 15.2.1 -> 15.2.4
next (source) dependencies patch 15.2.1 -> 15.2.4

Release Notes

vercel/next.js (eslint-config-next)

v15.2.4

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • Match subrequest handling for edge and node (#​77474)
  • exclude images and static media from dev origin check (#​77417)
  • ensure /__next middleware URLs are included in the origin check (#​77416)
  • remove direct ip/port bypass in dev origin check (#​77414)
  • switch development origin verification to be opt-in rather than opt-out (#​77395)
Credits

Huge thanks to @​ijjk and @​ztanner for helping!

v15.2.3

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.
This release contains a security patch for CVE-2025-29927.

Core Changes
  • Update default allowed origins list (#​77212)
  • unify allowed origin detection handling (#​77053)
  • Add dev warning for cross-origin and stabilize allowedDevOrigins (#​77044)
  • Ensure deploymentId is used for CSS preloads (#​77210)
  • Update middleware request header (#​77201)
  • [metadata] remove the default segement check for metadata rendering (#​77119)
  • [ts-hint] fix vscode type hint plugin enabling (#​77099)
  • [metadata] re-insert icons to head for streamed metadata (#​76915)
Credits

Huge thanks to @​ijjk, @​ztanner, and @​huozhi for helping!

v15.2.2

Compare Source

Core Changes
  • [dev-overlay] fix styling on overflow error messages, add button hover state: #​76771
  • Fix: respond 405 status code on OPTIONS request to SSG page: #​76767
  • [dev-overlay] Always show relative paths: #​76742
  • [metadata] remove the duplicate metadata in the error boundary: #​76791
  • Upgrade React from d55cc79b-20250228 to 443b7ff2-20250303: #​76804
  • [dev-overlay] Ignore animations on page load: #​76834
  • fix: remove useless set-cookie in action-handler: #​76839
  • Turbopack: handle task cancelation: #​76831
  • Upgrade React from 443b7ff2-20250303 to e03ac20f-20250305: #​76842
  • add types for __next_app__ module loading functions: #​74566
  • fix duplicated noindex when server action is triggered: #​76847
  • fix: don't drop queued actions when navigating: #​75362
  • [dev-overlay]: remove dependency on platform for focus trapping: #​76849
  • Turbopack: Add turbopack_load_by_url: #​76814
  • Add handling of origin in dev mode: #​76880
  • [dev-overlay] Stop grouping callstack frames into ignored vs. not ignored: #​76861
  • Upgrade React from e03ac20f-20250305 to 029e8bd6-20250306: #​76870
  • [dev-overlay] Increase padding if no x button present: #​76898
  • fix: prevent incorrect searchParams being applied on certain navs: #​76914
  • [dev-overlay] Dim ignore-listed callstack frames when shown: #​76862
Example Changes
  • chore(cna): update tailwind styles to be closer to non-tw cna: #​76647
Misc Changes
  • Fix canary only warning for devlow-bench: #​76772
  • [test] Add special placeholder if stackframes point into dist dir: #​76741
  • [test] Use new Redbox matchers in pages/ service-side-dev-errors: #​76779
  • [test] Use new Redbox matchers in app/ dynamic-error-trace: #​76783
  • [test] Use new Redbox matchers in app/ owner-stack-invalid-element-type: #​76786
  • [test] Use new Redbox matchers in app/ hook-functuon-names: #​76785
  • [test] Use new Redbox matchers in app/ undefined-default-export: #​76781
  • [test] Use new Redbox matchers in server-navigation-error: #​76787
  • [test] Fix flaky error-recovery test: #​76789
  • [test] Use new Redbox matchers in pages/ gssp-ssr-change-reloading: #​76788
  • [docs] update Tailwind CSS installation and configuration instructions: #​76259
  • docs: Tailwind v4: #​76801
  • chore(docs): update minimumCacheTTL example to 31 days: #​76796
  • Turbopack: improve sectioned source maps: #​76627
  • [test] Use new Redbox matchers in pages/ middleware-errors: #​76797
  • doc: use redirect in client components: #​76332
  • [docs] document experimental viewTransition flag: #​76832
  • docs(errors): remove confusing good-to-know since global-errors.tsx also show in dev as of 15.2: #​76825
  • Turbopack: don't use HashMap in manifests: #​76833
  • Update labeler.json: #​76828
  • Fix missing turbo command for rust-check: #​76851
  • fix(turbopack): Use correct SyntaxContext for __turbopack_esm__: #​73544
  • Cleanup pure span handling: #​76846
  • Turbopack: remove unused IncludeModulesModule: #​76868
  • Update test snapshots for alternative bundler [5/n]: #​76617
  • Update test snapshots for alternative bundler [6/n]: #​76768
  • [test] Use next.browser instead of webdriver in pages/ client-navigation: #​76867
  • fix(turbopack): Use vergen-git2 instead of shadow-rs for napi and next-api crates to fix stale git lock files: #​76773
  • Revert "fix(turbopack): Use vergen-git2 instead of shadow-rs for napi and next-api crates to fix stale git lock files": #​76879
  • build: Update swc_core to v16.4.0: #​76596
  • docs: update Turbopack docs: #​76799
  • build: Update lightningcss to v1.0.0-alpha.64: #​76856
  • build: Fix warning: #​76890
  • Turbopack: fix __dirname: #​76902
  • Turbopack: deterministic server action order: #​76905
  • docs: reword the docs of veiw transition flag: #​76841
  • fix(turbopack): Use vergen-gitcl instead of shadow-rs (or vergen-git2) for napi and next-api crates to fix stale git lock files: #​76889
  • Turbopack: ensure default layout is provided in default not-found entrypoint: #​76912
  • chore(github): add moar labels: #​76922
  • [test] Use new Redbox matchers in pages/ client-navigation/rendering: #​76798
  • docs: fix create-next-app cli title: #​76908
Credits

Huge thanks to @​pranathip, @​gaojude, @​ijjk, @​eps1lon, @​Nayeem-XTREME, @​leerob, @​styfle, @​samcx, @​sokra, @​huozhi, @​raunofreiberg, @​mischnic, @​lubieowoce, @​unstubbable, @​ztanner, @​kdy1, @​timneutkens, @​wbinnssmith, @​bgw, and @​oscr for helping!


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [eslint-config-next](https://nextjs.org/docs/app/api-reference/config/eslint) ([source](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next)) | devDependencies | patch | [`15.2.1` -> `15.2.4`](https://renovatebot.com/diffs/npm/eslint-config-next/15.2.1/15.2.4) | | [next](https://nextjs.org) ([source](https://github.com/vercel/next.js)) | dependencies | patch | [`15.2.1` -> `15.2.4`](https://renovatebot.com/diffs/npm/next/15.2.1/15.2.4) | --- ### Release Notes <details> <summary>vercel/next.js (eslint-config-next)</summary> ### [`v15.2.4`](https://github.com/vercel/next.js/releases/tag/v15.2.4) [Compare Source](https://github.com/vercel/next.js/compare/v15.2.3...v15.2.4) > \[!NOTE]\ > This release is backporting bug fixes. It does **not** include all pending features/changes on canary. ##### Core Changes - Match subrequest handling for edge and node ([#&#8203;77474](https://github.com/vercel/next.js/issues/77474)) - exclude images and static media from dev origin check ([#&#8203;77417](https://github.com/vercel/next.js/issues/77417)) - ensure /\__next middleware URLs are included in the origin check ([#&#8203;77416](https://github.com/vercel/next.js/issues/77416)) - remove direct ip/port bypass in dev origin check ([#&#8203;77414](https://github.com/vercel/next.js/issues/77414)) - switch development origin verification to be opt-in rather than opt-out ([#&#8203;77395](https://github.com/vercel/next.js/issues/77395)) ##### Credits Huge thanks to [@&#8203;ijjk](https://github.com/ijjk) and [@&#8203;ztanner](https://github.com/ztanner) for helping! ### [`v15.2.3`](https://github.com/vercel/next.js/releases/tag/v15.2.3) [Compare Source](https://github.com/vercel/next.js/compare/v15.2.2...v15.2.3) > \[!NOTE]\ > This release is backporting bug fixes. It does **not** include all pending features/changes on canary. > This release contains a security patch for [CVE-2025-29927](https://github.com/vercel/next.js/security/advisories/GHSA-f82v-jwr5-mffw). ##### Core Changes - Update default allowed origins list ([#&#8203;77212](https://github.com/vercel/next.js/issues/77212)) - unify allowed origin detection handling ([#&#8203;77053](https://github.com/vercel/next.js/issues/77053)) - Add dev warning for cross-origin and stabilize allowedDevOrigins ([#&#8203;77044](https://github.com/vercel/next.js/issues/77044)) - Ensure deploymentId is used for CSS preloads ([#&#8203;77210](https://github.com/vercel/next.js/issues/77210)) - Update middleware request header ([#&#8203;77201](https://github.com/vercel/next.js/issues/77201)) - \[metadata] remove the default segement check for metadata rendering ([#&#8203;77119](https://github.com/vercel/next.js/issues/77119)) - \[ts-hint] fix vscode type hint plugin enabling ([#&#8203;77099](https://github.com/vercel/next.js/issues/77099)) - \[metadata] re-insert icons to head for streamed metadata ([#&#8203;76915](https://github.com/vercel/next.js/issues/76915)) ##### Credits Huge thanks to [@&#8203;ijjk](https://github.com/ijjk), [@&#8203;ztanner](https://github.com/ztanner), and [@&#8203;huozhi](https://github.com/huozhi) for helping! ### [`v15.2.2`](https://github.com/vercel/next.js/releases/tag/v15.2.2) [Compare Source](https://github.com/vercel/next.js/compare/v15.2.1...v15.2.2) ##### Core Changes - \[dev-overlay] fix styling on overflow error messages, add button hover state: [#&#8203;76771](https://github.com/vercel/next.js/issues/76771) - Fix: respond 405 status code on OPTIONS request to SSG page: [#&#8203;76767](https://github.com/vercel/next.js/issues/76767) - \[dev-overlay] Always show relative paths: [#&#8203;76742](https://github.com/vercel/next.js/issues/76742) - \[metadata] remove the duplicate metadata in the error boundary: [#&#8203;76791](https://github.com/vercel/next.js/issues/76791) - Upgrade React from `d55cc79b-20250228` to `443b7ff2-20250303`: [#&#8203;76804](https://github.com/vercel/next.js/issues/76804) - \[dev-overlay] Ignore animations on page load: [#&#8203;76834](https://github.com/vercel/next.js/issues/76834) - fix: remove useless set-cookie in action-handler: [#&#8203;76839](https://github.com/vercel/next.js/issues/76839) - Turbopack: handle task cancelation: [#&#8203;76831](https://github.com/vercel/next.js/issues/76831) - Upgrade React from `443b7ff2-20250303` to `e03ac20f-20250305`: [#&#8203;76842](https://github.com/vercel/next.js/issues/76842) - add types for `__next_app__` module loading functions: [#&#8203;74566](https://github.com/vercel/next.js/issues/74566) - fix duplicated noindex when server action is triggered: [#&#8203;76847](https://github.com/vercel/next.js/issues/76847) - fix: don't drop queued actions when navigating: [#&#8203;75362](https://github.com/vercel/next.js/issues/75362) - \[dev-overlay]: remove dependency on platform for focus trapping: [#&#8203;76849](https://github.com/vercel/next.js/issues/76849) - Turbopack: Add **turbopack_load_by_url**: [#&#8203;76814](https://github.com/vercel/next.js/issues/76814) - Add handling of origin in dev mode: [#&#8203;76880](https://github.com/vercel/next.js/issues/76880) - \[dev-overlay] Stop grouping callstack frames into ignored vs. not ignored: [#&#8203;76861](https://github.com/vercel/next.js/issues/76861) - Upgrade React from `e03ac20f-20250305` to `029e8bd6-20250306`: [#&#8203;76870](https://github.com/vercel/next.js/issues/76870) - \[dev-overlay] Increase padding if no `x` button present: [#&#8203;76898](https://github.com/vercel/next.js/issues/76898) - fix: prevent incorrect searchParams being applied on certain navs: [#&#8203;76914](https://github.com/vercel/next.js/issues/76914) - \[dev-overlay] Dim ignore-listed callstack frames when shown: [#&#8203;76862](https://github.com/vercel/next.js/issues/76862) ##### Example Changes - chore(cna): update tailwind styles to be closer to non-tw cna: [#&#8203;76647](https://github.com/vercel/next.js/issues/76647) ##### Misc Changes - Fix canary only warning for devlow-bench: [#&#8203;76772](https://github.com/vercel/next.js/issues/76772) - \[test] Add special placeholder if stackframes point into dist dir: [#&#8203;76741](https://github.com/vercel/next.js/issues/76741) - \[test] Use new Redbox matchers in pages/ service-side-dev-errors: [#&#8203;76779](https://github.com/vercel/next.js/issues/76779) - \[test] Use new Redbox matchers in app/ dynamic-error-trace: [#&#8203;76783](https://github.com/vercel/next.js/issues/76783) - \[test] Use new Redbox matchers in app/ owner-stack-invalid-element-type: [#&#8203;76786](https://github.com/vercel/next.js/issues/76786) - \[test] Use new Redbox matchers in app/ hook-functuon-names: [#&#8203;76785](https://github.com/vercel/next.js/issues/76785) - \[test] Use new Redbox matchers in app/ undefined-default-export: [#&#8203;76781](https://github.com/vercel/next.js/issues/76781) - \[test] Use new Redbox matchers in server-navigation-error: [#&#8203;76787](https://github.com/vercel/next.js/issues/76787) - \[test] Fix flaky error-recovery test: [#&#8203;76789](https://github.com/vercel/next.js/issues/76789) - \[test] Use new Redbox matchers in pages/ gssp-ssr-change-reloading: [#&#8203;76788](https://github.com/vercel/next.js/issues/76788) - \[docs] update Tailwind CSS installation and configuration instructions: [#&#8203;76259](https://github.com/vercel/next.js/issues/76259) - docs: Tailwind v4: [#&#8203;76801](https://github.com/vercel/next.js/issues/76801) - chore(docs): update minimumCacheTTL example to 31 days: [#&#8203;76796](https://github.com/vercel/next.js/issues/76796) - Turbopack: improve sectioned source maps: [#&#8203;76627](https://github.com/vercel/next.js/issues/76627) - \[test] Use new Redbox matchers in pages/ middleware-errors: [#&#8203;76797](https://github.com/vercel/next.js/issues/76797) - doc: use `redirect` in client components: [#&#8203;76332](https://github.com/vercel/next.js/issues/76332) - \[docs] document experimental viewTransition flag: [#&#8203;76832](https://github.com/vercel/next.js/issues/76832) - docs(errors): remove confusing good-to-know since global-errors.tsx also show in dev as of 15.2: [#&#8203;76825](https://github.com/vercel/next.js/issues/76825) - Turbopack: don't use HashMap in manifests: [#&#8203;76833](https://github.com/vercel/next.js/issues/76833) - Update `labeler.json`: [#&#8203;76828](https://github.com/vercel/next.js/issues/76828) - Fix missing turbo command for rust-check: [#&#8203;76851](https://github.com/vercel/next.js/issues/76851) - fix(turbopack): Use correct `SyntaxContext` for `__turbopack_esm__`: [#&#8203;73544](https://github.com/vercel/next.js/issues/73544) - Cleanup pure span handling: [#&#8203;76846](https://github.com/vercel/next.js/issues/76846) - Turbopack: remove unused IncludeModulesModule: [#&#8203;76868](https://github.com/vercel/next.js/issues/76868) - Update test snapshots for alternative bundler \[5/n]: [#&#8203;76617](https://github.com/vercel/next.js/issues/76617) - Update test snapshots for alternative bundler \[6/n]: [#&#8203;76768](https://github.com/vercel/next.js/issues/76768) - \[test] Use `next.browser` instead of `webdriver` in pages/ client-navigation: [#&#8203;76867](https://github.com/vercel/next.js/issues/76867) - fix(turbopack): Use vergen-git2 instead of shadow-rs for napi and next-api crates to fix