From eba5fddaab5d69f937da6b42c0df02090585d4e4 Mon Sep 17 00:00:00 2001 From: "linear-code[bot]" <222613912+linear-code[bot]@users.noreply.github.com> Date: Thu, 23 Jul 2026 13:41:06 +0000 Subject: [PATCH] chore: upgrade next to ^16.2.11 to address CVE-2026-64641 Generated with [Linear](https://linear.app/sourcebot/issue/SOU-1570/sourcebot-devsourcebot-cve-2026-64641-nextjs-denial-of-service-in-app#agent-session-22916058) Co-authored-by: linear-code[bot] <222613912+linear-code[bot]@users.noreply.github.com> --- CHANGELOG.md | 1 + package.json | 1 + yarn.lock | 82 ++++++++++++++++++++++++++-------------------------- 3 files changed, 43 insertions(+), 41 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index b0402dab6..91b8a5894 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Fixed - Upgraded `tar` to `^7.5.20`. [#1474](https://github.com/sourcebot-dev/sourcebot/pull/1474) +- Upgraded `next` to `^16.2.11`. [#1498](https://github.com/sourcebot-dev/sourcebot/pull/1498) ### Changed - Reduced Sentry span sampling to 10% outside development. [#1475](https://github.com/sourcebot-dev/sourcebot/pull/1475) diff --git a/package.json b/package.json index ed846875f..1879d61fe 100644 --- a/package.json +++ b/package.json @@ -31,6 +31,7 @@ "packageManager": "yarn@4.7.0", "resolutions": { "@protobufjs/inquire": "1.1.0", + "next@npm:16.2.6": "^16.2.11", "prettier": "3.5.3", "@lezer/common": "1.3.0", "qs": "^6.14.2", diff --git a/yarn.lock b/yarn.lock index 051755b31..9e5177d68 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3870,10 +3870,10 @@ __metadata: languageName: node linkType: hard -"@next/env@npm:16.2.6": - version: 16.2.6 - resolution: "@next/env@npm:16.2.6" - checksum: 10c0/466722ce30a9561d29c08a7ba78091a47fef3644f422d04751c7124a24457ffe11eb25bb6c59c1e1d57735d9c68c58d185cc19ea58befd7a9c5b81dc05ca550d +"@next/env@npm:16.2.11": + version: 16.2.11 + resolution: "@next/env@npm:16.2.11" + checksum: 10c0/fdb5ff54037f5e554c7452a31f745e40a02ea55416b80c9abf5ebb3b6fba54beaa15e080fc8470f9a59b3a0506c7ce775764134256d413f17e17e4f92802cee3 languageName: node linkType: hard @@ -3886,58 +3886,58 @@ __metadata: languageName: node linkType: hard -"@next/swc-darwin-arm64@npm:16.2.6": - version: 16.2.6 - resolution: "@next/swc-darwin-arm64@npm:16.2.6" +"@next/swc-darwin-arm64@npm:16.2.11": + version: 16.2.11 + resolution: "@next/swc-darwin-arm64@npm:16.2.11" conditions: os=darwin & cpu=arm64 languageName: node linkType: hard -"@next/swc-darwin-x64@npm:16.2.6": - version: 16.2.6 - resolution: "@next/swc-darwin-x64@npm:16.2.6" +"@next/swc-darwin-x64@npm:16.2.11": + version: 16.2.11 + resolution: "@next/swc-darwin-x64@npm:16.2.11" conditions: os=darwin & cpu=x64 languageName: node linkType: hard -"@next/swc-linux-arm64-gnu@npm:16.2.6": - version: 16.2.6 - resolution: "@next/swc-linux-arm64-gnu@npm:16.2.6" +"@next/swc-linux-arm64-gnu@npm:16.2.11": + version: 16.2.11 + resolution: "@next/swc-linux-arm64-gnu@npm:16.2.11" conditions: os=linux & cpu=arm64 & libc=glibc languageName: node linkType: hard -"@next/swc-linux-arm64-musl@npm:16.2.6": - version: 16.2.6 - resolution: "@next/swc-linux-arm64-musl@npm:16.2.6" +"@next/swc-linux-arm64-musl@npm:16.2.11": + version: 16.2.11 + resolution: "@next/swc-linux-arm64-musl@npm:16.2.11" conditions: os=linux & cpu=arm64 & libc=musl languageName: node linkType: hard -"@next/swc-linux-x64-gnu@npm:16.2.6": - version: 16.2.6 - resolution: "@next/swc-linux-x64-gnu@npm:16.2.6" +"@next/swc-linux-x64-gnu@npm:16.2.11": + version: 16.2.11 + resolution: "@next/swc-linux-x64-gnu@npm:16.2.11" conditions: os=linux & cpu=x64 & libc=glibc languageName: node linkType: hard -"@next/swc-linux-x64-musl@npm:16.2.6": - version: 16.2.6 - resolution: "@next/swc-linux-x64-musl@npm:16.2.6" +"@next/swc-linux-x64-musl@npm:16.2.11": + version: 16.2.11 + resolution: "@next/swc-linux-x64-musl@npm:16.2.11" conditions: os=linux & cpu=x64 & libc=musl languageName: node linkType: hard -"@next/swc-win32-arm64-msvc@npm:16.2.6": - version: 16.2.6 - resolution: "@next/swc-win32-arm64-msvc@npm:16.2.6" +"@next/swc-win32-arm64-msvc@npm:16.2.11": + version: 16.2.11 + resolution: "@next/swc-win32-arm64-msvc@npm:16.2.11" conditions: os=win32 & cpu=arm64 languageName: node linkType: hard -"@next/swc-win32-x64-msvc@npm:16.2.6": - version: 16.2.6 - resolution: "@next/swc-win32-x64-msvc@npm:16.2.6" +"@next/swc-win32-x64-msvc@npm:16.2.11": + version: 16.2.11 + resolution: "@next/swc-win32-x64-msvc@npm:16.2.11" conditions: os=win32 & cpu=x64 languageName: node linkType: hard @@ -18785,19 +18785,19 @@ __metadata: languageName: node linkType: hard -"next@npm:16.2.6, next@npm:^16.2.6": - version: 16.2.6 - resolution: "next@npm:16.2.6" +"next@npm:^16.2.11, next@npm:^16.2.6": + version: 16.2.11 + resolution: "next@npm:16.2.11" dependencies: - "@next/env": "npm:16.2.6" - "@next/swc-darwin-arm64": "npm:16.2.6" - "@next/swc-darwin-x64": "npm:16.2.6" - "@next/swc-linux-arm64-gnu": "npm:16.2.6" - "@next/swc-linux-arm64-musl": "npm:16.2.6" - "@next/swc-linux-x64-gnu": "npm:16.2.6" - "@next/swc-linux-x64-musl": "npm:16.2.6" - "@next/swc-win32-arm64-msvc": "npm:16.2.6" - "@next/swc-win32-x64-msvc": "npm:16.2.6" + "@next/env": "npm:16.2.11" + "@next/swc-darwin-arm64": "npm:16.2.11" + "@next/swc-darwin-x64": "npm:16.2.11" + "@next/swc-linux-arm64-gnu": "npm:16.2.11" + "@next/swc-linux-arm64-musl": "npm:16.2.11" + "@next/swc-linux-x64-gnu": "npm:16.2.11" + "@next/swc-linux-x64-musl": "npm:16.2.11" + "@next/swc-win32-arm64-msvc": "npm:16.2.11" + "@next/swc-win32-x64-msvc": "npm:16.2.11" "@swc/helpers": "npm:0.5.15" baseline-browser-mapping: "npm:^2.9.19" caniuse-lite: "npm:^1.0.30001579" @@ -18841,7 +18841,7 @@ __metadata: optional: true bin: next: dist/bin/next - checksum: 10c0/3572071eb0e8051c3b007224dcf642037ce27a2f4b75c45f7e0fe7f2343e98e66604ce8696dde56ecd72963900d330d3a3af0f068f34cfc67520180263effa5f + checksum: 10c0/81f85262cf01ad6b4fd4a8be369925dfe206806a33e967733033d7adcf367aa0ba1f911272de6169a3d09315821eddf6b57594337a456ad134ba5aa8870a80b1 languageName: node linkType: hard