Uh oh!
There was an error while loading. Please reload this page.
fix(deps): update nextjs monorepo (16.3.0 → 16.3.1) - #767
Conversation
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
Uh oh!
There was an error while loading. Please reload this page.
1a53000 to
2f8ca61CompareThere was a problem hiding this comment.
AI Automated Review
Full PR review.
Analysis engine: dsv4f@https://litellm.jory.dev/v1 (openai) — primary route
Recommendation: Approve. This Renovate PR bumps the Next.js monorepo (next, eslint-config-next, @next/env, @next/eslint-plugin-next, the @next/swc-* platform binaries, and @swc/helpers) from 16.3.0 to 16.3.1, entirely within package-lock.json. No source, manifest, or Dockerfile changes. CI is green on the head commit, and the upstream 16.3.1 release is a patch-level set of backported fixes with no API or engine changes.
Change-by-change findings
package-lock.json—next16.3.0 → 16.3.1 together with its matched dependencies:@next/env16.3.1,@next/eslint-plugin-next16.3.1,eslint-config-next16.3.1, all eight@next/swc-*optional platform binaries at 16.3.1, and@swc/helpers0.5.15 → 0.5.23 (bumped upstream in this same release). Every package moves in lockstep from a single published release, so there is no version skew betweennextand its native binaries on any target platform (linux musl/gnu, darwin, win32).- The PR title names only
eslint-config-next, but the diff also updates the runtimenextpackage and its dependencies; this is consistent with Renovate's nextjs-monorepo grouping and the lockfile is internally coherent. - Release evidence (Next.js v16.3.1, published 2026-08-13): all 22 commits are backported fixes on the 16.3 branch — Turbopack runtime/HMR and module-registration fixes, a
next/imageresponse-preservation fix, a styled-jsx Pages Router SSR fix, cache-tag/revalidation andunstable_cachenaming fixes, a dev-validation worker fix, and a revert of an i18n localization change for dynamic Pages API routes. No public API changes, no peerDependency changes, and no breaking changes are listed; the installed lockfile metadata retainsengines.node >= 20.9.0unchanged. - The i18n revert applies to dynamic Pages Router API routes, while Dispatch uses the App Router (per AGENTS.md tech stack), so this revert is not expected to affect this application.
- Host-platform coupling check: the Dockerfile pins the runtime to
node:24-bookworm-slimandpackage.jsondeclaresengines.node >= 24; the installednext@16.3.1declaresnode >= 20.9.0, so Node 24 is within the supported range. The lockfile engines field for the exact installed version is the binding constraint and it is satisfied. - Override coherence:
next@16.3.1still carriespostcss 8.5.23and optionalsharp ^0.35.3, so the documented postcss/sharp override rationale inpackage.jsonremains accurate after this bump.
Standards Compliance
The change conforms to AGENTS.md: lockfile-only dependency update with no environment-variable, Prisma-schema, or Docker-base-image changes; the Docker npm ci stages consume the updated lockfile as-is; lint and typecheck gates still block CI and both passed.
Tool Harness Findings
CI on head commit 2f8ca61 reached a terminal success state for all checks: Build, Docker Build, Lint, Tests, Typecheck, and npm audit — all success. This directly satisfies the must-check "run full test suite after upgrade."
Unknowns or Needs Verification
- The "check for breaking API changes" must-check is satisfied from the component's own release evidence: a patch release with backported fixes only, no API or engine changes. A separate Node.js compatibility-matrix fetch could not be completed within the tool budget, but the installed lockfile's
node >= 20.9.0engine declaration is the authoritative floor and Node 24 satisfies it. - No other unknowns: no image digest changes in the diff, no linked issues to compare against, and no evidence-provider findings were present in the corpus.
Sources
- Next.js v16.3.1 release notes: https://github.com/vercel/next.js/releases/tag/v16.3.1
- GitHub compare metadata for v16.3.0...v16.3.1 (22 commits, all backports)
- Repository files read:
Dockerfile(node:24-bookworm-slim),package.json(engines >=24, override rationale), and the updatedpackage-lock.jsonentries.
This PR contains the following updates:
16.3.0→16.3.116.3.0→16.3.1Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
vercel/next.js (eslint-config-next)
v16.3.1Compare Source
What's Changed
turbopack_ecmascriptandturbopack_wasm's embeded FS tointernal_assets_conditionsby @lukesandberg in #96655headers()view of the incoming request by @unstubbable in #97311'use cache'files by @unstubbable in #97312unstable_cacheby @unstubbable in #97313Full Changelog: vercel/next.js@v16.3.0...v16.3.1
Configuration
📅 Schedule: (in timezone America/Edmonton)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate CLI.