Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Aug 30, 2025

Bumps next from 15.2.4 to 15.4.7.

Release notes

Sourced from next's releases.

v15.4.7

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • fix router handling when setting a location response header #82588

Credits

Huge thanks to @​ztanner for helping!

v15.4.6

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • fix: _error page's req.url can be overwritten to dynamic param on minimal mode (#82347)
  • fix: add ?dpl to fonts in /_next/static/media (#82384)

Credits

Huge thanks to @​devjiwonchoi, @​ijjk, and @​styfle for helping!

v15.4.5

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Fix API stripping JSON incorrectly (#82062)
  • Fix i18n fallback: false collision (#82158)
  • Revert "Fix tracing of server actions imported by client components (#82167)
  • Ensure setAssetPrefix updates config instance (#82165)
  • Turbopack: update mimalloc (#82166)
  • fix(next/image): fix image-optimizer.ts headers (#82175)
  • fix(next/image): improve and simplify detect-content-type (#82174)

Credits

Huge thanks to @​ijjk, @​sokra, and @​styfle for helping!

v15.4.4

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Fix dynamicParams false layout case in dev (#82026)
  • Turbopack: fix scope hoisting variable renaming bug (#81640)
  • Upgrade to swc v33 (#81750)
  • Revert "[metadata] use https protocol for schema urls" (#81934)

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

jhf added 30 commits August 22, 2025 15:04
By using a more clever way to detect and remove temporary tables
This commit refactors the import.process_legal_unit procedure to
correctly handle the replace action for complex historical imports,
resolving a
series of test regressions.

The previous batch-oriented logic for truncating and deleting child
records was flawed, leading to exclusion and check constraint
violations. The
core issue was that it did not correctly handle multiple replace
operations affecting the same historical records within a single batch.

The new implementation fixes this by:

 • Processing each replace operation sequentially in a FOR loop, ordered
chronologically. This correctly simulates how historical records
supersede
   one another.
 • Applying a simpler DELETE then UPDATE (truncate) logic for child
records (activity, location, etc.) within the loop.

Additionally, this commit includes several cleanups to the migration
file:

 • Removed explicit BEGIN/COMMIT statements to make the script
compatible with both the migration runner and direct psql execution.
 • Updated the procedure signature to the modern, preferred style.
 • Removed an unused tax_ident column from a temporary table to improve
clarity.
By showing the jobs while they are ongoing.
And gitignore prevents it - must remember not to commit hten.
As well as have a place to put temporary files for the AI.
jhf and others added 24 commits August 25, 2025 18:14
By using smaller batch sizes, by respecting the selected unit_id's and
unit_type and by using MERGE for efficiency.
Minore improvements for clarity.
This commit introduces a major refactoring of the application's
authentication, state management, and redirect logic to improve
correctness, consistency, and the user
experience.

Key Improvements:

 • Centralized Post-Login Redirect Logic:
 • Centralized Post-Login Redirect Logic:
    • The logic is now centralized in LoginClientBoundary, which waits
for all setup checks to complete before triggering a single, direct
redirect.
    • A "Finalizing login..." state is now shown for better UX.
    • A new setupRedirectCheckAtom provides a single source of truth for
determining if setup is required.
 • Standardized Atom Naming Convention:
    • A clear and consistent naming pattern for async state atoms has
been adopted: <domain>PromiseAtom -> <domain>UnstableDetailsAtom ->
<domain>Atom.
    • This makes the data flow self-documenting and improves long-term
maintainability.
 • Robust State Stabilization ("Anti-Flap"):
    • The mechanism that prevents UI flicker during background token
refreshes is now more robust and centralized within the new
<domain>UnstableDetailsAtom pattern.
    • Fixes a critical bug where the token refresh call would fail due
to an expired Authorization header. The refresh now correctly uses fetch
to rely solely on the
      refresh token cookie.
 • UI and Debugging Enhancements:
    • The Navbar now correctly shows the "Import" link even when no
statistical units exist.
    • The LogoutForm provides feedback with loading and error states.
    • The StateInspector has been updated with the new naming
conventions and now includes the selected Time Context for easier
debugging.
 • New Documentation:
    • Adds app/doc/authentication-state.md, a comprehensive document
detailing the entire authentication, state, and redirect flow.
Bumps [next](https://github.com/vercel/next.js) from 15.2.4 to 15.4.7.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.2.4...v15.4.7)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 15.4.7
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 30, 2025
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Dec 3, 2025

A newer version of next exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant