close
Skip to content

⬆️ Bump the npm_and_yarn group across 2 directories with 2 updates - #44

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-c8f7fc5f7d
Open

⬆️ Bump the npm_and_yarn group across 2 directories with 2 updates#44
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-c8f7fc5f7d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 1 update in the / directory: next.
Bumps the npm_and_yarn group with 1 update in the /frontend directory: next.

Updates next from 15.5.21 to 15.5.24

Release notes

Sourced from next's releases.

v15.5.24

This release contains security fixes for the following advisories:

Critical:

v15.5.23

What's Changed

Full Changelog: vercel/next.js@v15.5.22...v15.5.23

v15.5.22

What's Changed

Full Changelog: vercel/next.js@v15.5.21...v15.5.22

Commits
  • b6c45b4 v15.5.24
  • b0f3460 [15.5.x] Fix ISR misses with backslashes in segments when deployed on Windows
  • 409772e [15.5.x] [next/image]: disable avif image optimization
  • 9c44b88 [15.x] support sharp 0.34 and 0.35
  • 144fa5d [15.5.x] Remove generated error codes (#97783)
  • ddd94f0 [15.5.x] Authenticate Turborepo remote caching with OIDC instead of a static ...
  • 1da7a0a [15.5] [ci] Use OIDC tokens to read private preview builds (#97259)
  • 70ab0fe [15.x] Default deploy e2e tests to the repo next version (#96899)
  • e57d564 v15.5.23
  • c4914aa [15.x] Port ReplyServer traversal guards to FlightClient (#96405)
  • Additional commits viewable in compare view

Updates sharp from 0.35.3 to 0.35.4

Release notes

Sourced from sharp's releases.

v0.35.4

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

v0.35.4-rc.0

Commits
  • 7f1a0a2 Release v0.35.4
  • f927818 Upgrade to sharp-libvips v1.3.3
  • e802092 Prerelease v0.35.4-rc.0
  • e13eb2f CI: Fix wasm32 build (#4589)
  • a82a0b3 Upgrade to libvips v8.18.6
  • 8044fe4 Bound resize dimensions to coordinate limit
  • 147f859 Docs: changelog entries for #4578 #4584
  • ee5bfb8 Tests: use yauzl directly rather than via extract-zip wrapper
  • 7a77889 Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)
  • ea5bef2 Improve support for input Streams finishing before output is requested (#4584)
  • Additional commits viewable in compare view

Updates next from 15.5.21 to 15.5.24

Release notes

Sourced from next's releases.

v15.5.24

This release contains security fixes for the following advisories:

Critical:

v15.5.23

What's Changed

Full Changelog: vercel/next.js@v15.5.22...v15.5.23

v15.5.22

What's Changed

Full Changelog: vercel/next.js@v15.5.21...v15.5.22

Commits
  • b6c45b4 v15.5.24
  • b0f3460 [15.5.x] Fix ISR misses with backslashes in segments when deployed on Windows
  • 409772e [15.5.x] [next/image]: disable avif image optimization
  • 9c44b88 [15.x] support sharp 0.34 and 0.35
  • 144fa5d [15.5.x] Remove generated error codes (#97783)
  • ddd94f0 [15.5.x] Authenticate Turborepo remote caching with OIDC instead of a static ...
  • 1da7a0a [15.5] [ci] Use OIDC tokens to read private preview builds (#97259)
  • 70ab0fe [15.x] Default deploy e2e tests to the repo next version (#96899)
  • e57d564 v15.5.23
  • c4914aa [15.x] Port ReplyServer traversal guards to FlightClient (#96405)
  • Additional commits viewable in compare view

Updates sharp from 0.35.3 to 0.35.4

Release notes

Sourced from sharp's releases.

v0.35.4

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

v0.35.4-rc.0

Commits
  • 7f1a0a2 Release v0.35.4
  • f927818 Upgrade to sharp-libvips v1.3.3
  • e802092 Prerelease v0.35.4-rc.0
  • e13eb2f CI: Fix wasm32 build (#4589)
  • a82a0b3 Upgrade to libvips v8.18.6
  • 8044fe4 Bound resize dimensions to coordinate limit
  • 147f859 Docs: changelog entries for #4578 #4584
  • ee5bfb8 Tests: use yauzl directly rather than via extract-zip wrapper
  • 7a77889 Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)
  • ea5bef2 Improve support for input Streams finishing before output is requested (#4584)
  • Additional commits viewable in compare view

Updates next from 15.5.21 to 15.5.24

Release notes

Sourced from next's releases.

v15.5.24

This release contains security fixes for the following advisories:

Critical:

v15.5.23

What's Changed

Full Changelog: vercel/next.js@v15.5.22...v15.5.23

v15.5.22

What's Changed

Full Changelog: vercel/next.js@v15.5.21...v15.5.22

Commits
  • b6c45b4 v15.5.24
  • b0f3460 [15.5.x] Fix ISR misses with backslashes in segments when deployed on Windows
  • 409772e [15.5.x] [next/image]: disable avif image optimization
  • 9c44b88 [15.x] support sharp 0.34 and 0.35
  • 144fa5d [15.5.x] Remove generated error codes (#97783)
  • ddd94f0 [15.5.x] Authenticate Turborepo remote caching with OIDC instead of a static ...
  • 1da7a0a [15.5] [ci] Use OIDC tokens to read private preview builds (#97259)
  • 70ab0fe [15.x] Default deploy e2e tests to the repo next version (#96899)
  • e57d564 v15.5.23
  • c4914aa [15.x] Port ReplyServer traversal guards to FlightClient (#96405)
  • Additional commits viewable in compare view

Updates next from 15.5.21 to 15.5.24

Release notes

Sourced from next's releases.

v15.5.24

This release contains security fixes for the following advisories:

Critical:

v15.5.23

What's Changed

Full Changelog: vercel/next.js@v15.5.22...v15.5.23

v15.5.22

What's Changed

Full Changelog: vercel/next.js@v15.5.21...v15.5.22

Commits
  • b6c45b4 v15.5.24
  • b0f3460 [15.5.x] Fix ISR misses with backslashes in segments when deployed on Windows
  • 409772e [15.5.x] [next/image]: disable avif image optimization
  • 9c44b88 [15.x] support sharp 0.34 and 0.35
  • 144fa5d [15.5.x] Remove generated error codes (#97783)
  • ddd94f0 [15.5.x] Authenticate Turborepo remote caching with OIDC instead of a static ...
  • 1da7a0a [15.5] [ci] Use OIDC tokens to read private preview builds (#97259)
  • 70ab0fe [15.x] Default deploy e2e tests to the repo next version (#96899)
  • e57d564 v15.5.23
  • c4914aa [15.x] Port ReplyServer traversal guards to FlightClient (#96405)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 10, 2026
Bumps the npm_and_yarn group with 1 update in the / directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /frontend directory: [next](https://github.com/vercel/next.js).


Updates `next` from 15.5.21 to 15.5.24
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.21...v15.5.24)

Updates `sharp` from 0.35.3 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.3...v0.35.4)

Updates `next` from 15.5.21 to 15.5.24
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.21...v15.5.24)

Updates `sharp` from 0.35.3 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.3...v0.35.4)

Updates `next` from 15.5.21 to 15.5.24
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.21...v15.5.24)

Updates `next` from 15.5.21 to 15.5.24
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.21...v15.5.24)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 15.5.24
  dependency-type: direct:production
- dependency-name: next
  dependency-version: 15.5.24
  dependency-type: direct:production
- dependency-name: sharp
  dependency-version: 0.35.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-c8f7fc5f7d branch from 2004a90 to 3b75e98 Compare September 10, 2026 19:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants