[Snyk] Upgrade next from 10.0.7 to 10.2.3 #1329

yogendrajs · 2024-12-13T00:58:52Z

Snyk has created this PR to upgrade next from 10.0.7 to 10.2.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 91 versions ahead of your current version.
The recommended version was released on 4 years ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Information Exposure SNYK-JS-SIMPLEGET-2361683	586	Proof of Concept
Information Exposure SNYK-JS-SIMPLEGET-2361683	586	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	586	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	586	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	586	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	586	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	586	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-COLORSTRING-1082939	586	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-SHARP-2848109	586	No Known Exploit
Heap-based Buffer Overflow SNYK-JS-SHARP-5922108	586	Mature
Information Exposure SNYK-JS-NANOID-2332193	586	Proof of Concept

Release notes

Package name: next

10.2.3 - 2021-05-24
Core Changes
- lazy load postcss plugins: #25317
- Add missing i18n types in gip context: #25363
- Ensure externals are correct for mini-css-extract-plugin: #25340
- Update beforeFiles rewrites to continue: #25418
Documentation Changes
- Update docs to show how to typecheck next.config.js: #25240
- docs: typo in rewrites page: #25377
Example Changes
- Fix PatternFly 4 example: #25356
- Update package.json blog-starter-typescript: #25361
- New kontent UI screenshots: #25387
Misc Changes
- Follow up rewrites regression test for #25208: #25282
- Fix ie11 has rewrite test: #25342
Credits

Huge thanks to @ alexbrazier, @ jamsinclair, @ sokra, @ fabianishere, @ rokinsky, @ ijjk, @ msidqi, @ rubensdemelo, and @ Simply007 for helping!
10.2.3-canary.1 - 2021-05-24
Core Changes
- Update beforeFiles rewrites to continue: #25418
Example Changes
- New kontent UI screenshots: #25387
Credits

Huge thanks to @ Simply007 for helping!
10.2.3-canary.0 - 2021-05-24
Core Changes
- lazy load postcss plugins: #25317
- Add missing i18n types in gip context: #25363
- Ensure externals are correct for mini-css-extract-plugin: #25340
Documentation Changes
- Update docs to show how to typecheck next.config.js: #25240
- docs: typo in rewrites page: #25377
Example Changes
- Fix PatternFly 4 example: #25356
- Update package.json blog-starter-typescript: #25361
Misc Changes
- Follow up rewrites regression test for #25208: #25282
- Fix ie11 has rewrite test: #25342
Credits

Huge thanks to @ alexbrazier, @ jamsinclair, @ sokra, @ fabianishere, @ rokinsky, @ ijjk, @ msidqi, and @ rubensdemelo for helping!
10.2.2 - 2021-05-20
Core Changes
- server doesn't need to be contenthashing at all: #25251
- Update postcss-loader to 4.3.0: #25197
- restore webpack defaults for managed/immutablePaths: #25250
- react-loadable-plugin. Handle undefined opts.caller: #25264
Documentation Changes
- doc(typescript.md) Mention incremental type checking: #25268
Misc Changes
- Ensure CNA install succeeds with npm and example flags: #25267
- Update output size test to handle version change: #25275
- Update the text for eslint/no-page-custom-font rule: #25117
Credits

Huge thanks to @ sokra, @ bradlc, @ SinimaWath, and @ rgabs for helping!
10.2.2-canary.1 - 2021-05-19
Misc Changes
- Update output size test to handle version change: #25275
- Update the text for eslint/no-page-custom-font rule: #25117
Credits

Huge thanks to @ rgabs for helping!
10.2.2-canary.0 - 2021-05-19
Core Changes
- server doesn't need to be contenthashing at all: #25251
- Update postcss-loader to 4.3.0: #25197
- restore webpack defaults for managed/immutablePaths: #25250
- react-loadable-plugin. Handle undefined opts.caller: #25264
Documentation Changes
- doc(typescript.md) Mention incremental type checking: #25268
Misc Changes
- Ensure CNA install succeeds with npm and example flags: #25267
Credits

Huge thanks to @ sokra, @ bradlc, and @ SinimaWath for helping!
10.2.1 - 2021-05-19
Core Changes
- Remove unnecessary optimizeFonts key from type: #24563
- Fix Image compatibility issue when using sizes: #24569
- Replace regex lexer with minimal regex for named groups: #24604
- Remove un-used lib files: #24625
- Adds ESLint with default rule-set: #23702
- Don't swallow MODULE_NOT_FOUND error: #24577
- Fix/link router 24075 take asPath instead of pathName in router: #24199
- Add experimental blurry placeholder to image component: #24153
- update webpack to 5.36.2, use dependOn: #24656
- Add type checking events: #24595
- fix memory leak in require.cache: #24282
- Don't throw 500 error when Content-type is invalid: #24818
- Land - Font optimizations - Adobe Fonts / Typekit support : #24834
- updated zustand example : #24884
- feat(build): Log whether type checking is actually performed: #24440
- webpack 5 externals fixes: #24603
- Remove experimental babel flag: #24776
- cache typechecking with incremental compilation: #24559
- Ensure next/dynamic transpiles for tests: #24751
- fix: handle compression for custom-server render calls (#16378): #18891
- Refactor experimental-script component : #24940
- Fix: Non-writable pages/_app breaks build : #24849
- I18n context initial props: #21930
- update webpack to 5.37.0: #24954
- Ensure webpack cache is invalidated for alias change: #24956
Documentation Changes
- Add documentation on Font Optimization.: #24572
- Clarify whether router.pathname includes basePath: #24675
- Update font optimization docs to mention opting out.: #24756
- Bumps version of supertokens dependencies and updates its README: #24571
- docs(response-helpers): Update res.json definition: #24782
- docs(next/router): Update router.push api: #24833
- docs(config intro): Fix github link hash: #24838
- Add version note for has property: #24836
- Remove old docs sections: #24853
- Add additional reason for the Prerender Error when running next export: #24828
- feat(create-next-app): add --ts, --typescript support: #24655
- ESLint Plugin: Disallow <title> in Head from next/document: #24868
- Clarify rewrites and other docs cleanup.: #24890
- ESLint Plugin: Google Font rules: #24766
- ESLint Plugin: passHref is not assigned: #24670
- ESLint Plugin: Custom Font at page-level rule: #24789
- ESLint Plugin: Prevent bad imports of next/document and next/head: #24832
Example Changes
- Fix: with-passport example dependency issue: #24567
- demo serving storybook static build with serve: #24812
- Update signin/signup form samples: #24524
- react-hook-form example: #21245
- Update example with-sentry: #24819
- Update custom server examples: #24814
- Remove outdated/deprecated/unmainted examples: #24945
- Fix build in blog-starter-typescript example: #24695
- Update with-three-js example: #24857
- Update with-mdx-remote example: #24973
Misc Changes
- fix(next-storybook): make rules an array in webpack config: #22125
- Fix rewrite shape in Storybook: #24827
- Match last PR mention in commit message for release notes
- Add label for chrome automatically to PR
Credits

Huge thanks to @ darshkpatel, @ leerob, @ sumanthratna, @ shuding, @ housseindjirdeh, @ PepijnSenders, @ prophet1996, @ Joonpark13, @ tremby, @ sokra, @ stefanprobst, @ dopt, @ rishabhpoddar, @ aydinkn, @ ErfanMirzapour, @ vitalybaev, @ ijjk, @ tubbo, @ frontendtony, @ eric-burel, @ ctjlewis, @ Munawwar, @ iker-barriocanal, @ eps1lon, @ janicklas-ralph, @ Gigiz, @ MPLIS, @ HaNdTriX, and @ jigsawye for helping!
10.2.1-canary.12 - 2021-05-19
Core Changes
- Fix font optimization failing on some builds: #25071
Documentation Changes
- Remove snippet that is not recommended.: #25220
Misc Changes
- test(create-next-app): assert for typescript template dependencies: #25214
Credits

Huge thanks to @ jamesgeorge007, @ timneutkens, and @ janicklas-ralph for helping!
10.2.1-canary.11 - 2021-05-18
Core Changes
- Fix typo in dev-build-watcher.js: #25196
- Ensure default params are detected after rewrite: #25205
- fix: replace usage of fromEntries in browser bundled resolve-rewrites.ts: #25208
- docs(readme.md): add good first issue section to readme.md: #25085
- Make next.config.js keys optional: #25204
Documentation Changes
- Add default revalidate value to docs: #25238
Example Changes
- fix responsive example tailwind: #24582
Credits

Huge thanks to @ eltociear, @ jamsinclair, @ ananta, @ holiq, and @ PepijnSenders for helping!
10.2.1-canary.10 - 2021-05-17
Core Changes
- Ensure server split chunks are nested in chunks dir:

Snyk has created this PR to upgrade next from 10.0.7 to 10.2.3. See this package in npm: next See this project in Snyk: https://app.snyk.io/org/yogendra-90g/project/eed63132-b98f-422b-8ac4-769cfbae275e?utm_source=github&utm_medium=referral&page=upgrade-pr

[Snyk] Upgrade next from 10.0.7 to 10.2.3 #1329

Are you sure you want to change the base?

[Snyk] Upgrade next from 10.0.7 to 10.2.3 #1329

Conversation

yogendrajs commented Dec 13, 2024

Snyk has created this PR to upgrade next from 10.0.7 to 10.2.3.

Issues fixed by the recommended upgrade:

Core Changes

Documentation Changes

Example Changes

Misc Changes

Credits

Core Changes

Example Changes

Credits

Core Changes

Documentation Changes

Example Changes

Misc Changes

Credits

Core Changes

Documentation Changes

Misc Changes

Credits

Misc Changes

Credits

Core Changes

Documentation Changes

Misc Changes

Credits

Core Changes

Documentation Changes

Example Changes

Misc Changes

Credits

Core Changes

Documentation Changes

Misc Changes

Credits

Core Changes

Documentation Changes

Example Changes

Credits

Core Changes