From 0dc7d81da7959063cb62bb6144a3e04049a27237 Mon Sep 17 00:00:00 2001 From: Vercel Date: Wed, 10 Dec 2025 09:32:45 +0000 Subject: [PATCH] Update repository for React Flight RCE advisory Updated dependencies to fix Next.js CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- package.json | 2 +- pnpm-lock.yaml | 112 ++++++++++++++++++++++++------------------------- 2 files changed, 57 insertions(+), 57 deletions(-) diff --git a/package.json b/package.json index 7ee2294..ece02f7 100644 --- a/package.json +++ b/package.json @@ -46,7 +46,7 @@ "fast-deep-equal": "^3.1.3", "framer-motion": "^12.23.22", "lucide-react": "^0.545.0", - "next": "15.6.0-canary.52", + "next": "15.6.0-canary.58", "next-auth": "5.0.0-beta.29", "next-themes": "^0.4.6", "pino": "^10.0.0", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index d0464c1..c215957 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -25,7 +25,7 @@ importers: version: 2.0.60(react@19.2.0)(zod@4.1.12) '@arcjet/next': specifier: 1.0.0-beta.13 - version: 1.0.0-beta.13(next@15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)) + version: 1.0.0-beta.13(next@15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)) '@convex-dev/eslint-plugin': specifier: 0.0.1-alpha.4 version: 0.0.1-alpha.4(eslint@9.37.0(jiti@2.6.1))(typescript@5.9.3) @@ -61,10 +61,10 @@ importers: version: 0.13.8(typescript@5.9.3)(zod@4.1.12) '@vercel/analytics': specifier: ^1.5.0 - version: 1.5.0(next@15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react@19.2.0) + version: 1.5.0(next@15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react@19.2.0) '@vercel/speed-insights': specifier: ^1.2.0 - version: 1.2.0(next@15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react@19.2.0) + version: 1.2.0(next@15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react@19.2.0) '@wooorm/starry-night': specifier: ^3.8.0 version: 3.8.0 @@ -99,11 +99,11 @@ importers: specifier: ^0.545.0 version: 0.545.0(react@19.2.0) next: - specifier: 15.6.0-canary.52 - version: 15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0) + specifier: 15.6.0-canary.58 + version: 15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0) next-auth: specifier: 5.0.0-beta.29 - version: 5.0.0-beta.29(next@15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react@19.2.0) + version: 5.0.0-beta.29(next@15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react@19.2.0) next-themes: specifier: ^0.4.6 version: 0.4.6(react-dom@19.2.0(react@19.2.0))(react@19.2.0) @@ -191,7 +191,7 @@ importers: version: 3.6.2 react-scan: specifier: ^0.4.3 - version: 0.4.3(@types/react@19.2.2)(next@15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react-dom@19.2.0(react@19.2.0))(react@19.2.0) + version: 0.4.3(@types/react@19.2.2)(next@15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react-dom@19.2.0(react@19.2.0))(react@19.2.0) tailwindcss: specifier: ^4.1.14 version: 4.1.14 @@ -998,56 +998,56 @@ packages: '@napi-rs/wasm-runtime@0.2.12': resolution: {integrity: sha512-ZVWUcfwY4E/yPitQJl481FjFo3K22D6qF0DuFH6Y/nbnE11GY5uguDxZMGXPQ8WQ0128MXQD7TnfHyK4oWoIJQ==} - '@next/env@15.6.0-canary.52': - resolution: {integrity: sha512-AN9TmNjmRURTEDZttkMBps/hKyJJCLra/NO7BLR+WKTLUYy/A4TWK84/MK90hXMOPWzkxBmUaQbZvGLgoLVJNw==} + '@next/env@15.6.0-canary.58': + resolution: {integrity: sha512-JyYhiCaCYgLfs3a195cncgUfyATTvtIpK2L9wpka4JdJ/Cn58LxO2WRQysmWYXWjuCTgE9n4vjWDAJcWmRisiw==} '@next/eslint-plugin-next@15.6.0-canary.52': resolution: {integrity: sha512-5DuNbhTn3EGUVnNgbnxcEqWl/nsHQDVXcOVxuDDy4bnW9xLa9FzVUWkLsEb46GQ4GK4jUJi7x6QLAX8aawrrRw==} - '@next/swc-darwin-arm64@15.6.0-canary.52': - resolution: {integrity: sha512-h77DekKN0/DvJQ/0LxbFHnV0V90q3ETasXQBl7dOPmf8fWkIiNbJu7fyM6siipD0OmZNVcPTk8kL67L3KJOkjw==} + '@next/swc-darwin-arm64@15.6.0-canary.58': + resolution: {integrity: sha512-jGawwiKITJHOH8dSbTqfjVvCf+DesljZhtvh9LKCrO+1octLlGyDAbEQw5WEzrXCch5LWrdSqPyKft0/9LeniA==} engines: {node: '>= 10'} cpu: [arm64] os: [darwin] - '@next/swc-darwin-x64@15.6.0-canary.52': - resolution: {integrity: sha512-aHcLzD3gCZZDk7+N4SRym3V8O5BNCjvAyBaQw+iCZWkM6PdCLm6ipwqs7RBCYGNM2U73jZWYhPZb3rij7d8pZg==} + '@next/swc-darwin-x64@15.6.0-canary.58': + resolution: {integrity: sha512-iD15Eav7Y7lQOCFvsPf9NMwo3dFrHZMX4wghrEysLuwOEJC9zM0jOSb1hdSqZwf1Odn86CIiJUvXH1UcfAm6og==} engines: {node: '>= 10'} cpu: [x64] os: [darwin] - '@next/swc-linux-arm64-gnu@15.6.0-canary.52': - resolution: {integrity: sha512-UGr/BUOBEplTqAsG7x4R/T7lwJkRKBxBKEBZaMtBZjGDK6mGkjsA3GiKetv9iOtwnB+ezy/XvM8SkTwTD0PkDw==} + '@next/swc-linux-arm64-gnu@15.6.0-canary.58': + resolution: {integrity: sha512-b8ayBG/wrycIilOFP/zU6yPQI8UVMtrQfowNaoCvG7FIuu5Fpa7MwPEGWXPyvwn2qQM5fDSsVGQOrjQ6gWLTbA==} engines: {node: '>= 10'} cpu: [arm64] os: [linux] - '@next/swc-linux-arm64-musl@15.6.0-canary.52': - resolution: {integrity: sha512-M6knjMZkpbWUwwSlKLXt/Axi83lu+xOof7uvMTNKR4Zc5N37gbCj1ABs32U6ul5pR56SXBJZSbRupJoH0/WBog==} + '@next/swc-linux-arm64-musl@15.6.0-canary.58': + resolution: {integrity: sha512-KMYPUdBTAITdgxRNjMKdG85bHsn3wu0KWPV2nftoov2/dVs5eFJ47w+m4upPdTgBXRAHY50OvS/nzf5mN/TXeQ==} engines: {node: '>= 10'} cpu: [arm64] os: [linux] - '@next/swc-linux-x64-gnu@15.6.0-canary.52': - resolution: {integrity: sha512-580h/SsZusVvx6ptirLZTZ8ODekJKEYgfzI9FWMzc/1x3QUUVAIw1HGNlt2zC3ipPnbIEWUrTWljMCFMuROG+A==} + '@next/swc-linux-x64-gnu@15.6.0-canary.58': + resolution: {integrity: sha512-myknT/if7wuwss0B/1Le7ymlN0Zr/DsfGji8b+XcqeFhoy1GxQerfTlrsblZTB6EIPIex1QPRUbpIcy+N9Qfpw==} engines: {node: '>= 10'} cpu: [x64] os: [linux] - '@next/swc-linux-x64-musl@15.6.0-canary.52': - resolution: {integrity: sha512-ECT93SQ1N9jaA7AbvPtZ01vssIBGZ7t05jDrr+8wDUlmTrW8vQfA5S07UITDEHS0MZADeAIvUhh5Bazw7ji2nw==} + '@next/swc-linux-x64-musl@15.6.0-canary.58': + resolution: {integrity: sha512-3A1YLtmuot0pnZqDHV2iAfUrvQS0zp7xXUlqNb8flAJAu1Civ+2qt94l0kTfUjWHtFFUENyt2yEcXEqxuxEJfg==} engines: {node: '>= 10'} cpu: [x64] os: [linux] - '@next/swc-win32-arm64-msvc@15.6.0-canary.52': - resolution: {integrity: sha512-Li+FxE5t7RYG0EW1Xbvbv094dCslvEWLz5VP7D1dVfbOmYBv/nJHGaR8LQ8/OntbEalmLVsHnHGFXTFQ4qtmbQ==} + '@next/swc-win32-arm64-msvc@15.6.0-canary.58': + resolution: {integrity: sha512-3hkMBi/Zbatqi9vwnh1zuOWQerS4CtUptn9cj4NRtVAJurzhfQBwz8RJIq/5f85XDkq0LxDrhyABZ+6RU7Un7Q==} engines: {node: '>= 10'} cpu: [arm64] os: [win32] - '@next/swc-win32-x64-msvc@15.6.0-canary.52': - resolution: {integrity: sha512-8KQj5h3qDUyIgWJrpg5QADpFaVirhb/blxNjXGKpp43ehpLALo3bWwwZk3x21L8S+YSjMTvqLKkjfocALwIuSw==} + '@next/swc-win32-x64-msvc@15.6.0-canary.58': + resolution: {integrity: sha512-CFB6BzqgYJ7yJvoji0KD5nWf88JN5/iliiLn/kfzxUMvfaKmoYLrGZwRuePrAwLdBpczEsgcmuER6YuT9/pZLw==} engines: {node: '>= 10'} cpu: [x64] os: [win32] @@ -3894,8 +3894,8 @@ packages: react: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc react-dom: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc - next@15.6.0-canary.52: - resolution: {integrity: sha512-ZxI7fZwRyDv9O/078Gfz+8KevTuFild6TIjmrViMfdKKsZC4xviQGFzh0Ts3OLGaTvuUsVupc1SoEuhUHyd8gg==} + next@15.6.0-canary.58: + resolution: {integrity: sha512-crPQo+AxBCmmBFMpDLbFg1uH+ArvrPNkvsviM60wrlzmhNuQyIOQ0tHL7Y10BVlxqtM7esMDQnepKT1XJBqYBQ==} engines: {node: '>=20.9.0'} hasBin: true peerDependencies: @@ -4850,7 +4850,7 @@ snapshots: dependencies: '@arcjet/sprintf': 1.0.0-beta.13 - '@arcjet/next@1.0.0-beta.13(next@15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))': + '@arcjet/next@1.0.0-beta.13(next@15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))': dependencies: '@arcjet/env': 1.0.0-beta.13 '@arcjet/headers': 1.0.0-beta.13 @@ -4859,7 +4859,7 @@ snapshots: '@arcjet/protocol': 1.0.0-beta.13 '@arcjet/transport': 1.0.0-beta.13 arcjet: 1.0.0-beta.13 - next: 15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0) + next: 15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0) '@arcjet/protocol@1.0.0-beta.13': dependencies: @@ -5433,34 +5433,34 @@ snapshots: '@tybys/wasm-util': 0.10.1 optional: true - '@next/env@15.6.0-canary.52': {} + '@next/env@15.6.0-canary.58': {} '@next/eslint-plugin-next@15.6.0-canary.52': dependencies: fast-glob: 3.3.1 - '@next/swc-darwin-arm64@15.6.0-canary.52': + '@next/swc-darwin-arm64@15.6.0-canary.58': optional: true - '@next/swc-darwin-x64@15.6.0-canary.52': + '@next/swc-darwin-x64@15.6.0-canary.58': optional: true - '@next/swc-linux-arm64-gnu@15.6.0-canary.52': + '@next/swc-linux-arm64-gnu@15.6.0-canary.58': optional: true - '@next/swc-linux-arm64-musl@15.6.0-canary.52': + '@next/swc-linux-arm64-musl@15.6.0-canary.58': optional: true - '@next/swc-linux-x64-gnu@15.6.0-canary.52': + '@next/swc-linux-x64-gnu@15.6.0-canary.58': optional: true - '@next/swc-linux-x64-musl@15.6.0-canary.52': + '@next/swc-linux-x64-musl@15.6.0-canary.58': optional: true - '@next/swc-win32-arm64-msvc@15.6.0-canary.52': + '@next/swc-win32-arm64-msvc@15.6.0-canary.58': optional: true - '@next/swc-win32-x64-msvc@15.6.0-canary.52': + '@next/swc-win32-x64-msvc@15.6.0-canary.58': optional: true '@nodelib/fs.scandir@2.1.5': @@ -6762,16 +6762,16 @@ snapshots: '@unrs/resolver-binding-win32-x64-msvc@1.11.1': optional: true - '@vercel/analytics@1.5.0(next@15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react@19.2.0)': + '@vercel/analytics@1.5.0(next@15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react@19.2.0)': optionalDependencies: - next: 15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0) + next: 15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0) react: 19.2.0 '@vercel/oidc@3.0.1': {} - '@vercel/speed-insights@1.2.0(next@15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react@19.2.0)': + '@vercel/speed-insights@1.2.0(next@15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react@19.2.0)': optionalDependencies: - next: 15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0) + next: 15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0) react: 19.2.0 '@wooorm/starry-night@3.8.0': @@ -8787,10 +8787,10 @@ snapshots: natural-compare@1.4.0: {} - next-auth@5.0.0-beta.29(next@15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react@19.2.0): + next-auth@5.0.0-beta.29(next@15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react@19.2.0): dependencies: '@auth/core': 0.40.0 - next: 15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0) + next: 15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0) react: 19.2.0 next-themes@0.4.6(react-dom@19.2.0(react@19.2.0))(react@19.2.0): @@ -8798,9 +8798,9 @@ snapshots: react: 19.2.0 react-dom: 19.2.0(react@19.2.0) - next@15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0): + next@15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0): dependencies: - '@next/env': 15.6.0-canary.52 + '@next/env': 15.6.0-canary.58 '@swc/helpers': 0.5.15 caniuse-lite: 1.0.30001748 postcss: 8.4.31 @@ -8808,14 +8808,14 @@ snapshots: react-dom: 19.2.0(react@19.2.0) styled-jsx: 5.1.6(@babel/core@7.28.4)(react@19.2.0) optionalDependencies: - '@next/swc-darwin-arm64': 15.6.0-canary.52 - '@next/swc-darwin-x64': 15.6.0-canary.52 - '@next/swc-linux-arm64-gnu': 15.6.0-canary.52 - '@next/swc-linux-arm64-musl': 15.6.0-canary.52 - '@next/swc-linux-x64-gnu': 15.6.0-canary.52 - '@next/swc-linux-x64-musl': 15.6.0-canary.52 - '@next/swc-win32-arm64-msvc': 15.6.0-canary.52 - '@next/swc-win32-x64-msvc': 15.6.0-canary.52 + '@next/swc-darwin-arm64': 15.6.0-canary.58 + '@next/swc-darwin-x64': 15.6.0-canary.58 + '@next/swc-linux-arm64-gnu': 15.6.0-canary.58 + '@next/swc-linux-arm64-musl': 15.6.0-canary.58 + '@next/swc-linux-x64-gnu': 15.6.0-canary.58 + '@next/swc-linux-x64-musl': 15.6.0-canary.58 + '@next/swc-win32-arm64-msvc': 15.6.0-canary.58 + '@next/swc-win32-x64-msvc': 15.6.0-canary.58 '@opentelemetry/api': 1.9.0 babel-plugin-react-compiler: 1.0.0 sharp: 0.34.4 @@ -9163,7 +9163,7 @@ snapshots: optionalDependencies: '@types/react': 19.2.2 - react-scan@0.4.3(@types/react@19.2.2)(next@15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react-dom@19.2.0(react@19.2.0))(react@19.2.0): + react-scan@0.4.3(@types/react@19.2.2)(next@15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react-dom@19.2.0(react@19.2.0))(react@19.2.0): dependencies: '@babel/core': 7.28.4 '@babel/generator': 7.28.3 @@ -9185,7 +9185,7 @@ snapshots: react-dom: 19.2.0(react@19.2.0) tsx: 4.20.6 optionalDependencies: - next: 15.6.0-canary.52(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0) + next: 15.6.0-canary.58(@babel/core@7.28.4)(@opentelemetry/api@1.9.0)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0) unplugin: 2.1.0 transitivePeerDependencies: - '@types/react'