Skip to content

chore: bump next from 12.1.4 to 16.2.1 - #309

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/next-16.2.1
Closed

chore: bump next from 12.1.4 to 16.2.1#309
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/next-16.2.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 26, 2026

Copy link
Copy Markdown
Contributor

Bumps next from 12.1.4 to 16.2.1.

Release notes

Sourced from next's releases.

v16.2.1

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • docs: post release amends (#91715)
  • docs: fix broken Activity Patterns demo link in preserving UI state guide (#91698)
  • Fix adapter outputs for dynamic metadata routes (#91680)
  • Turbopack: fix webpack loader runner layer (#91727)
  • Fix server actions in standalone mode with cacheComponents (#91711)
  • turbo-persistence: remove Unmergeable mmap advice (#91713)
  • Fix layout segment optimization: move app-page imports to server-utility transition (#91701)
  • Turbopack: lazy require metadata and handle TLA (#91705)
  • [turbopack] Respect {eval:true} in worker_threads constructors (#91666)

Credits

Huge thanks to @​icyJoseph, @​abhishekmardiya, @​ijjk, @​mischnic, @​unstubbable, @​sokra, and @​lukesandberg for helping!

v16.2.1-canary.8

Core Changes

  • Perf: Skip turning Set into Array: #91383
  • Perf: Move chunkloading instrumentation to separate function: #91382
  • Perf: Use headers object directly in checkIsOnDemandRevalidate: #91381
  • Use charCodeAt for normalizePathTrailingSlash: #91380
  • Turbopack: Only patch lockfile when bindings fails to load: #91379
  • [devtools] Make instant navs panel draggable: #91914

Misc Changes

  • docs: add verified adapters section: #91849
  • ci: only upload adapter results for canary runs: #91881
  • turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742
  • Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832
  • [create-next-app] Skip interactive prompts when CLI flags are provided: #91840
  • docs: document CSS decimal precision difference between Turbopack and webpack: #91909
  • [test] Deflake instant-navs-devtools: #91912

Credits

Huge thanks to @​feedthejim, @​ijjk, @​sokra, @​timneutkens, @​gaojude, and @​eps1lon for helping!

v16.2.1-canary.7

Core Changes

  • Avoid deprecated TS node10 moduleResolution defaults: #91847
  • [turbopack] Rebuild the docker build scripts: #91799
  • Fix TS6 baseUrl deprecation for extended tsconfig: #91855
  • Add next internal post-build CLI command for Turbopack database compaction: #91336

... (truncated)

Commits
  • ed7d2ce v16.2.1
  • 3e37bb4 docs: post release amends (#91715)
  • a15ec6e docs: fix broken Activity Patterns demo link in preserving UI state guide (#9...
  • 600cd2f Fix adapter outputs for dynamic metadata routes (#91680)
  • 27886d3 Turbopack: fix webpack loader runner layer (#91727)
  • 88fc430 Fix server actions in standalone mode with cacheComponents (#91711)
  • 37aed86 turbo-persistence: remove Unmergeable mmap advice (#91713)
  • d6195ec Fix layout segment optimization: move app-page imports to server-utility tran...
  • 6cb97d6 Turbopack: lazy require metadata and handle TLA (#91705)
  • e6b101a [turbopack] Respect {eval:true} in worker_threads constructors (#91666)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [next](https://github.com/vercel/next.js) from 12.1.4 to 16.2.1.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v12.1.4...v16.2.1)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 26, 2026
@sonarqubecloud

Copy link
Copy Markdown

@github-actions

Copy link
Copy Markdown
Contributor

Deploy preview for team-scope-test ready!

✅ Preview
https://team-scope-test-155rrfp09-dietfriends.vercel.app

Built with commit a8ec4f3.
This pull request is being automatically deployed with vercel-action

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 2 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="example/nextjs/package.json">

<violation number="1" location="example/nextjs/package.json:10">
P1: Bumping `next` to 16.2.1 without updating `react` and `react-dom` breaks the peer-dependency contract. Next 16.2.1 requires `react ^18.2.0 || ^19.0.0`, but both are still at `18.0.0`. Bump them to at least `18.2.0` (or to `19.x` if you want the latest).</violation>
</file>
Architecture diagram
sequenceDiagram
    participant Browser as Client Browser
    participant NextRouter as Next.js Router (App Router)
    participant ServerComp as React Server Components
    participant ServerAction as NEW: Server Actions
    participant DataCache as NEW: Next.js Data Cache
    participant ExtAPI as External API / DB

    Note over Browser, ExtAPI: Modern Next.js Request Flow (v12 -> v16+)

    Browser->>NextRouter: GET /page (RSC Request)
    
    NextRouter->>ServerComp: NEW: Execute Server Component
    ServerComp->>DataCache: NEW: fetch() with cache/revalidate
    
    alt Cache Hit
        DataCache-->>ServerComp: Return cached data
    else Cache Miss / Expired
        DataCache->>ExtAPI: Request fresh data
        ExtAPI-->>DataCache: Data response
        DataCache-->>ServerComp: Return data
    end

    ServerComp-->>NextRouter: Generate RSC Payload (JSON-like)
    NextRouter-->>Browser: NEW: Stream RSC Payload + HTML

    Note over Browser, ServerAction: Interaction Flow (Mutations)

    Browser->>ServerAction: NEW: POST (Invoke Server Action)
    ServerAction->>ExtAPI: Perform Mutation
    ExtAPI-->>ServerAction: Success
    
    ServerAction->>DataCache: NEW: revalidatePath() / revalidateTag()
    ServerAction-->>NextRouter: Trigger Client-side Refresh
    NextRouter->>ServerComp: Re-render affected segments
    ServerComp-->>Browser: Update UI (No full page reload)

    Note over NextRouter: CHANGED: Middleware and Edge Runtime execution
Loading

Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.

},
"dependencies": {
"next": "12.1.4",
"next": "16.2.1",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1: Bumping next to 16.2.1 without updating react and react-dom breaks the peer-dependency contract. Next 16.2.1 requires react ^18.2.0 || ^19.0.0, but both are still at 18.0.0. Bump them to at least 18.2.0 (or to 19.x if you want the latest).

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At example/nextjs/package.json, line 10:

<comment>Bumping `next` to 16.2.1 without updating `react` and `react-dom` breaks the peer-dependency contract. Next 16.2.1 requires `react ^18.2.0 || ^19.0.0`, but both are still at `18.0.0`. Bump them to at least `18.2.0` (or to `19.x` if you want the latest).</comment>

<file context>
@@ -7,7 +7,7 @@
   },
   "dependencies": {
-    "next": "12.1.4",
+    "next": "16.2.1",
     "react": "18.0.0",
     "react-dom": "18.0.0",
</file context>

@dependabot @github

dependabot Bot commented on behalf of github Mar 26, 2026

Copy link
Copy Markdown
Contributor Author

Looks like next is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Mar 26, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/next-16.2.1 branch March 26, 2026 08:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants