Update Next.js to 15.5.9 and React to 19.2.3#259
Conversation
- next: 15.5.7 → 15.5.9 - eslint-config-next: 15.5.7 → 15.5.9 - react: 19.2.0 → 19.2.3 - react-dom: 19.2.0 → 19.2.3 Fixes security vulnerabilities: - CVE: Next.js Server Actions Source Code Exposure - CVE: Next.js DoS with Server Components 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
There was a problem hiding this comment.
Pull request overview
This PR upgrades Next.js from 15.5.7 to 15.5.9 and React from 19.2.0 to 19.2.3 to address two Dependabot security alerts related to server actions source code exposure and denial of service vulnerabilities, both patched in Next.js 15.5.8.
Key Changes:
- Updated Next.js and eslint-config-next packages to address critical security vulnerabilities
- Updated React and React-dom to latest patch versions
- Modified version specifications in both package.json and package-lock.json
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 3 comments.
| File | Description |
|---|---|
| package.json | Updates dependency version specifications for Next.js, eslint-config-next, React, and React-dom |
| package-lock.json | Updates locked versions and integrity hashes to match the upgraded dependencies |
Critical Issues Identified:
- The version specifications for
nextandeslint-config-nextare incomplete (showing "15.5" instead of "15.5.9" or "^15.5.9"), which doesn't match the PR description and could lead to unexpected version resolutions - The versioning strategy for React packages changed from exact pinning to caret ranges, which is inconsistent with the previous approach
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Address Copilot review comment for consistent version specification. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 1 out of 2 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
1 participant
Summary
nextfrom 15.5.7 to 15.5.9eslint-config-nextfrom 15.5.7 to 15.5.9reactfrom 19.2.0 to 19.2.3react-domfrom 19.2.0 to 19.2.3Security Fixes
This update addresses two open Dependabot security alerts:
Test plan
🤖 Generated with Claude Code