Skip to content

chore(deps): update dependency next to v14.2.32#2

Open
staging-whitesource-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/next-14.x-lockfile
Open

chore(deps): update dependency next to v14.2.32#2
staging-whitesource-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/next-14.x-lockfile

Conversation

@staging-whitesource-for-github-com
Copy link
Copy Markdown

@staging-whitesource-for-github-com staging-whitesource-for-github-com bot commented Dec 2, 2025

This PR contains the following updates:

Package Type Update Change
next (source) dependencies patch 14.2.1314.2.32

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability Reachability
Critical Critical 9.1 CVE-2025-29927
Medium Medium 6.5 CVE-2025-57822
Medium Medium 6.2 CVE-2025-57752
Medium Medium 5.3 CVE-2024-56332
Medium Medium 4.3 CVE-2025-55173

Release Notes

vercel/next.js (next)

v14.2.32

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • fix router handling when setting a location response header #​82588
Credits

Huge thanks to @​ztanner for helping!

v14.2.31

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • fix(next/image): improve and simplify detect-content-type (#​82179)
  • fix(next/image): fix image-optimizer.ts headers (#​82178)
Credits

Huge thanks to @​styfle and @​ztanner for helping!

v14.2.30

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
Credits

Huge thanks to @​ijjk and @​ztanner for helping!

v14.2.29

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • Only share incremental cache for edge in next start (#​79389)
Credits

Huge thanks to @​ijjk for helping!

v14.2.28

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • fix: node.js module import error when using middleware (#​77945)
Credits

Huge thanks to @​ztanner for helping!

v14.2.27

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • fix dynamic route interception not working when deployed with middleware (#​64923)
Credits

Huge thanks to @​ztanner for helping!

v14.2.26

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • Match subrequest handling for edge and node (#​77476)

v14.2.25

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.
This release contains a security patch for CVE-2025-29927.

Core Changes
  • Update middleware request header (#​77202)
Credits

Huge thanks to @​ijjk for helping!

v14.2.24

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
Credits

Huge thanks to @​ztanner for helping!

v14.2.23

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • backport: force module format for virtual client-proxy (#​74590)
  • Backport: Use provided waitUntil for pending revalidates (#​74573)
  • Feature: next/image: add support for images.qualities in next.config (#​74500)
Credits

Huge thanks to @​styfle, @​ijjk and @​lubieowoce for helping!

v14.2.22

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • Retry manifest file loading only in dev mode: #​73900
  • Ensure workers are cleaned up: #​71564
  • Use shared worker for lint & typecheck steps: #​74154
Credits

Huge thanks to @​unstubbable, @​ijjk, and @​ztanner for helping!

v14.2.21

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
Misc Changes
  • chore(docs): add missing search: '' on remotePatterns: #​73927
  • chore(docs): update version history of next/image: #​73926
Credits

Huge thanks to @​unstubbable, @​ztanner, and @​styfle for helping!

v14.2.20

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
Credits

Huge thanks to @​wyattjoh for helping!

v14.2.19

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • ensure worker exits bubble to parent process (#​73433)
  • Increase max cache tags to 128 (#​73125)
Misc Changes
  • Update max tag items limit in docs (#​73445)
Credits

Huge thanks to @​ztanner and @​ijjk for helping!

v14.2.18

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
Credits

Huge thanks to @​huozhi and @​ijjk for helping!

v14.2.17

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • Fix: revert the bad node binary handling (#​72356)
  • Ensure pages/500 handles cache-control as expected (#​72050) (#​72110)
  • fix unhandled runtime error from generateMetadata in parallel routes (#​72153)
Credits

Huge thanks to @​huozhi, @​ztanner, and @​ijjk for helping!

v14.2.16

Compare Source

v14.2.15

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • support breadcrumb style catch-all parallel routes #​65063
  • Provide non-dynamic segments to catch-all parallel routes #​65233
  • Fix client reference access causing metadata missing #​70732
  • feat(next/image): add support for decoding prop #​70298
  • feat(next/image): add images.localPatterns config #​70529
  • fix(next/image): handle undefined images.localPatterns config in images-manifest.json
  • fix: Do not omit alt on getImgProps return type, ImgProps #​70608
  • [i18n] Routing fix #​70761
Credits

Huge thanks to @​ztanner, @​agadzik, @​huozhi, @​styfle, @​icyJoseph and @​wyattjoh for helping!

v14.2.14

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
  • Fix: clone response in first handler to prevent race (#​70082) (#​70649)
  • Respect reexports from metadata API routes (#​70508) (#​70647)
  • Externalize node binary modules for app router (#​70646)
  • Fix revalidateTag() behaviour when invoked in server components (#​70446) (#​70642)
  • Fix prefetch bailout detection for nested loading segments (#​70618)
  • Add missing node modules to externals (#​70382)
  • Feature: next/image: add support for images.remotePatterns.search (#​70302)
Credits

Huge thanks to @​styfle, @​ztanner, @​ijjk, @​huozhi and @​wyattjoh for helping!


  • If you want to rebase/retry this PR, check this box

@staging-whitesource-for-github-com staging-whitesource-for-github-com bot added the security fix Security fix generated by Mend label Dec 2, 2025
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch 2 times, most recently from 2e2b029 to 7655891 Compare December 9, 2025 05:39
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch 4 times, most recently from aa9c07e to 663a9c0 Compare December 16, 2025 06:58
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch 2 times, most recently from b1e3773 to 26c51d3 Compare December 20, 2025 11:03
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch 4 times, most recently from 8d7a0fb to 538e160 Compare January 5, 2026 12:08
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch 2 times, most recently from d5dcf4a to 1f0e641 Compare January 11, 2026 03:20
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch 5 times, most recently from eb69f06 to 7008523 Compare January 23, 2026 06:32
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch 3 times, most recently from 6d3b07b to 702884e Compare February 2, 2026 06:44
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch 2 times, most recently from db52ae7 to 03a5d47 Compare February 6, 2026 07:27
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch 2 times, most recently from 9733e8e to 5815bdd Compare February 20, 2026 14:39
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch 3 times, most recently from 057ac9c to 8953e19 Compare February 23, 2026 07:25
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch 3 times, most recently from 8bf54de to 6a56ad9 Compare March 6, 2026 07:11
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch 4 times, most recently from 34029e8 to 5651cfa Compare March 17, 2026 09:54
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch 4 times, most recently from 8a69c3f to 7fc5eb7 Compare March 23, 2026 10:31
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch 5 times, most recently from 6574e3a to 52c5ae8 Compare April 4, 2026 05:36
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch from 52c5ae8 to 5358ddc Compare April 6, 2026 08:08
@staging-whitesource-for-github-com staging-whitesource-for-github-com bot force-pushed the whitesource-remediate/next-14.x-lockfile branch from 5358ddc to bff4ed6 Compare April 8, 2026 04:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants