Skip to content

Conversation

@vicb
Copy link
Contributor

@vicb vicb commented Dec 3, 2025

15.2 was originally missing from https://vercel.com/changelog/cve-2025-55182
...and I forgot to bump react

@vicb vicb requested review from conico974 and Copilot December 3, 2025 19:21
@changeset-bot
Copy link

changeset-bot bot commented Dec 3, 2025

🦋 Changeset detected

Latest commit: 6e9a40b

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages
Name Type
@opennextjs/aws Patch
app-pages-router Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@pkg-pr-new
Copy link

pkg-pr-new bot commented Dec 3, 2025

Open in StackBlitz

npm i https://pkg.pr.new/@opennextjs/aws@1052

commit: 6e9a40b

@github-actions
Copy link
Contributor

github-actions bot commented Dec 3, 2025

Coverage Report

Status Category Percentage Covered / Total
🔵 Lines 28.08% 2867 / 10207
🔵 Statements 28.08% 2867 / 10207
🔵 Functions 52.46% 149 / 284
🔵 Branches 76.26% 723 / 948
File CoverageNo changed files found.
Generated in workflow #1656 for commit 6e9a40b by the Vitest Coverage Report Action

Copilot finished reviewing on behalf of vicb December 3, 2025 19:22
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates React-related dependencies from 19.0.0 to 19.0.1 and adds missing Next.js 15.2 version range support to the peer dependencies, addressing an omission from the CVE-2025-55182 security advisory.

  • Updates React, react-dom, and their TypeScript type definitions to version 19.0.1
  • Adds ~15.2.6 to the Next.js peer dependency version range

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File Description
pnpm-workspace.yaml Updates catalog versions for React, react-dom, and their type definitions from 19.0.0 to 19.0.1
pnpm-lock.yaml Reflects the dependency updates across all workspace importers and snapshots with consistent version changes
packages/open-next/package.json Adds ~15.2.6 to the Next.js peer dependency range to fill the gap in 15.x version support
.changeset/eight-bobcats-help.md Documents the peer dependency update as a patch change for the next release
Files not reviewed (1)
  • pnpm-lock.yaml: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@vicb vicb merged commit 2a9c7dd into main Dec 3, 2025
9 checks passed
@vicb vicb deleted the vic/pd3 branch December 3, 2025 19:29
@github-actions github-actions bot mentioned this pull request Dec 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants