Skip to content

Upgrade Next.js to 16 and fix Dependabot alerts - #33

Merged
element-software merged 2 commits into
mainfrom
chore/dependabot-security-upgrades
Jul 25, 2026
Merged

Upgrade Next.js to 16 and fix Dependabot alerts#33
element-software merged 2 commits into
mainfrom
chore/dependabot-security-upgrades

Conversation

@element-software

@element-software element-software commented Jul 25, 2026

Copy link
Copy Markdown
Owner

Summary

  • Upgrade next from 15.5.x → 16.2.11 across the monorepo, with React 19.2 and matching @types/react.
  • Keep Dependabot security overrides (postcss, sharp, brace-expansion, scoped esbuild for tsup / vite).
  • Migrate next lint → ESLint CLI (removed in Next 16), add app eslint config, and fix resulting lint warnings.
  • Raise Node engine requirement to >=20.9.0.

Test plan

  • npm run build --workspace=app --workspace=public --workspace=viewer --workspace=@casaboard/ha
  • npm run check-types --workspace=app --workspace=public --workspace=viewer --workspace=@casaboard/ha
  • npm run lint --workspace=app --workspace=public
  • next start smoke: /api/health and public / return 200
  • CI green on this PR

Bump Next.js to 15.5.21 and override transitive postcss, sharp, esbuild, and brace-expansion to patched versions so the open Dependabot alerts can clear.

Co-authored-by: Cursor <cursoragent@cursor.com>
@vercel

vercel Bot commented Jul 25, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
casaboard-public Ready Ready Preview, Comment Jul 25, 2026 12:59pm

Request Review

Move off the removed next lint command, keep security overrides compatible with Vite, and clear lint/typecheck blockers so app and public build and start on Next 16.

Co-authored-by: Cursor <cursoragent@cursor.com>
@element-software element-software changed the title Fix Dependabot security alerts Upgrade Next.js to 16 and fix Dependabot alerts Jul 25, 2026
@element-software
element-software merged commit 7192168 into main Jul 25, 2026
8 checks passed
@element-software
element-software deleted the chore/dependabot-security-upgrades branch July 25, 2026 12:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant