chore(deps): update nextjs monorepo to v16.3.5 by renovate[bot] · Pull Request #3150 · seerr-team/seerr

renovate · 2026-06-11T10:26:00Z

This PR contains the following updates:

Package	Change	Age	Confidence
@next/eslint-plugin-next (source)	`16.2.6` → `16.3.5`
eslint-config-next (source)	`16.2.6` → `16.3.5`
next (source)	`16.2.6` → `16.3.5`

Release Notes

vercel/next.js (@next/eslint-plugin-next)

`v16.3.5`

Compare Source

The following bug fixes have been backported. It does not include all pending features/changes on canary.

next/image: Skip 0-byte entries when initializing disk LRU cache (#98185)
next/image: Reject empty images when reading/writing to the disk cache (#98186)
Emit whole-app server NFTs when output: 'standalone' is used with an adapter (#98167)
Add CSP nonce to script tags of loading and template files (#98403)
Fix use cache prerender signal retention (#98448)

`v16.3.4`

Compare Source

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
Fix build error when aliasing typescript to @typescript/typescript6 (#97997)
Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @eps1lon, @mischnic, and @timneutkens for helping!

`v16.3.3`

Compare Source

This release contains security fixes for the following advisories:

Critical:

`v16.3.2`

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)
[backport] Fix catch-all index page being served for every other slug (#97416)
[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

`v16.3.1`

Compare Source

What's Changed

[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in #96653
[16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @lukesandberg in #96655
[16.x] [turbopack] Collapse nested promises in the analyzer by @sampoder in #96675
[16.x] fix(next/image): preserve image response after optimization by @styfle in #96733
[16.3.x] Default deploy e2e tests to the repo next version by @eps1lon in #96900
[backport] Bump @swc/helpers by @mischnic in #96885
[backport] [turbopack] Raise registration calls in hoisted modules to the top by @lukesandberg in #97308
[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @lukesandberg in #97302
[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @lukesandberg in #97317
[backport] Restore the live headers() view of the incoming request by @unstubbable in #97311
[backport] Allow literal exports in 'use cache' files by @unstubbable in #97312
[backport] Keep the dev validation worker alive across HMR updates by @unstubbable in #97315
[backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @unstubbable in #97314
[backport] Encode the cache item name built by unstable_cache by @unstubbable in #97313
[16.3] [ci] Use OIDC tokens to read private preview builds by @eps1lon in #97258
[backport] [test] Compile the middleware redirect routes up front in dev by @lukesandberg in #97328
[backport] Fix Nav Inspector request loop on repeat captures by @acdlite in #97326
[backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @acdlite in #97325
[backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @lukesandberg in #97304
[backport] Revert i18n localization change for dynamic Pages API routes (#94905) by @gaojude in #97330

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

This release contains security fixes for the following advisories:

High:

Moderate:

`v16.2.10`

Compare Source

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

`v16.2.9`

Compare Source

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

`v16.2.8`

Compare Source

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

`v16.2.7`

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)
[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)
[backport] Encode non-ASCII characters in cache tags at construction (#93918)
[backport] Fix server action forwarding loop with middleware rewrites (#93919)
[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
[backport] Fix "type: module" in project dir when using standalone or adapters (#94050)
[backport] Propagate adapter preferred regions (#94200)
[16.2.x] Don't drop FormData entries (#94240)
[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @eps1lon, @icyJoseph, @unstubbable, @mischnic, @bgw, @timneutkens, and @lukesandberg for helping!

vercel/next.js (eslint-config-next)

`v16.3.5`

Compare Source

`v16.3.4`

Compare Source

`v16.3.3`

Compare Source

`v16.3.2`

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)
[backport] Fix catch-all index page being served for every other slug (#97416)
[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

`v16.3.1`

Compare Source

`v16.3.0`

Compare Source

`v16.2.12`

Compare Source

`v16.2.11`

Compare Source

`v16.2.10`

Compare Source

`v16.2.9`

Compare Source

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

`v16.2.8`

Compare Source

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

`v16.2.7`

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)
[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)
[backport] Encode non-ASCII characters in cache tags at construction (#93918)
[backport] Fix server action forwarding loop with middleware rewrites (#93919)
[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
[backport] Fix "type: module" in project dir when using standalone or adapters (#94050)
[backport] Propagate adapter preferred regions (#94200)
[16.2.x] Don't drop FormData entries (#94240)
[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @eps1lon, @icyJoseph, @unstubbable, @mischnic, @bgw, @timneutkens, and @lukesandberg for helping!

vercel/next.js (next)

`v16.3.5`

Compare Source

`v16.3.4`

Compare Source

`v16.3.3`

Compare Source

`v16.3.2`

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[backport] Scope app-entry export validation to files inside the app directory (#97357)
[backport] Fix catch-all index page being served for every other slug (#97416)
[16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
[16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
[16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @lubieowoce, @unstubbable, @timneutkens, @mischnic, and @eps1lon for helping!

`v16.3.1`

Compare Source

`v16.3.0`

Compare Source

`v16.2.12`

Compare Source

`v16.2.11`

Compare Source

`v16.2.10`

Compare Source

`v16.2.9`

Compare Source

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

`v16.2.8`

Compare Source

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

`v16.2.7`

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)
[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)
[backport] Encode non-ASCII characters in cache tags at construction (#93918)
[backport] Fix server action forwarding loop with middleware rewrites (#93919)
[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
[backport] Fix "type: module" in project dir when using standalone or adapters (#94050)
[backport] Propagate adapter preferred regions (#94200)
[16.2.x] Don't drop FormData entries (#94240)
[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @eps1lon, @icyJoseph, @unstubbable, @mischnic, @bgw, @timneutkens, and @lukesandberg for helping!

Configuration

📅 Schedule: (in timezone UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

cypress · 2026-06-11T10:30:01Z

seerr Run #3730

Run Properties: Passed #3730 • ed91484468: chore(deps): update nextjs monorepo to v16.3.5

Project	`seerr`
Branch Review	`renovate/nextjs-monorepo`
Run status	`Passed #3730`
Run duration	`02m 13s`
Commit	`ed91484468: chore(deps): update nextjs monorepo to v16.3.5`
Committer	`renovate[bot]`
View all properties for this run ↗︎

Test results
Failures	`0`
Flaky	`0`
Pending	`0`
Skipped	`0`
Passing	`33`
View all changes introduced in this branch ↗︎

github-actions · 2026-07-22T12:51:16Z

This pull request has merge conflicts. Please resolve the conflicts so the PR can be successfully reviewed and merged.

github-actions · 2026-08-27T13:10:27Z

This pull request has merge conflicts. Please resolve the conflicts so the PR can be successfully reviewed and merged.

github-actions · 2026-09-05T23:28:16Z

This pull request has merge conflicts. Please resolve the conflicts so the PR can be successfully reviewed and merged.

coderabbitai · 2026-09-15T18:35:15Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 11d42b53-a6e0-421d-aecc-35508533c990

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

Re-checked seerr-team/seerr#3150 - it's still an open PR, not merged to main as I'd previously assumed. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

renovate Bot requested a review from a team as a code owner June 11, 2026 10:26

renovate Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 11, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 24a05bc to 663603b Compare June 17, 2026 00:33

renovate Bot changed the title ~~chore(deps): update nextjs monorepo to v16.2.7~~ chore(deps): update nextjs monorepo to v16.2.9 Jun 17, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 663603b to 9de4e45 Compare July 8, 2026 20:34

renovate Bot changed the title ~~chore(deps): update nextjs monorepo to v16.2.9~~ chore(deps): update nextjs monorepo to v16.2.10 Jul 8, 2026

github-actions Bot added the merge conflict Cannot merge due to merge conflicts label Jul 22, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 9de4e45 to 5500501 Compare July 22, 2026 12:52

github-actions Bot removed the merge conflict Cannot merge due to merge conflicts label Jul 22, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch 2 times, most recently from 3686ac1 to 59ccbe5 Compare July 28, 2026 18:49

renovate Bot changed the title ~~chore(deps): update nextjs monorepo to v16.2.10~~ chore(deps): update nextjs monorepo to v16.2.11 Jul 28, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch 2 times, most recently from c6008fc to f9ccc0a Compare August 1, 2026 20:52

renovate Bot changed the title ~~chore(deps): update nextjs monorepo to v16.2.11~~ chore(deps): update nextjs monorepo to v16.2.12 Aug 1, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch from f9ccc0a to b6046ef Compare August 10, 2026 23:17

renovate Bot changed the title ~~chore(deps): update nextjs monorepo to v16.2.12~~ chore(deps): update nextjs monorepo to v16.3.0 Aug 10, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch from b6046ef to c1b51f3 Compare August 11, 2026 13:18

renovate Bot force-pushed the renovate/nextjs-monorepo branch from c1b51f3 to 56cbdf2 Compare August 23, 2026 17:14

renovate Bot changed the title ~~chore(deps): update nextjs monorepo to v16.3.0~~ chore(deps): update nextjs monorepo to v16.3.1 Aug 23, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 56cbdf2 to dd5fdd7 Compare August 26, 2026 12:16

github-actions Bot added the merge conflict Cannot merge due to merge conflicts label Aug 27, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch from dd5fdd7 to 7221400 Compare August 27, 2026 13:15

github-actions Bot removed the merge conflict Cannot merge due to merge conflicts label Aug 27, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 7221400 to 5bbe892 Compare August 28, 2026 10:48

renovate Bot changed the title ~~chore(deps): update nextjs monorepo to v16.3.1~~ chore(deps): update nextjs monorepo to v16.3.2 Aug 28, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 5bbe892 to 0962f44 Compare September 1, 2026 16:09

renovate Bot changed the title ~~chore(deps): update nextjs monorepo to v16.3.2~~ chore(deps): update nextjs monorepo to v16.3.3 Sep 1, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch 2 times, most recently from bf00866 to 3a604c7 Compare September 3, 2026 10:30

github-actions Bot added the merge conflict Cannot merge due to merge conflicts label Sep 5, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 3a604c7 to d4e2474 Compare September 5, 2026 23:31

github-actions Bot removed the merge conflict Cannot merge due to merge conflicts label Sep 5, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch from d4e2474 to 5edb471 Compare September 7, 2026 20:29

renovate Bot changed the title ~~chore(deps): update nextjs monorepo to v16.3.3~~ chore(deps): update nextjs monorepo to v16.3.4 Sep 7, 2026

renovate Bot force-pushed the renovate/nextjs-monorepo branch 2 times, most recently from 8f717a8 to 9888611 Compare September 15, 2026 18:35

renovate Bot force-pushed the renovate/nextjs-monorepo branch 2 times, most recently from 1a3cce9 to a095ea6 Compare September 18, 2026 21:57

renovate Bot changed the title ~~chore(deps): update nextjs monorepo to v16.3.4~~ chore(deps): update nextjs monorepo to v16.3.5 Sep 18, 2026

ehulle117 mentioned this pull request Sep 20, 2026

Critical CVEs in ghcr.io/seerr-team/seerr:latest ehulle117/tars#61

Open

chore(deps): update nextjs monorepo to v16.3.5

ed91484

renovate Bot force-pushed the renovate/nextjs-monorepo branch from a095ea6 to ed91484 Compare September 24, 2026 09:23

Navigation Menu

Uh oh!

chore(deps): update nextjs monorepo to v16.3.5 - #3150

chore(deps): update nextjs monorepo to v16.3.5#3150
renovate[bot] wants to merge 1 commit into
developfrom
renovate/nextjs-monorepo

renovate Bot commented Jun 11, 2026 •

edited

Loading

Uh oh!

cypress Bot commented Jun 11, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 22, 2026

Uh oh!

github-actions Bot commented Aug 27, 2026

Uh oh!

github-actions Bot commented Sep 5, 2026

Uh oh!

coderabbitai Bot commented Sep 15, 2026 •

edited

Loading

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Credits

Core Changes

Credits

What's Changed

Core Changes

Credits

Core Changes

Credits

Core Changes

Credits

Core Changes

Credits

Core Changes

Credits

Configuration

Uh oh!

cypress Bot commented Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 22, 2026

Uh oh!

github-actions Bot commented Aug 27, 2026

Uh oh!

github-actions Bot commented Sep 5, 2026

Uh oh!

coderabbitai Bot commented Sep 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jun 11, 2026 •

edited

Loading

cypress Bot commented Jun 11, 2026 •

edited

Loading

coderabbitai Bot commented Sep 15, 2026 •

edited

Loading