chore(deps-dev): bump @next/eslint-plugin-next from 15.3.2 to 16.2.10 by dependabot[bot] · Pull Request #1037 · knocklabs/javascript

dependabot · 2026-07-14T02:22:26Z

Bumps @next/eslint-plugin-next from 15.3.2 to 16.2.10.

Release notes

Sourced from @next/eslint-plugin-next's releases.

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)

[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)

[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)

[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)

[backport] Encode non-ASCII characters in cache tags at construction (#93918)

[backport] Fix server action forwarding loop with middleware rewrites (#93919)

[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)

[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

[backport] Fix "type: module" in project dir when using standalone or adapters (#94050)

[backport] Propagate adapter preferred regions (#94200)

[16.2.x] Don't drop FormData entries (#94240)

[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @eps1lon, @icyJoseph, @unstubbable, @mischnic, @bgw, @timneutkens, and @lukesandberg for helping!

v16.2.6

[!NOTE] This release contains security fixes and backported bug fixes. It does not include all pending features/changes on canary.

Security Fixes

The following advisories have been addressed:

High:

GHSA-8h8q-6873-q5fj: Denial of Service with Server Components

GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

GHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components

GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection

GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades

GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n

Moderate:

... (truncated)

Commits

9dadfd6 v16.2.10
534d9c1 [16.2.x] Release pipeline updates (#95160)
6e1a94d [16.2.x][ci]: fix release script to not strip newlines (#94640)
f37fad9 v16.2.9
6f16804 v16.2.8
411c455 v16.2.7
ee6e79b v16.2.6
766148f v16.2.5
2275bd8 v16.2.4
d5f649b v16.2.3
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @next/eslint-plugin-next since your current version.

vercel · 2026-07-14T02:22:29Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
javascript-ms-teams-connect-example	Ready	Preview, Comment	Jul 20, 2026 5:42pm
javascript-nextjs-example	Ready	Preview, Comment	Jul 20, 2026 5:42pm
javascript-slack-connect-example	Ready	Preview, Comment	Jul 20, 2026 5:42pm
javascript-slack-kit-example	Ready	Preview, Comment	Jul 20, 2026 5:42pm

changeset-bot · 2026-07-14T02:22:31Z

⚠️ No Changeset found

Latest commit: 30a717d

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

cursor

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want higher recall? High effort reviews run extra passes and find more bugs. A team admin can switch effort levels in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit f385a3e. Configure here.}

cursor · 2026-07-14T02:24:42Z

    "@knocklabs/eslint-config": "workspace:^",
    "@knocklabs/typescript-config": "workspace:^",
-    "@next/eslint-plugin-next": "^15.3.1",
+    "@next/eslint-plugin-next": "^16.2.10",


Next plugin breaks style-guide peer

Medium Severity

The devDependency bump to @next/eslint-plugin-next ^16.2.10 falls outside @vercel/style-guide’s peer range (>=12.3.0 <15.0.0-0). Both examples lint via @knocklabs/eslint-config/next.js, which extends that style guide, so the resolved Next ESLint plugin may be unsupported and yarn lint can fail or apply the wrong rules.

Additional Locations (1)

examples/nextjs-example/package.json#L40-L41

^{Reviewed by Cursor Bugbot for commit f385a3e. Configure here.}

Bumps [@next/eslint-plugin-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-plugin-next) from 15.3.2 to 16.2.10. - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.2.10/packages/eslint-plugin-next) --- updated-dependencies: - dependency-name: "@next/eslint-plugin-next" dependency-version: 16.2.10 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 14, 2026

dependabot Bot requested a review from a team as a code owner July 14, 2026 02:22

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 14, 2026

dependabot Bot requested review from MikeCarbone and meryldakin and removed request for a team July 14, 2026 02:22

dependabot Bot added the javascript Pull requests that update javascript code label Jul 14, 2026

dependabot Bot mentioned this pull request Jul 14, 2026

chore(deps-dev): bump @next/eslint-plugin-next from 15.3.2 to 16.2.10 #1016

Closed

vercel Bot deployed to Preview – javascript-slack-kit-example July 14, 2026 02:23 View deployment

vercel Bot deployed to Preview – javascript-slack-connect-example July 14, 2026 02:23 View deployment

vercel Bot deployed to Preview – javascript-nextjs-example July 14, 2026 02:23 View deployment

vercel Bot deployed to Preview – javascript-ms-teams-connect-example July 14, 2026 02:23 View deployment

cursor Bot reviewed Jul 14, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/npm_and_yarn/next/eslint-plugin-next-16.2.10 branch from f385a3e to 30a717d Compare July 20, 2026 17:39

vercel Bot deployed to Preview – javascript-slack-kit-example July 20, 2026 17:40 View deployment

vercel Bot deployed to Preview – javascript-slack-connect-example July 20, 2026 17:40 View deployment

vercel Bot deployed to Preview – javascript-nextjs-example July 20, 2026 17:42 View deployment

vercel Bot deployed to Preview – javascript-ms-teams-connect-example July 20, 2026 17:42 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump @next/eslint-plugin-next from 15.3.2 to 16.2.10#1037

chore(deps-dev): bump @next/eslint-plugin-next from 15.3.2 to 16.2.10#1037
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/next/eslint-plugin-next-16.2.10

dependabot Bot commented on behalf of github Jul 14, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Jul 14, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Jul 14, 2026 •

edited

Loading

Uh oh!

cursor Bot left a comment

Uh oh!

cursor Bot Jul 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v16.2.10

v16.2.9

v16.2.8

v16.2.7

Core Changes

Credits

v16.2.6

Security Fixes

Uh oh!

vercel Bot commented Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

changeset-bot Bot commented Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Jul 14, 2026

Choose a reason for hiding this comment

Next plugin breaks style-guide peer

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 14, 2026 •

edited

Loading

vercel Bot commented Jul 14, 2026 •

edited

Loading

changeset-bot Bot commented Jul 14, 2026 •

edited

Loading