Skip to content

Conversation

@Justkant
Copy link
Collaborator

This pull request updates the Next.js dependency across multiple packages and examples to version 14.2.35, and synchronizes related dependencies and lockfiles accordingly. It also updates the @swc/helpers and tslib dependencies to newer versions and introduces @swc/counter as a new dependency. These changes help ensure compatibility, security, and improved performance across the monorepo.

Dependency Upgrades and Synchronization:

  • Upgraded next from version 14.1.0 to 14.2.35 in apps/docs/package.json, apps/wallet-api-tools/package.json, and examples/client-nextjs/package.json. [1] [2] [3]
  • Updated all references to next and its peer/optional dependencies in pnpm-lock.yaml and its snapshots, ensuring all packages and plugins use the new version. This includes updates to @next/env, @next/swc-*, and related theme and plugin packages. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12]

Transitive Dependency Updates:

  • Upgraded @swc/helpers from 0.5.2 to 0.5.5 and added @swc/counter as a new dependency. [1] [2]
  • Upgraded tslib from 2.6.2 to 2.8.1 across all affected dependencies. [1] [2] [3] [4] [5]

These updates keep the project up to date with the latest Next.js features and bug fixes, improve build performance, and maintain compatibility with related packages.

@Justkant Justkant requested review from a team December 12, 2025 14:14
@Justkant Justkant self-assigned this Dec 12, 2025
@changeset-bot
Copy link

changeset-bot bot commented Dec 12, 2025

⚠️ No Changeset found

Latest commit: 1b16a9d

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@vercel
Copy link

vercel bot commented Dec 12, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
wallet-api-wallet-api-tools Ready Ready Preview Comment Dec 12, 2025 2:23pm

@socket-security
Copy link

socket-security bot commented Dec 12, 2025

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Telemetry collection: npm next

Note: The code contains potential security risks due to the use of execSync without proper error handling, which could lead to command injection vulnerabilities. It should be reviewed and modified to use safer alternatives.

From: apps/docs/package.jsonnpm/[email protected]

ℹ Read more on: This package | This alert | What is telemetry?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: Most telemetry comes with settings to disable it. Consider disabling telemetry if you do not want to be tracked.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@Justkant Justkant merged commit 5e6b2ea into main Dec 12, 2025
11 checks passed
@Justkant Justkant deleted the chore/bump-next branch December 12, 2025 14:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants