chore(deps-dev): bump @next/eslint-plugin-next from 15.3.2 to 16.2.10 by dependabot[bot] · Pull Request #1016 · knocklabs/javascript

dependabot · 2026-06-16T02:32:09Z

Bumps @next/eslint-plugin-next from 15.3.2 to 16.2.10.

Release notes

Sourced from @next/eslint-plugin-next's releases.

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)

[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)

[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)

[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)

[backport] Encode non-ASCII characters in cache tags at construction (#93918)

[backport] Fix server action forwarding loop with middleware rewrites (#93919)

[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)

[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

[backport] Fix "type: module" in project dir when using standalone or adapters (#94050)

[backport] Propagate adapter preferred regions (#94200)

[16.2.x] Don't drop FormData entries (#94240)

[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @eps1lon, @icyJoseph, @unstubbable, @mischnic, @bgw, @timneutkens, and @lukesandberg for helping!

v16.2.6

[!NOTE] This release contains security fixes and backported bug fixes. It does not include all pending features/changes on canary.

Security Fixes

The following advisories have been addressed:

High:

GHSA-8h8q-6873-q5fj: Denial of Service with Server Components

GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

GHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components

GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection

GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades

GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n

Moderate:

... (truncated)

Commits

9dadfd6 v16.2.10
534d9c1 [16.2.x] Release pipeline updates (#95160)
6e1a94d [16.2.x][ci]: fix release script to not strip newlines (#94640)
f37fad9 v16.2.9
6f16804 v16.2.8
411c455 v16.2.7
ee6e79b v16.2.6
766148f v16.2.5
2275bd8 v16.2.4
d5f649b v16.2.3
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @next/eslint-plugin-next since your current version.

changeset-bot · 2026-06-16T02:32:13Z

⚠️ No Changeset found

Latest commit: a4387b0

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

vercel · 2026-06-16T02:32:14Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
javascript-ms-teams-connect-example	Ready	Preview, Comment	Jul 9, 2026 3:53pm
javascript-nextjs-example	Ready	Preview, Comment	Jul 9, 2026 3:53pm
javascript-slack-connect-example	Ready	Preview, Comment	Jul 9, 2026 3:53pm
javascript-slack-kit-example	Ready	Preview, Comment	Jul 9, 2026 3:53pm

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit afa2290. Configure here.}

cursor · 2026-06-16T02:41:37Z

    "@knocklabs/eslint-config": "workspace:^",
    "@knocklabs/typescript-config": "workspace:^",
-    "@next/eslint-plugin-next": "^15.3.1",
+    "@next/eslint-plugin-next": "^16.2.7",


Plugin major mismatches Next version

Medium Severity

This commit pins @next/eslint-plugin-next to ^16.2.7 while both examples still depend on next 15.3.6. The Next ESLint plugin major is meant to track the Next.js major, and lint here still runs through legacy .eslintrc via @knocklabs/eslint-config/next.js and @vercel/style-guide/eslint/next, not Next 16 flat config.

Additional Locations (1)

examples/nextjs-example/package.json#L40-L41

^{Reviewed by Cursor Bugbot for commit afa2290. Configure here.}

Bumps [@next/eslint-plugin-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-plugin-next) from 15.3.2 to 16.2.10. - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](https://github.com/vercel/next.js/commits/v16.2.10/packages/eslint-plugin-next) --- updated-dependencies: - dependency-name: "@next/eslint-plugin-next" dependency-version: 16.2.7 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 16, 2026

dependabot Bot requested a review from a team as a code owner June 16, 2026 02:32

dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 16, 2026

dependabot Bot requested review from BenaventeX24 and MikeCarbone and removed request for a team June 16, 2026 02:32

dependabot Bot added the javascript Pull requests that update javascript code label Jun 16, 2026

dependabot Bot mentioned this pull request Jun 16, 2026

chore(deps-dev): bump @next/eslint-plugin-next from 15.3.2 to 16.2.6 #1001

Closed

vercel Bot deployed to Preview – javascript-slack-connect-example June 16, 2026 02:32 View deployment

vercel Bot deployed to Preview – javascript-slack-kit-example June 16, 2026 02:32 View deployment

vercel Bot deployed to Preview – javascript-nextjs-example June 16, 2026 02:33 View deployment

vercel Bot deployed to Preview – javascript-ms-teams-connect-example June 16, 2026 02:33 View deployment

cursor Bot reviewed Jun 16, 2026

View reviewed changes

dependabot Bot changed the title ~~chore(deps-dev): bump @next/eslint-plugin-next from 15.3.2 to 16.2.7~~ chore(deps-dev): bump @next/eslint-plugin-next from 15.3.2 to 16.2.10 Jul 9, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/next/eslint-plugin-next-16.2.7 branch from afa2290 to a4387b0 Compare July 9, 2026 15:51

vercel Bot deployed to Preview – javascript-slack-connect-example July 9, 2026 15:53 View deployment

vercel Bot deployed to Preview – javascript-ms-teams-connect-example July 9, 2026 15:53 View deployment

vercel Bot deployed to Preview – javascript-slack-kit-example July 9, 2026 15:53 View deployment

vercel Bot deployed to Preview – javascript-nextjs-example July 9, 2026 15:53 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump @next/eslint-plugin-next from 15.3.2 to 16.2.10#1016

chore(deps-dev): bump @next/eslint-plugin-next from 15.3.2 to 16.2.10#1016
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/next/eslint-plugin-next-16.2.7

dependabot Bot commented on behalf of github Jun 16, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Jun 16, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Jun 16, 2026 •

edited

Loading

Uh oh!

cursor Bot left a comment

Uh oh!

cursor Bot Jun 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v16.2.10

v16.2.9

v16.2.8

v16.2.7

Core Changes

Credits

v16.2.6

Security Fixes

Uh oh!

changeset-bot Bot commented Jun 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

vercel Bot commented Jun 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Jun 16, 2026

Choose a reason for hiding this comment

Plugin major mismatches Next version

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 16, 2026 •

edited

Loading

changeset-bot Bot commented Jun 16, 2026 •

edited

Loading

vercel Bot commented Jun 16, 2026 •

edited

Loading