Skip to content

chore: bump next from 16.2.1 to 16.2.3 - #334

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/next-16.2.3
Closed

chore: bump next from 16.2.1 to 16.2.3#334
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/next-16.2.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 10, 2026

Copy link
Copy Markdown
Contributor

Bumps next from 16.2.1 to 16.2.3.

Release notes

Sourced from next's releases.

v16.2.3

[!NOTE] This release is backporting security and bug fixes. For more information about the fixed security vulnerability, please see https://vercel.com/changelog/summary-of-cve-2026-23869. The release does not include all pending features/changes on canary.

Core Changes

  • Ensure app-page reports stale ISR revalidation errors via onRequestError (#92282)
  • Fix [Bug]: manifest.ts breaks HMR in Next.js 16.2 (#91981 through #92273)
  • Deduplicate output assets and detect content conflicts on emit (#92292)
  • Fix styled-jsx race condition: styles lost due to concurrent rendering (#92459)
  • turbo-tasks-backend: stability fixes for task cancellation and error handling (#92254)

Credits

Huge thanks to @​icyJoseph, @​sokra, @​wbinnssmith, @​eps1lon and @​ztanner for helping!

v16.2.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • backport: Move expanded adapters docs to API reference (#92115) (#92129)
  • Backport: TypeScript v6 deprecations for baseUrl and moduleResolution (#92130)
  • [create-next-app] Skip interactive prompts when CLI flags are provided (#91840)
  • next.config.js: Accept an option for serverFastRefresh (#91968)
  • Turbopack: enable server HMR for app route handlers (#91466)
  • Turbopack: exclude metadata routes from server HMR (#92034)
  • Fix CI for glibc linux builds
  • Backport: disable bmi2 in qfilter #92177
  • [backport] Fix CSS HMR on Safari (#92174)

Credits

Huge thanks to @​nextjs-bot, @​icyJoseph, @​ijjk, @​gaojude, @​wbinnssmith, @​lukesandberg, and @​bgw for helping!

Commits
  • d5f649b v16.2.3
  • 2873928 [16.x] Avoid consuming cyclic models multiple times (#75)
  • d7c7765 [backport]: Ensure app-page reports stale ISR revalidation errors via onReque...
  • c573e8c fix(server-hmr): metadata routes overwrite page runtime HMR handler (#92273)
  • 57b8f65 next-core: deduplicate output assets and detect content conflicts on emit (#9...
  • f158df1 Fix styled-jsx race condition: styles lost due to concurrent rendering (#92459)
  • 356d605 turbo-tasks-backend: stability fixes for task cancellation and error handling...
  • 3b77a6e Fix DashMap read-write self-deadlock in task_cache causing hangs (#92210)
  • b2f208a Backport: new view-transitions guide, update and fixes (#92264)
  • 52faae3 v16.2.2
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 10, 2026

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 2 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="example/nextjs/package.json">

<violation number="1" location="example/nextjs/package.json:10">
P2: Upgrade `eslint-config-next` to the same patch version as `next` so the example does not keep using the older Next ESLint plugin.</violation>
</file>
Architecture diagram
sequenceDiagram
    participant Browser as Client Browser
    participant NextServer as Next.js Runtime
    participant ISRCache as ISR / Data Cache
    participant ErrorHooks as onRequestError Hook

    Note over Browser, ErrorHooks: Runtime Request & ISR Flow (v16.2.3)

    Browser->>NextServer: GET /page
    NextServer->>ISRCache: Check entry status (Stale-While-Revalidate)
    
    alt Is Stale (Background Revalidation)
        ISRCache-->>NextServer: Return stale data
        NextServer-->>Browser: Serve stale page content
        
        NextServer->>NextServer: Trigger background re-render
        
        opt NEW: Revalidation Failure
            NextServer->>ErrorHooks: CHANGED: Report ISR error via onRequestError
        end
    else Is Fresh or First Hit
        NextServer->>NextServer: NEW: Concurrency-safe styled-jsx rendering
        NextServer-->>Browser: 200 OK (HTML + Assets)
    end

    Note over Browser, NextServer: Developer Experience (HMR)

    opt Dev Mode (HMR)
        NextServer->>Browser: NEW: Stable CSS / manifest.ts update
        Note right of NextServer: Fixes race conditions in<br/>Safari & manifest HMR
    end
Loading

Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.

Comment on lines +10 to 13
"next": "16.2.3",
"react": "19.2.4",
"react-dom": "19.2.4",
"vercel": "^41.1.4"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: Upgrade eslint-config-next to the same patch version as next so the example does not keep using the older Next ESLint plugin.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At example/nextjs/package.json, line 10:

<comment>Upgrade `eslint-config-next` to the same patch version as `next` so the example does not keep using the older Next ESLint plugin.</comment>

<file context>
@@ -7,7 +7,7 @@
   },
   "dependencies": {
-    "next": "16.2.1",
+    "next": "16.2.3",
     "react": "19.2.4",
     "react-dom": "19.2.4",
</file context>

Bumps [next](https://github.com/vercel/next.js) from 16.2.1 to 16.2.3.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.2.1...v16.2.3)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-16.2.3 branch from 3e39cc7 to fda6fe3 Compare April 23, 2026 16:43
@github-actions

Copy link
Copy Markdown
Contributor

Deploy preview for file ready!

Project:file
Status: ✅  Deploy successful!
Preview URL:https://team-scope-test-7y1lrt0fj-dietfriends.vercel.app
Latest Commit:fda6fe3
Inspect:View deployment

Deployed with vercel-action

@github-actions

Copy link
Copy Markdown
Contributor

Deploy preview for express-basic-auth ready!

Project:express-basic-auth
Status: ✅  Deploy successful!
Preview URL:https://express-basic-auth-8vky6sqw9-minsu-lees-projects-b1e388b7.vercel.app
Latest Commit:fda6fe3
Inspect:View deployment

Deployed with vercel-action

@sonarqubecloud

Copy link
Copy Markdown

@github-actions

Copy link
Copy Markdown
Contributor

Deploy preview for static ready!

Project:static
Status: ✅  Deploy successful!
Preview URL:https://zeit-now-deployment-action-example-angular-f0pn8ir99.vercel.app
Latest Commit:fda6fe3
Alias:https://staging.static.vercel-action.amond.dev
Alias:https://pr-334.static.vercel-action.amond.dev
Inspect:View deployment

Deployed with vercel-action

@dependabot @github

dependabot Bot commented on behalf of github May 12, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #373.

@dependabot dependabot Bot closed this May 12, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/next-16.2.3 branch May 12, 2026 06:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants