Skip to content

build(deps): bump next from 14.2.35 to 15.5.27 in /webgui-new - #877

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/webgui-new/next-15.5.27
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/webgui-new/next-15.5.27

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps next from 14.2.35 to 15.5.27.

Release notes

Sourced from next's releases.

v15.5.27

This release contains security fixes for the following advisories:

Medium:

v15.5.26

This release contains additional security hardening for next/og. For more information, check out https://nextjs.org/blog/nextjs-security-update-september-22-2026

v15.5.25

Follow-up release to v15.5.24 re-enabling AVIF Image Optimization when newer versions of sharp are installed (#97954).

v15.5.24

This release contains security fixes for the following advisories:

Critical:

Commits
  • def7eff v15.5.27
  • 52c94ab [lts-maintenance] Scope response cache keys to their source route (#219)
  • 785f4c2 [lts-maintenance] Match Next data paths case-sensitively (#197)
  • 7217d63 [lts-maintenance][webpack] Ensure dynamicParams is respected in `opengraph-...
  • d5979ba [lts-maintenance][ci] Remove PR creation from deploy test workflow (#99093)
  • 812ae7d [lts-maintenance][test] Adjust deploy assertions for platform drift and the e...
  • 6936da5 v15.5.26
  • b49b6ca [maintenance-lts] Harden next/og SVG serialization
  • f391939 [15.5.x][test] Disable deploy tests triggering bot challenge (#98132)
  • 013ee1d v15.5.25
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.


@dependabot dependabot Bot added the Target: WebGUI Issues related to the web frontend. label Oct 14, 2026
Bumps [next](https://github.com/vercel/next.js) from 14.2.35 to 15.5.27.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v14.2.35...v15.5.27)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 15.5.27
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webgui-new/next-15.5.27 branch from d1f7d08 to ae5a2b2 Compare October 14, 2026 21:08
@mcserep mcserep self-assigned this Oct 14, 2026
@mcserep
mcserep self-requested a review October 14, 2026 21:10
@mcserep

mcserep commented Oct 14, 2026

Copy link
Copy Markdown
Collaborator

This is a major version bump for next, would require thorough testing. Skipping it for now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Target: WebGUI Issues related to the web frontend.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant