chore(deps): bump next from 14.2.35 to 16.3.1 in /web - #40
Closed
dependabot[bot] wants to merge 1 commit into
Closed
chore(deps): bump next from 14.2.35 to 16.3.1 in /web#40dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [next](https://github.com/vercel/next.js) from 14.2.35 to 16.3.1. - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v14.2.35...v16.3.1) --- updated-dependencies: - dependency-name: next dependency-version: 16.3.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/web/next-16.3.1
branch
from
August 21, 2026 22:35
3dbd05c to
1353c57
Compare
edycutjong
added a commit
that referenced
this pull request
Aug 21, 2026
Next 16 makes Turbopack the default bundler and errors out when a `webpack` config is present with no `turbopack` config, since it can no longer tell whether the webpack customization is still needed. Our webpack override stubs optional wagmi/rainbowkit native deps (pino-pretty, lokijs, encoding, @base-org/account, @coinbase/cdp-sdk, @react-native-async-storage/async-storage) that aren't installed and are never reached in the browser bundle. Port the same stubs to `turbopack.resolveAlias`, pointed at a new empty CJS module (web/empty-module.js) since Turbopack has no `externals`/`alias: false` equivalent — only alias-to-another-module. Keep the webpack block for `next build --webpack` fallback; both stay in sync via two named dep lists. This unblocks PR #40 (next 14.2.35 -> 16.3.1), which fixes 25 of the repo's 28 open Dependabot alerts (12 HIGH / 13 MEDIUM, all next CVEs). Verified locally against next@16.3.1: npm run build/lint/typecheck/ format:check all pass, and reproduced PR #40's exact Turbopack error with the pre-fix config to confirm this is the real fix. `npm run start` serves all 4 routes (/, /guard, /underwrite, /integrations/verify) with zero console/page errors and a working RainbowKit Connect Wallet button.
Contributor
Author
|
Looks like next is up-to-date now, so this is no longer needed. |
Owner
|
@dependabot rebase |
Contributor
Author
|
Looks like this PR is closed. If the branch still exists, you can re-open the PR and then use |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps next from 14.2.35 to 16.3.1.
Release notes
Sourced from next's releases.
... (truncated)
Commits
3d32eb8v16.3.12b4b1ec[backport] Revert i18n localization change for dynamic Pages API routes (#949...228df5f[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...16eab3a[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops (#...75548c9[backport] Fix Nav Inspector request loop on repeat captures (#97326)f6bd714[backport] [test] Compile the middleware redirect routes up front in dev (#97...43c1c60[16.3] [ci] Use OIDC tokens to read private preview builds (#97258)9dbb357[backport] Encode the cache item name built byunstable_cache(#97313)323a17c[backport] Discard only cache entries that predate a tag revalidation, and re...6d67f46[backport] Keep the dev validation worker alive across HMR updates (#97315)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.