stale git lock files: [#&#8203;76773](https://github.com/vercel/next.js/issues/76773) - Revert "fix(turbopack): Use vergen-git2 instead of shadow-rs for napi and next-api crates to fix stale git lock files": [#&#8203;76879](https://github.com/vercel/next.js/issues/76879) - build: Update `swc_core` to `v16.4.0`: [#&#8203;76596](https://github.com/vercel/next.js/issues/76596) - docs: update Turbopack docs: [#&#8203;76799](https://github.com/vercel/next.js/issues/76799) - build: Update lightningcss to `v1.0.0-alpha.64`: [#&#8203;76856](https://github.com/vercel/next.js/issues/76856) - build: Fix warning: [#&#8203;76890](https://github.com/vercel/next.js/issues/76890) - Turbopack: fix `__dirname`: [#&#8203;76902](https://github.com/vercel/next.js/issues/76902) - Turbopack: deterministic server action order: [#&#8203;76905](https://github.com/vercel/next.js/issues/76905) - docs: reword the docs of veiw transition flag: [#&#8203;76841](https://github.com/vercel/next.js/issues/76841) - fix(turbopack): Use vergen-gitcl instead of shadow-rs (or vergen-git2) for napi and next-api crates to fix stale git lock files: [#&#8203;76889](https://github.com/vercel/next.js/issues/76889) - Turbopack: ensure default layout is provided in default not-found entrypoint: [#&#8203;76912](https://github.com/vercel/next.js/issues/76912) - chore(github): add moar labels: [#&#8203;76922](https://github.com/vercel/next.js/issues/76922) - \[test] Use new Redbox matchers in pages/ client-navigation/rendering: [#&#8203;76798](https://github.com/vercel/next.js/issues/76798) - docs: fix create-next-app cli title: [#&#8203;76908](https://github.com/vercel/next.js/issues/76908) ##### Credits Huge thanks to [@&#8203;pranathip](https://github.com/pranathip), [@&#8203;gaojude](https://github.com/gaojude), [@&#8203;ijjk](https://github.com/ijjk), [@&#8203;eps1lon](https://github.com/eps1lon), [@&#8203;Nayeem-XTREME](https://github.com/Nayeem-XTREME), [@&#8203;leerob](https://github.com/leerob), [@&#8203;styfle](https://github.com/styfle), [@&#8203;samcx](https://github.com/samcx), [@&#8203;sokra](https://github.com/sokra), [@&#8203;huozhi](https://github.com/huozhi), [@&#8203;raunofreiberg](https://github.com/raunofreiberg), [@&#8203;mischnic](https://github.com/mischnic), [@&#8203;lubieowoce](https://github.com/lubieowoce), [@&#8203;unstubbable](https://github.com/unstubbable), [@&#8203;ztanner](https://github.com/ztanner), [@&#8203;kdy1](https://github.com/kdy1), [@&#8203;timneutkens](https://github.com/timneutkens), [@&#8203;wbinnssmith](https://github.com/wbinnssmith), [@&#8203;bgw](https://github.com/bgw), and [@&#8203;oscr](https://github.com/oscr) for helping! </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTYuMSIsInVwZGF0ZWRJblZlciI6IjM5LjIxNi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
kjuulh added 1 commit 2025-03-26 01:32:29 +01:00
This pull request can be merged automatically.
You are not authorized to merge this pull request.

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/nextjs-monorepo:renovate/nextjs-monorepo
git checkout renovate/nextjs-monorepo
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: kjuulh/todo#460
No description provided.