Skip to content

chore(deps): bump next from 16.1.6 to 16.2.1 - #7

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/next-16.2.1
Closed

chore(deps): bump next from 16.1.6 to 16.2.1#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/next-16.2.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 27, 2026

Copy link
Copy Markdown

Bumps next from 16.1.6 to 16.2.1.

Release notes

Sourced from next's releases.

v16.2.1

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • docs: post release amends (#91715)
  • docs: fix broken Activity Patterns demo link in preserving UI state guide (#91698)
  • Fix adapter outputs for dynamic metadata routes (#91680)
  • Turbopack: fix webpack loader runner layer (#91727)
  • Fix server actions in standalone mode with cacheComponents (#91711)
  • turbo-persistence: remove Unmergeable mmap advice (#91713)
  • Fix layout segment optimization: move app-page imports to server-utility transition (#91701)
  • Turbopack: lazy require metadata and handle TLA (#91705)
  • [turbopack] Respect {eval:true} in worker_threads constructors (#91666)

Credits

Huge thanks to @​icyJoseph, @​abhishekmardiya, @​ijjk, @​mischnic, @​unstubbable, @​sokra, and @​lukesandberg for helping!

v16.2.1-canary.10

Misc Changes

  • turbo-tasks-backend: assert non-transient task_ids in track_modification: #91924
  • fix(turbopack): preserve resolveExtensions priority in read_matches fast path: #91856
  • turbopack: Remove Vc::resolve(), migrate all callsites to Vc::to_resolved(): #91725
  • turbo-tasks: add hashed cell mode for hash-based change detection without cell data: #91576
  • test(typed-routes): fix flaky tests by increasing retry timeout: #91923
  • test(app-basepath): increase waitForElementByCss timeout for hard-nav test: #91920
  • test(interoperability): increase waitForElementByCss timeout for cross-router navigations: #91918

Credits

Huge thanks to @​sokra for helping!

v16.2.1-canary.9

Core Changes

  • [Segment Bundling] Bundle static prefetches based on size: #91439

Credits

Huge thanks to @​acdlite for helping!

v16.2.1-canary.8

Core Changes

  • Perf: Skip turning Set into Array: #91383
  • Perf: Move chunkloading instrumentation to separate function: #91382
  • Perf: Use headers object directly in checkIsOnDemandRevalidate: #91381
  • Use charCodeAt for normalizePathTrailingSlash: #91380

... (truncated)

Commits
  • ed7d2ce v16.2.1
  • 3e37bb4 docs: post release amends (#91715)
  • a15ec6e docs: fix broken Activity Patterns demo link in preserving UI state guide (#9...
  • 600cd2f Fix adapter outputs for dynamic metadata routes (#91680)
  • 27886d3 Turbopack: fix webpack loader runner layer (#91727)
  • 88fc430 Fix server actions in standalone mode with cacheComponents (#91711)
  • 37aed86 turbo-persistence: remove Unmergeable mmap advice (#91713)
  • d6195ec Fix layout segment optimization: move app-page imports to server-utility tran...
  • 6cb97d6 Turbopack: lazy require metadata and handle TLA (#91705)
  • e6b101a [turbopack] Respect {eval:true} in worker_threads constructors (#91666)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [next](https://github.com/vercel/next.js) from 16.1.6 to 16.2.1.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.1.6...v16.2.1)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 27, 2026
@vercel

vercel Bot commented Mar 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
ribba-pro Ready Ready Preview, Comment Mar 27, 2026 6:45pm

@dependabot @github

dependabot Bot commented on behalf of github Mar 27, 2026

Copy link
Copy Markdown
Author

Looks like next is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Mar 27, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/next-16.2.1 branch March 27, 2026 21:22
melvinmt added a commit that referenced this pull request Jul 19, 2026
…e.a.

Verwerkt de high-effort review-bevindingen op ribba-web#25 (migratie
20260718000000 + live toegepast op het gedeelde project):

#1  inquiry_recipients: column-level SELECT — geclaimde deelnemers konden de
    bearer chat-tokens van de tegenpartij lezen; token/notified_email-kolommen
    ge-REVOKE't voor authenticated.
#2  cron: throttle-stamp VÓÓR de send (+ revert bij send-fail) i.p.v. onbewaakt
    erna — voorkomt een duplicate-mailstorm als de stamp-UPDATE faalt.
#3  inquiry-submit: no-email-scholen niet meer in de leerling-bevestigingsmail
    (ze worden nooit gecontacteerd en kunnen structureel niet reageren).
#4  cron: retry-sweep voor recipients die na een mislukte outreach op 'pending'
    bleven (had geen enkel retry-pad).
#5  opt-out: honoreert chat_tokens_expire_at — een verlopen/gelekt token kan
    niet langer account-breed de e-mailnotificaties uitzetten.
#6  inquiry-submit: transactionele submit_inquiry-RPC (advisory lock op e-mail)
    tegen de dedupe-TOCTOU; vervangt read-then-insert + compenserende delete.
#7  cron: list_notifiable_conversation_ids-RPC doet de kolom-vergelijking
    server-side, zodat de 200-cap niet vol loopt met al-genotificeerde
    conversaties en nieuwere niet verhongeren.
#8  messages-INSERT-policy blokkeert nu status 'declined'/'expired'.
#9  smart-banner appArgument: token → /r/{recipient_id} of /i/{inquiry_id}
    server-side geresolved, i.p.v. het door de app niet-geroute /chat/{token}.
#10 (los commit) chat-notifications cron → Supabase pg_cron; deploy-blocker weg.

tsc + build + lint schoon; submit_inquiry/dedupe/notifiable live geverifieerd
op het gedeelde project, RPC-route end-to-end getest (RESEND uit, testrijen
opgeruimd).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants