Skip to content

chore(deps): Bump next from 15.5.18 to 16.2.6#5

Merged
hizrianraz merged 1 commit into
mainfrom
dependabot/npm_and_yarn/next-16.2.6
May 31, 2026
Merged

chore(deps): Bump next from 15.5.18 to 16.2.6#5
hizrianraz merged 1 commit into
mainfrom
dependabot/npm_and_yarn/next-16.2.6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 14, 2026

Bumps next from 15.5.18 to 16.2.6.

Release notes

Sourced from next's releases.

v16.2.6

[!NOTE] This release contains security fixes and backported bug fixes. It does not include all pending features/changes on canary.

Security Fixes

The following advisories have been addressed:

High:

Moderate:

Low:

Core Changes

  • fix: preserve HTTP access fallbacks during prerender recovery (#92231)
  • Fix fallback route params case in app-page handler (#91737)
  • Fix invalid HTML response for route-level RSC requests in deployment adapter (#91541)
  • Patch setHeader for direct route handlers (#93101)
  • Include deployment id in cacheHandlers keys (#93453)
  • Fix double-encoding of URL pathname parts in client param parsing (#93491)

v16.2.5

[!NOTE] This release contains security fixes and backported bug fixes. It does not include all pending features/changes on canary.

Security Fixes

The following advisories have been addressed:

High:

... (truncated)

Commits
  • ee6e79b v16.2.6
  • afa053d Turbopack: Match proxy matchers with webpack implementation (#93594)
  • 97a154e Turbopack: Fix middleware matcher suffix (#93590)
  • 83899bc [backport] Disable build caches for production/staging/force-preview deploys ...
  • 7b222b9 [backport][test] Pin package manager to patch versions (#93595)
  • a8dc24f [backport] Turbopack: more strict vergen setup (#93587)
  • 766148f v16.2.5
  • 0dd9483 fix: add explicit checks for RSC header (#83) (#98)
  • d166096 fix proxy matching for segment prefetch URLs (#89) (#96)
  • 9d50c0b Strip next-resume header from incoming requests (#92)
  • Additional commits viewable in compare view

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 14, 2026

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel
Copy link
Copy Markdown

vercel Bot commented May 14, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
ainfera-dashboard Ready Ready Preview, Comment May 31, 2026 2:18pm
ainfera-marketing Ready Ready Preview, Comment May 31, 2026 2:18pm

Request Review

@dependabot dependabot Bot changed the title chore(deps): Bump next from 15.0.3 to 16.2.6 chore(deps): Bump next from 15.5.18 to 16.2.6 May 14, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/next-16.2.6 branch from 025dbd0 to b0dd3a3 Compare May 14, 2026 07:36
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/next-16.2.6 branch from b0dd3a3 to 57ea3ce Compare May 14, 2026 09:02
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/next-16.2.6 branch from 57ea3ce to 2c6508a Compare May 15, 2026 11:22
hizrianraz added a commit that referenced this pull request May 16, 2026
…el slugs

Continues the §1.2 launch-readiness pass on top of the /manwe-pool →
/hermes rename. Updates the marketing surface to match what api PR #7
and specs PR #5 actually ship.

Changes by area:

AAMC voter pool sweep (DeepSeek + Llama 3.3 70B → Grok 4 + Mistral
Large 3, per spec v1.1):
- AAQualityScatter.tsx: replace the 2 retired voter rows with Grok 4
  + Mistral Large 3 entries; bump header comment to v1.1 + date
- ProviderRail.tsx: drop the deepseek tile; add xai + mistral as live;
  ungate google (now live via api#7)
- LayerTower.tsx: L2 description + capabilities list reflect the
  5 AAMC voters
- platform/page.tsx: L2 status text "5 AAMC voters live ·
  Anthropic + OpenAI + Google + xAI + Mistral · Together for Llama"
- page.tsx (homepage): both L2 hero descriptions updated
- skill.md/route.ts: L2 routing summary updated

SDK API accuracy (real `ainfera` SDK calls, not invented):
- content/docs.ts /docs/quickstart: rewritten to AinferaClient +
  client.agents.register + agent.wallet.topup + agent.inference; uses
  ai_live_* key format; honest wallet topup language (manual approval
  for launch week, automated x402 in Week 1 fast-follow)
- page.tsx QS_PYTHON / QS_TS / QS_CURL homepage code blocks: same
  rewrite — Agent.create + agent.infer + cap_per_day replaced with
  the actual SDK signature
- HeroFlow.tsx, TerminalBlock.tsx, SignedChain.tsx: visible
  agent.infer() labels updated to agent.inference()

Model slug normalization (dots → dashes — code identifiers should be
dashed, display names keep dots):
- PrimitiveDiagram.tsx: claude-opus-4.7 + gpt-5.5 + gemini-3.1-pro
  → dashed variants
- TerminalBlock.tsx code data: "claude-opus-4.7" → "claude-opus-4-7"
  in 2 places

Glossary fix:
- AAMC entry was wrong (said "Agent-to-Agent Model Context" — that's
  not what AAMC stands for). Now reads: "Adjudication and Auto-
  Modification Council — 5 frontier Voters × 5 Lenses, with 3-of-5
  advisory, 4-of-5 binding, 5-of-5+Council self-modification quorum."

Verification:
- tsc green after clearing stale .next/types
- No more DeepSeek or Llama 3.3 70B references in source (only an
  intentional CHANGELOG-reference comment in AAQualityScatter)
- All `agent.infer*` user-visible labels now agent.inference
- All dotted model slugs gone; display names preserved

Companion to: AAMC spec v1.1 (specs#5), api adapter wiring (api#7),
verify trust-note (verify#6), mcp-server quickstart refresh (#6).

Linear: AIN-95 (parent AIN-93 §1.2 subsections A, B, C, H, I)

Co-Authored-By: Claude <noreply@anthropic.com>
hizrianraz added a commit that referenced this pull request May 16, 2026
…+ CDP rail + ai_infera_ (#15)

* feat(marketing): rename /manwe-pool → /hermes (customer-facing brand fix)

The /manwe-pool route was the customer landing page for hermes-agent
builders, but "Manwe" is the founder's private agent Aratar codename
(see project-ainfera-topology memory). Using it externally conflated
the cap-table-separate founder asset with a customer cohort label.

Renames the route and brand to "Hermes Pool" — parallel to "OpenClaw
Pool", named for the framework the cohort uses. The Pool 1 · hermes-
agent eyebrow text is unchanged.

Changes:
- git mv apps/marketing/app/manwe-pool → app/hermes
- All Manwe Pool / /manwe-pool references in page.tsx, /openclaw, and
  /platform updated to Hermes Pool / /hermes
- sitemap.ts, lib/og.tsx OG map, og/[slug]/route.tsx slug list
- Duplicated public/og/manwe-pool.png → hermes.png (old asset retained
  for any cached crawlers; safe to delete after 308 settles)
- next.config.mjs: added 308 (permanent: false) redirect
  /manwe-pool → /hermes so backlinks keep working

Vocabulary lock check: "Hermes" is banned as an agent codename per
web/.claude/CLAUDE.md. "Hermes Pool" is a customer cohort marketing
label (parallel to "OpenClaw Pool"), same as the framework name —
not an agent codename. The actual hermes-agent framework name is
used lowercase throughout, which the CLAUDE.md explicitly allows.

tsc green after clearing stale .next/types build artifacts.

Linear: AIN-95 (parent AIN-93 § §1.2-D + §1.2-C cards)

Co-Authored-By: Claude <noreply@anthropic.com>

* feat(marketing): launch-readiness sweep — AAMC lineup + SDK API + model slugs

Continues the §1.2 launch-readiness pass on top of the /manwe-pool →
/hermes rename. Updates the marketing surface to match what api PR #7
and specs PR #5 actually ship.

Changes by area:

AAMC voter pool sweep (DeepSeek + Llama 3.3 70B → Grok 4 + Mistral
Large 3, per spec v1.1):
- AAQualityScatter.tsx: replace the 2 retired voter rows with Grok 4
  + Mistral Large 3 entries; bump header comment to v1.1 + date
- ProviderRail.tsx: drop the deepseek tile; add xai + mistral as live;
  ungate google (now live via api#7)
- LayerTower.tsx: L2 description + capabilities list reflect the
  5 AAMC voters
- platform/page.tsx: L2 status text "5 AAMC voters live ·
  Anthropic + OpenAI + Google + xAI + Mistral · Together for Llama"
- page.tsx (homepage): both L2 hero descriptions updated
- skill.md/route.ts: L2 routing summary updated

SDK API accuracy (real `ainfera` SDK calls, not invented):
- content/docs.ts /docs/quickstart: rewritten to AinferaClient +
  client.agents.register + agent.wallet.topup + agent.inference; uses
  ai_live_* key format; honest wallet topup language (manual approval
  for launch week, automated x402 in Week 1 fast-follow)
- page.tsx QS_PYTHON / QS_TS / QS_CURL homepage code blocks: same
  rewrite — Agent.create + agent.infer + cap_per_day replaced with
  the actual SDK signature
- HeroFlow.tsx, TerminalBlock.tsx, SignedChain.tsx: visible
  agent.infer() labels updated to agent.inference()

Model slug normalization (dots → dashes — code identifiers should be
dashed, display names keep dots):
- PrimitiveDiagram.tsx: claude-opus-4.7 + gpt-5.5 + gemini-3.1-pro
  → dashed variants
- TerminalBlock.tsx code data: "claude-opus-4.7" → "claude-opus-4-7"
  in 2 places

Glossary fix:
- AAMC entry was wrong (said "Agent-to-Agent Model Context" — that's
  not what AAMC stands for). Now reads: "Adjudication and Auto-
  Modification Council — 5 frontier Voters × 5 Lenses, with 3-of-5
  advisory, 4-of-5 binding, 5-of-5+Council self-modification quorum."

Verification:
- tsc green after clearing stale .next/types
- No more DeepSeek or Llama 3.3 70B references in source (only an
  intentional CHANGELOG-reference comment in AAQualityScatter)
- All `agent.infer*` user-visible labels now agent.inference
- All dotted model slugs gone; display names preserved

Companion to: AAMC spec v1.1 (specs#5), api adapter wiring (api#7),
verify trust-note (verify#6), mcp-server quickstart refresh (#6).

Linear: AIN-95 (parent AIN-93 §1.2 subsections A, B, C, H, I)

Co-Authored-By: Claude <noreply@anthropic.com>

* feat(launch-readiness): swap dashboard rail Stripe→CDP wallet + ai_infera_ key prefix in marketing snippets

Dashboard:
- settings: rail label "Stripe Customer Balance" → "CDP Smart-Wallet · x402"; USDC simplified; toast/button copy aligned to CDP funding flow
- wallet: drop "Top up via Stripe" ghost button (rail no longer Stripe)

Marketing snippets — uniform ai_infera_ key prefix:
- /build quickstart response, / page Python+TS snippets, /skill.md quickstart, /docs quickstart

No behavior change to API or SDK. Copy + prefix only.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude <noreply@anthropic.com>
hizrianraz added a commit that referenced this pull request May 18, 2026
Stub component at apps/dashboard/components/TestCall.tsx was scaffolded
in dashboard build commit ed731c7 and never imported. It returns
setTimeout-fake responses ("[stubbed response for …]") and a synthetic
receipt_id — exactly the half-shipped fake button pattern Memory #5
warns against.

A real test-call UI needs auth that the dashboard cookie-session cannot
provide today: /v1/inference requires the agent's API key, and the
multi-key model (tenant signs-as-agent) is the same gap blocking AIN-87.
Deferring the test-call UI to land alongside that schema work instead
of leaving a dead stub for a future agent to wire to fake data.

Co-authored-by: Claude <noreply@anthropic.com>
hizrianraz added a commit that referenced this pull request May 18, 2026
…ons (#41)

Memory #5 (honest-deferred > half-shipped fakes) cleanup pass on
Settings tabs whose toast handlers promised UX backed by endpoints
that don't exist:

- Delete dead KEY_ROWS table branch + its rotate/revoke fake-toast
  handlers. KEY_ROWS was hardcoded [] so the table never rendered,
  but the rotate/revoke buttons within the never-rendered branch
  toast "lands D6" — multi-key CRUD actually needs new api_keys
  schema (AIN-87, multi-day).

- Tenant tab "Save changes" button → disabled with honest
  "post-Seed" label + tooltip pointing at the missing
  PATCH /v1/tenants/{id} surface.

- Compliance tab "Export bundle now" + "Configure schedule" buttons
  → disabled. Annex IV export endpoint doesn't exist; public audit
  chain at /v1/audit/public is the current honest surface.

No behavior changes for surfaces that work today (Mint Card via
/agents, spend-policy editor, audit feed, etc).

Co-authored-by: Claude <noreply@anthropic.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/next-16.2.6 branch from 2c6508a to b88b639 Compare May 23, 2026 07:21
@dependabot dependabot Bot requested a review from hizrianraz as a code owner May 23, 2026 07:21
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/next-16.2.6 branch from b88b639 to 39890b8 Compare May 31, 2026 14:10
Bumps [next](https://github.com/vercel/next.js) from 15.5.18 to 16.2.6.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.5.18...v16.2.6)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.6
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/next-16.2.6 branch from 39890b8 to 8526bbb Compare May 31, 2026 14:17
@hizrianraz hizrianraz merged commit 1295a14 into main May 31, 2026
6 checks passed
@hizrianraz hizrianraz deleted the dependabot/npm_and_yarn/next-16.2.6 branch May 31, 2026 14:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant