feat: update next#2391
Conversation
wilsonrivera
requested review from
a team,
JivusAyrus,
StarpTech and
thisisnithin
as code owners
WalkthroughNext.js dependency version bumped from 15.4.7 to 15.4.8 across package.json files. PNPM overrides and studio package configurations updated correspondingly. No changes to exports, APIs, control flow, or error handling. Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes
Possibly related PRs
Pre-merge checks❌ Failed checks (1 inconclusive)
✅ Passed checks (2 passed)
Comment |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #2391 +/- ##
=======================================
Coverage ? 34.64%
=======================================
Files ? 340
Lines ? 33837
Branches ? 251
=======================================
Hits ? 11722
Misses ? 21086
Partials ? 1029 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
Router image scan passed✅ No security vulnerabilities found in image: |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
⛔ Files ignored due to path filters (1)
pnpm-lock.yamlis excluded by!**/pnpm-lock.yaml
📒 Files selected for processing (2)
package.json(1 hunks)studio/package.json(1 hunks)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (16)
- GitHub Check: build_test
- GitHub Check: build_push_image
- GitHub Check: integration_test (./events)
- GitHub Check: integration_test (./telemetry)
- GitHub Check: integration_test (./. ./fuzzquery ./lifecycle ./modules)
- GitHub Check: build_test
- GitHub Check: build_test
- GitHub Check: image_scan (nonroot)
- GitHub Check: image_scan
- GitHub Check: build_push_image (nonroot)
- GitHub Check: build_push_image
- GitHub Check: build_test
- GitHub Check: build_push_image
- GitHub Check: build_test
- GitHub Check: Analyze (go)
- GitHub Check: Analyze (javascript-typescript)
🔇 Additional comments (1)
package.json (1)
71-71: Approve consistency, but enforce security-critical review process.Both
package.json(overrides) andstudio/package.json(dependencies) now consistently target Next.js 15.4.8, which is good for monorepo integrity. However, since this version patches a CVSS 10.0 critical RCE vulnerability (CVE-2025-66478), ensure the test/verification checklist boxes are completed before merge.Consider adding a release note or ADR documenting the security motivation for this patch.
wilsonrivera
deleted the
wilson/eng-8621-update-next-to-latest-version
branch
2 participants
Summary by CodeRabbit
✏️ Tip: You can customize this high-level summary in your review settings.
Checklist