Skip to content

chore(deps): update dependency next [security] #9966

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
+2,420 −2,569
Open

chore(deps): update dependency next [security] #9966

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion integrations/react-next-14/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
"dependencies": {
"@tanstack/react-query": "workspace:*",
"@tanstack/react-query-devtools": "workspace:*",
"next": "^14.2.33",
"next": "^15.0.0",
"react": "^18.2.0",
"react-dom": "^18.2.0"
Comment on lines +10 to 12
Copy link
Contributor

@coderabbitai coderabbitai bot Jan 30, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

React version incompatibility with Next.js 15.

Next.js 15 requires React 19 for full support, but this package still specifies React 18.2.0. This mismatch may cause build failures or runtime errors due to incompatible peer dependencies.

Update the React dependencies to React 19:

🔧 Proposed fix 
-    "next": "^15.0.0",
-    "react": "^18.2.0",
-    "react-dom": "^18.2.0"
+    "next": "^15.0.0",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@types/react": "^18.2.79",
-    "@types/react-dom": "^18.2.25"
+    "@types/react": "^19.0.0",
+    "@types/react-dom": "^19.0.0"
Does Next.js 15 require React 19?
🤖 Prompt for AI Agents 
In `@integrations/react-next-14/package.json` around lines 10 - 12, package.json
lists "next": "^15.0.0" but still pins "react" and "react-dom" to "^18.2.0";
update the React deps to match Next.js 15 by changing the dependency values for
"react" and "react-dom" to a React 19 range (e.g., "^19.0.0") and run
install/lockfile update and a quick build to verify peer dependency resolution;
ensure both dependency keys "react" and "react-dom" are updated together to
avoid mismatches with "next".

},
Expand Down
2 changes: 1 addition & 1 deletion integrations/react-next-15/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@
"@js-temporal/polyfill": "^0.4.4",
"@tanstack/react-query": "workspace:*",
"@tanstack/react-query-devtools": "workspace:*",
"next": "^15.4.8",
"next": "^16.0.0",
Copy link
Contributor

@coderabbitai coderabbitai bot Jan 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🌐 Web query:

Next.js 16.0.0 release notes breaking changes minimum Node.js version

💡 Result:

Next.js 16.0.0 — minimum Node.js version

  • Minimum Node.js: 20.9.0+ (LTS)
  • Node.js 18 is no longer supported. [1][2]

Notable breaking changes (from the official 16 release notes / upgrade guide)

  • middleware.ts → proxy.ts for Node.js request interception (Edge middleware remains but is deprecated for this use). [1][2]
  • Turbopack is now the default for next dev and next build (custom webpack setups may require opting out with --webpack). [1][2]
  • Async Request APIs / async params change (e.g., params / searchParams and related APIs are now treated as async in the App Router). [2]
  • next/image default / security-related changes (e.g., local images with query strings require config; defaults like minimumCacheTTL changed). [2]
  • Removals: AMP support removed, next lint removed, and other previously-deprecated options/APIs removed or renamed. [2]

Sources: Next.js 16 release post [1], official “Upgrading: Version 16” guide [2].

🏁 Script executed:

cat integrations/react-next-15/package.json

Repository: TanStack/query

Length of output: 529

Add engines field and review Next.js 16 breaking changes.

Next.js 16.0.0 requires Node.js 20.9.0+ (Node.js 18 no longer supported). Add "engines": { "node": ">=20.9.0" } to enforce this. React 19.2.1 is compatible. However, this upgrade has breaking changes requiring migration:

  • Async params and searchParams in App Router
  • Turbopack is now the default bundler
  • next/image defaults and security changes
  • AMP and next lint removed

Review the integration code for required updates to these areas before merging.

🤖 Prompt for AI Agents 
In `@integrations/react-next-15/package.json` at line 12, Add an "engines" entry
to package.json to require Node >=20.9.0 (Next.js 16 requirement) and update the
"next" dependency update to ^16.0.0; then audit and migrate integration code for
Next.js 16 breaking changes: search for any App Router page handlers that access
params/searchParams synchronously and convert them to support async
params/searchParams, check build/bundler-related config for Turbopack
assumptions (and adjust Next.js config or build scripts if you rely on
webpack-specific behavior), review usages of next/image for
default/prop/security changes and update image imports/props, and remove or
replace any AMP and next lint-specific code paths; ensure React 19.2.1 remains
specified if needed.

"react": "^19.2.1",
"react-dom": "^19.2.1",
"tupleson": "0.23.1"
Expand Down
Loading
Loading