Bump the npm_and_yarn group across 1 directory with 2 updates #17

Merged

dependabot[bot] merged 1 commit from dependabot/npm_and_yarn/npm_and_yarn-399532e49b into master

2026-03-20 11:21:28 +01:00

dependabot[bot] commented

2026-03-20 11:20:40 +01:00

(Migrated from github.com)

Bumps the npm_and_yarn group with 2 updates in the / directory: next and flatted.

Updates next from 16.1.5 to 16.2.0

Release notes

Sourced from next's releases.

v16.2.0

[!TIP]
Check out our Next v16.2 Blog Post to learn more about this release.

Core Changes

Upgrade React from f93b9fd4-20251217 to 65eec428-20251218: #87323

Turbopack: Create junction points instead of symlinks on Windows: #87606

Turbopack: Symlink handling follow-up: #87637

Add experimental routing package for resolving adapter routes: #86404

Ensure outputs are correct with cache components in deployment adapters: #87018

Move off of deprecated url.parse: #87257

[strict-route-types] Add experimental.strictRouteTypes config: #87378

misc: fix type check log for CI envs: #87838

fix: revalidateTag with profile should not trigger client cache invalidation: #88069

chore: warn when running tests against stale build: #88001

Redesign default error pages with cleaner, more user-friendly UI: #87988

dx: avoid next-env.d.ts change in dev: #88103

prevent browser cache from using stale RSC responses from previous builds: #86554

[strict-route-types] Typecheck App Router page props: #87386

[strict-route-types] Enforce common React Component return types in App Router: #87389

[strict-route-types] Switch to satisfies when validating page and route modules: #87398

[strict-route-types] Don't reject number in config.api.bodyParser.sizeLimit when validating route: #87633

Revert "dx: avoid next-env.d.ts change in dev": #88153

[strict-route-types] Typecheck pages router routes in absence of App Router: #87628

[strict-route-types] Ensure cache profiles and routes are type-checked even if .next is excluded: #87768

add compilation error for taint when not enabled: #88173

feat(next/image)!: add images.maximumResponseBody config: #88183

Add maximum size limit for postponed body parsing: #88175

metadata: use fixed segment in dynamic routes with static metadata files: #88113

feat: add --experimental-cpu-prof flag for dev, build, and start: #87946

Add experimental option to use no-cache instead of no-store in dev: #88182

fix overlay frames cannot be opened sometimes: #88210

Handle pnpm-workspace.yaml while searching for monorepo root: #74818

Add more debug logs to 'use cache' wrapper: #88219

Omit unused arguments from 'use cache' function calls: #86920

Only log pending revalidates... debug log if applicable: #88221

fix(next/image): bump sharp@0.34.5: #88238

Disallow javascript urls in router methods and redirects: #88185

Fix relative same host redirects in node middleware: #88253

Remove loadConfig from main development process, pass value from child process: #88230

Update deploy adapters outputs and handler interfaces for node and edge: #88247

Move Ready in time before handler initialization: #88235

next/image: support custom cache handlers: #88248

feat: add Claude Code plugin marketplace with Cache Components skill: #87993

refactor: consolidate PPR into cacheComponents architecture: #88243

Turbopack: include fewer traced files for standalone: #88322

feat(turbopack): add resolve plugin condition variant of Always and Never: #88190

perf: use length = 0 to clear the logging array: #88244

Time logs: Show full millisecond instead of 1 decimal: #88313

... (truncated)

Commits

c5c94df v16.2.0
649d302 Unflake router events deploy test (#91589)
bcd9c19 docs: Clarify ignoreBuildErrors behavior (#91367)
3683192 v16.2.0-canary.104
b61823d SRI turbopack documentation (#90477)
0ca967b Add group depth tracking to instant validation boundary discovery (#91208)
a41bef9 improve allowedDevOrigins error (#91521)
75c51c6 Turbopack: Use debug = "line-tables-only" for dev builds (#91539)
39e705c Turbopack: Merge release-with-assertions-no-lto profile into release-with-ass...
4de2201 [turbopack] Share scratch buffer across shards using thread local (#90167)
Additional commits viewable in compare view

Updates flatted from 3.3.3 to 3.4.2

Commits

3bf0909 3.4.2
885ddcc fix CWE-1321
0bdba70 added flatted-view to the benchmark
2a02dce 3.4.1
fba4e8f Merge pull request #89 from WebReflection/python-fix
5fe8648 added "when in Rome" also a test for PHP
53517ad some minor improvement
b3e2a0c Fixing recursion issue in Python too
c4b46db Add SECURITY.md for security policy and reporting
f86d071 Create dependabot.yml for version updates
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 2 updates in the / directory: [next](https://github.com/vercel/next.js) and [flatted](https://github.com/WebReflection/flatted). Updates `next` from 16.1.5 to 16.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vercel/next.js/releases">next's releases</a>.</em></p> <blockquote> <h2>v16.2.0</h2> <blockquote> <p>[!TIP]<br /> <strong>Check out our Next v16.2 <a href="https://nextjs.org/blog/next-16-2">Blog Post</a> to learn more about this release.</strong></p> </blockquote> <h3>Core Changes</h3> <ul> <li>Upgrade React from <code>f93b9fd4-20251217</code> to <code>65eec428-20251218</code>: <a href="https://redirect.github.com/vercel/next.js/issues/87323">#87323</a></li> <li>Turbopack: Create junction points instead of symlinks on Windows: <a href="https://redirect.github.com/vercel/next.js/issues/87606">#87606</a></li> <li>Turbopack: Symlink handling follow-up: <a href="https://redirect.github.com/vercel/next.js/issues/87637">#87637</a></li> <li>Add experimental routing package for resolving adapter routes: <a href="https://redirect.github.com/vercel/next.js/issues/86404">#86404</a></li> <li>Ensure outputs are correct with cache components in deployment adapters: <a href="https://redirect.github.com/vercel/next.js/issues/87018">#87018</a></li> <li>Move off of deprecated url.parse: <a href="https://redirect.github.com/vercel/next.js/issues/87257">#87257</a></li> <li>[strict-route-types] Add <code>experimental.strictRouteTypes</code> config: <a href="https://redirect.github.com/vercel/next.js/issues/87378">#87378</a></li> <li>misc: fix type check log for CI envs: <a href="https://redirect.github.com/vercel/next.js/issues/87838">#87838</a></li> <li>fix: revalidateTag with profile should not trigger client cache invalidation: <a href="https://redirect.github.com/vercel/next.js/issues/88069">#88069</a></li> <li>chore: warn when running tests against stale build: <a href="https://redirect.github.com/vercel/next.js/issues/88001">#88001</a></li> <li>Redesign default error pages with cleaner, more user-friendly UI: <a href="https://redirect.github.com/vercel/next.js/issues/87988">#87988</a></li> <li>dx: avoid next-env.d.ts change in dev: <a href="https://redirect.github.com/vercel/next.js/issues/88103">#88103</a></li> <li>prevent browser cache from using stale RSC responses from previous builds: <a href="https://redirect.github.com/vercel/next.js/issues/86554">#86554</a></li> <li>[strict-route-types] Typecheck App Router page props: <a href="https://redirect.github.com/vercel/next.js/issues/87386">#87386</a></li> <li>[strict-route-types] Enforce common React Component return types in App Router: <a href="https://redirect.github.com/vercel/next.js/issues/87389">#87389</a></li> <li>[strict-route-types] Switch to <code>satisfies</code> when validating page and route modules: <a href="https://redirect.github.com/vercel/next.js/issues/87398">#87398</a></li> <li>[strict-route-types] Don't reject <code>number</code> in <code>config.api.bodyParser.sizeLimit</code> when validating route: <a href="https://redirect.github.com/vercel/next.js/issues/87633">#87633</a></li> <li>Revert "dx: avoid next-env.d.ts change in dev": <a href="https://redirect.github.com/vercel/next.js/issues/88153">#88153</a></li> <li>[strict-route-types] Typecheck pages router routes in absence of App Router: <a href="https://redirect.github.com/vercel/next.js/issues/87628">#87628</a></li> <li>[strict-route-types] Ensure cache profiles and routes are type-checked even if .next is excluded: <a href="https://redirect.github.com/vercel/next.js/issues/87768">#87768</a></li> <li>add compilation error for taint when not enabled: <a href="https://redirect.github.com/vercel/next.js/issues/88173">#88173</a></li> <li>feat(next/image)!: add <code>images.maximumResponseBody</code> config: <a href="https://redirect.github.com/vercel/next.js/issues/88183">#88183</a></li> <li>Add maximum size limit for postponed body parsing: <a href="https://redirect.github.com/vercel/next.js/issues/88175">#88175</a></li> <li>metadata: use fixed segment in dynamic routes with static metadata files: <a href="https://redirect.github.com/vercel/next.js/issues/88113">#88113</a></li> <li>feat: add --experimental-cpu-prof flag for dev, build, and start: <a href="https://redirect.github.com/vercel/next.js/issues/87946">#87946</a></li> <li>Add experimental option to use no-cache instead of no-store in dev: <a href="https://redirect.github.com/vercel/next.js/issues/88182">#88182</a></li> <li>fix overlay frames cannot be opened sometimes: <a href="https://redirect.github.com/vercel/next.js/issues/88210">#88210</a></li> <li>Handle pnpm-workspace.yaml while searching for monorepo root: <a href="https://redirect.github.com/vercel/next.js/issues/74818">#74818</a></li> <li>Add more debug logs to <code>'use cache'</code> wrapper: <a href="https://redirect.github.com/vercel/next.js/issues/88219">#88219</a></li> <li>Omit unused arguments from <code>'use cache'</code> function calls: <a href="https://redirect.github.com/vercel/next.js/issues/86920">#86920</a></li> <li>Only log <code>pending revalidates...</code> debug log if applicable: <a href="https://redirect.github.com/vercel/next.js/issues/88221">#88221</a></li> <li>fix(next/image): bump sharp@0.34.5: <a href="https://redirect.github.com/vercel/next.js/issues/88238">#88238</a></li> <li>Disallow javascript urls in router methods and redirects: <a href="https://redirect.github.com/vercel/next.js/issues/88185">#88185</a></li> <li>Fix relative same host redirects in node middleware: <a href="https://redirect.github.com/vercel/next.js/issues/88253">#88253</a></li> <li>Remove loadConfig from main development process, pass value from child process: <a href="https://redirect.github.com/vercel/next.js/issues/88230">#88230</a></li> <li>Update deploy adapters outputs and handler interfaces for node and edge: <a href="https://redirect.github.com/vercel/next.js/issues/88247">#88247</a></li> <li>Move Ready in time before handler initialization: <a href="https://redirect.github.com/vercel/next.js/issues/88235">#88235</a></li> <li>next/image: support custom cache handlers: <a href="https://redirect.github.com/vercel/next.js/issues/88248">#88248</a></li> <li>feat: add Claude Code plugin marketplace with Cache Components skill: <a href="https://redirect.github.com/vercel/next.js/issues/87993">#87993</a></li> <li>refactor: consolidate PPR into cacheComponents architecture: <a href="https://redirect.github.com/vercel/next.js/issues/88243">#88243</a></li> <li>Turbopack: include fewer traced files for standalone: <a href="https://redirect.github.com/vercel/next.js/issues/88322">#88322</a></li> <li>feat(turbopack): add resolve plugin condition variant of Always and Never: <a href="https://redirect.github.com/vercel/next.js/issues/88190">#88190</a></li> <li>perf: use length = 0 to clear the logging array: <a href="https://redirect.github.com/vercel/next.js/issues/88244">#88244</a></li> <li>Time logs: Show full millisecond instead of 1 decimal: <a href="https://redirect.github.com/vercel/next.js/issues/88313">#88313</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vercel/next.js/commit/c5c94dffbf084e66b172a9c6ff23d80c24973764"><code>c5c94df</code></a> v16.2.0</li> <li><a href="https://github.com/vercel/next.js/commit/649d30263535f97cc35907dc25a0d133b37d0ca7"><code>649d302</code></a> Unflake router events deploy test (<a href="https://redirect.github.com/vercel/next.js/issues/91589">#91589</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/bcd9c19a6174ed36bdcf9cc690570e7bb2d604dd"><code>bcd9c19</code></a> docs: Clarify ignoreBuildErrors behavior (<a href="https://redirect.github.com/vercel/next.js/issues/91367">#91367</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/3683192a6bea9011222e9b236f8000b5266f3fe6"><code>3683192</code></a> v16.2.0-canary.104</li> <li><a href="https://github.com/vercel/next.js/commit/b61823d7b9dd26370fb1167b31098c24b1fcd199"><code>b61823d</code></a> SRI turbopack documentation (<a href="https://redirect.github.com/vercel/next.js/issues/90477">#90477</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/0ca967b8637ca0b23a98f3d5fa6cb6675b89afb1"><code>0ca967b</code></a> Add group depth tracking to instant validation boundary discovery (<a href="https://redirect.github.com/vercel/next.js/issues/91208">#91208</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/a41bef94c5ec99cf71e286b8be02dca850b80062"><code>a41bef9</code></a> improve allowedDevOrigins error (<a href="https://redirect.github.com/vercel/next.js/issues/91521">#91521</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/75c51c65410bc0d4a852b28bab42943dbf765135"><code>75c51c6</code></a> Turbopack: Use <code>debug = "line-tables-only"</code> for dev builds (<a href="https://redirect.github.com/vercel/next.js/issues/91539">#91539</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/39e705ca9fcbf417ed4381737737d40c79fc13ef"><code>39e705c</code></a> Turbopack: Merge release-with-assertions-no-lto profile into release-with-ass...</li> <li><a href="https://github.com/vercel/next.js/commit/4de2201764a31ecb45f02c1024bfb145496b1520"><code>4de2201</code></a> [turbopack] Share scratch buffer across shards using thread local (<a href="https://redirect.github.com/vercel/next.js/issues/90167">#90167</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vercel/next.js/compare/v16.1.5...v16.2.0">compare view</a></li> </ul> </details> <br /> Updates `flatted` from 3.3.3 to 3.4.2 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/WebReflection/flatted/commit/3bf09091c3562e17a0647bc06710dd6097079cf7"><code>3bf0909</code></a> 3.4.2</li> <li><a href="https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802"><code>885ddcc</code></a> fix CWE-1321</li> <li><a href="https://github.com/WebReflection/flatted/commit/0bdba705d130f00892b1b8fcc80cf4cdea0631e3"><code>0bdba70</code></a> added flatted-view to the benchmark</li> <li><a href="https://github.com/WebReflection/flatted/commit/2a02dce7c641dec31194c67663f9b0b12e62da20"><code>2a02dce</code></a> 3.4.1</li> <li><a href="https://github.com/WebReflection/flatted/commit/fba4e8f2e113665da275b19cd0f695f3d98e9416"><code>fba4e8f</code></a> Merge pull request <a href="https://redirect.github.com/WebReflection/flatted/issues/89">#89</a> from WebReflection/python-fix</li> <li><a href="https://github.com/WebReflection/flatted/commit/5fe86485e6df7f7f34a07a2a85498bd3e17384e7"><code>5fe8648</code></a> added "when in Rome" also a test for PHP</li> <li><a href="https://github.com/WebReflection/flatted/commit/53517adbefe724fe472b2f9ebcdb01910d0ae3f0"><code>53517ad</code></a> some minor improvement</li> <li><a href="https://github.com/WebReflection/flatted/commit/b3e2a0c387bf446435fec45ad7f05299f012346f"><code>b3e2a0c</code></a> Fixing recursion issue in Python too</li> <li><a href="https://github.com/WebReflection/flatted/commit/c4b46dbcbf782326e54ea1b65d3ebb1dc7a23fad"><code>c4b46db</code></a> Add SECURITY.md for security policy and reporting</li> <li><a href="https://github.com/WebReflection/flatted/commit/f86d071e0f70de5a7d8200198824a3f07fc9c988"><code>f86d071</code></a> Create dependabot.yml for version updates</li> <li>Additional commits viewable in <a href="https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Snupai/snupai-site/network/alerts). </details>

👍 1

vercel[bot] commented

2026-03-20 11:20:42 +01:00

(Migrated from github.com)

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
snupai-site	Ready	Preview, Comment	Mar 20, 2026 10:21am

[vc]: #tp8AgM2JExu+VLLZtee0blRjk3Q5+4Y6s+0V2nuinxs=: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 The latest updates on your projects. Learn more about [Vercel for GitHub](https://vercel.link/github-learn-more). | Project | Deployment | Actions | Updated (UTC) | | :--- | :----- | :------ | :------ | | [snupai-site](https://vercel.com/snupai/snupai-site) | ![Ready](https://vercel.com/static/status/ready.svg) [Ready](https://vercel.com/snupai/snupai-site/Dh6vFPyms19HazW7gt8PbRTAdASr) | [Preview](https://snupai-site-git-dependabot-npmandyarnnpmandyarn-3-10550b-snupai.vercel.app), [Comment](https://vercel.live/open-feedback/snupai-site-git-dependabot-npmandyarnnpmandyarn-3-10550b-snupai.vercel.app?via=pr-comment-feedback-link) | Mar 20, 2026 10:21am | <a href="https://vercel.com/vercel-agent/request-review?owner=Snupai&repo=snupai-site&pr=17" rel="noreferrer"><picture><source media="(prefers-color-scheme: dark)" srcset="https://agents-vade-review.vercel.sh/request-review-dark.svg"><source media="(prefers-color-scheme: light)" srcset="https://agents-vade-review.vercel.sh/request-review-light.svg"><img src="https://agents-vade-review.vercel.sh/request-review-light.svg" alt="Request Review"></picture></a>