Chore(deps-dev): Bump @next/bundle-analyzer from 15.3.5 to 15.4.7 #7877

dependabot · 2025-08-19T08:05:15Z

Bumps @next/bundle-analyzer from 15.3.5 to 15.4.7.

Release notes

Sourced from @next/bundle-analyzer's releases.

v15.4.6

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

fix: _error page's req.url can be overwritten to dynamic param on minimal mode (#82347)

fix: add ?dpl to fonts in /_next/static/media (#82384)

Credits

Huge thanks to @devjiwonchoi, @ijjk, and @styfle for helping!

v15.4.5

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Fix API stripping JSON incorrectly (#82062)

Fix i18n fallback: false collision (#82158)

Revert "Fix tracing of server actions imported by client components (#82167)

Ensure setAssetPrefix updates config instance (#82165)

Turbopack: update mimalloc (#82166)

fix(next/image): fix image-optimizer.ts headers (#82175)

fix(next/image): improve and simplify detect-content-type (#82174)

Credits

Huge thanks to @ijjk, @sokra, and @styfle for helping!

v15.4.4

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Fix dynamicParams false layout case in dev (#82026)

Turbopack: fix scope hoisting variable renaming bug (#81640)

Upgrade to swc v33 (#81750)

Revert "[metadata] use https protocol for schema urls" (#81934)

Credits

Huge thanks to @bgw @mischnic @huozhi @lukesandberg and @ijjk for helping!

v15.4.3

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

... (truncated)

Commits

f30d815 v15.4.7
be4aafd v15.4.6
b9aab5d v15.4.5
fe5db65 v15.4.4
f980400 v15.4.3
1617b26 v15.4.2
079c06d v15.4.1
7ad4674 v15.4.0
c1fa79b v15.4.0-canary.130
ee4d8e6 v15.4.0-canary.129
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

PR-Codex overview

This PR focuses on updating various dependencies in the package.json and pnpm-lock.yaml files, including version upgrades for packages related to @next/bundle-analyzer, @babel/core, and several others.

Detailed summary

Updated @next/bundle-analyzer from 15.3.5 to 15.4.7.
Updated @babel/core to 7.28.3.
Updated @babel/generator to 7.28.3.
Updated @babel/parser to 7.28.3.
Updated @babel/runtime to 7.28.3.
Updated various dependencies in pnpm-lock.yaml including @smithy packages and others.
Incremented versions of several packages in pnpm-lock.yaml, ensuring compatibility with the latest updates.

The following files were skipped due to too many changes: pnpm-lock.yaml

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

Bumps [@next/bundle-analyzer](https://github.com/vercel/next.js/tree/HEAD/packages/next-bundle-analyzer) from 15.3.5 to 15.4.7. - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v15.4.7/packages/next-bundle-analyzer) --- updated-dependencies: - dependency-name: "@next/bundle-analyzer" dependency-version: 15.4.7 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2025-08-19T08:05:20Z

⚠️ No Changeset found

Latest commit: fd98038

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

vercel · 2025-08-19T08:05:22Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
docs-v2	Ready	Preview	Comment	Aug 19, 2025 8:19am
nebula	Ready	Preview	Comment	Aug 19, 2025 8:19am
thirdweb_playground	Ready	Preview	Comment	Aug 19, 2025 8:19am
thirdweb-www	Ready	Preview	Comment	Aug 19, 2025 8:19am
wallet-ui	Ready	Preview	Comment	Aug 19, 2025 8:19am

graphite-app · 2025-08-19T08:05:24Z

How to use the Graphite Merge Queue

Add either label to this PR to merge it via the merge queue:

merge-queue - adds this PR to the back of the merge queue
hotfix - for urgent hot fixes, skip the queue and merge this PR next

You must have a Graphite account in order to use the merge queue. Sign up using this link.

_{An organization admin has enabled the Graphite Merge Queue in this repository.} _{Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.}

coderabbitai · 2025-08-19T08:05:26Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>, please review it.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query.
PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Join our Discord community for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type @coderabbitai help to get the list of available commands.

Other keywords and placeholders

Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (`.coderabbit.yaml`)

You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
Please see the configuration documentation for more information.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Status, Documentation and Community

Visit our Status Page to check the current availability of CodeRabbit.
Visit our Documentation for detailed information on how to use CodeRabbit.
Join our Discord Community to get help, request features, and share feedback.
Follow us on X/Twitter for updates and announcements.

socket-security · 2025-08-19T08:06:50Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@next/bundle-analyzer@15.3.5 ⏵ 15.4.7	⁺¹		⁺¹

View full report

dependabot · 2025-08-20T10:41:53Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 19, 2025

dependabot bot requested review from a team as code owners August 19, 2025 08:05

dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 19, 2025

github-actions bot added the Dashboard Involves changes to the Dashboard. label Aug 19, 2025

vercel bot deployed to Preview – nebula August 19, 2025 08:07 View deployment

vercel bot deployed to Preview – thirdweb_playground August 19, 2025 08:08 View deployment

vercel bot deployed to Preview – thirdweb-www August 19, 2025 08:13 View deployment

vercel bot deployed to Preview – docs-v2 August 19, 2025 08:17 View deployment

vercel bot deployed to Preview – wallet-ui August 19, 2025 08:19 View deployment

jnsdls closed this Aug 20, 2025

dependabot bot deleted the dependabot/npm_and_yarn/next/bundle-analyzer-15.4.7 branch August 20, 2025 10:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Chore(deps-dev): Bump @next/bundle-analyzer from 15.3.5 to 15.4.7 #7877

Chore(deps-dev): Bump @next/bundle-analyzer from 15.3.5 to 15.4.7 #7877

Uh oh!

dependabot bot commented on behalf of github Aug 19, 2025 •

edited by pr-codex bot

Loading

Uh oh!

changeset-bot bot commented Aug 19, 2025

Uh oh!

vercel bot commented Aug 19, 2025 •

edited

Loading

Uh oh!

graphite-app bot commented Aug 19, 2025

Uh oh!

coderabbitai bot commented Aug 19, 2025

Review skipped

Chat

Support

CodeRabbit Commands (Invoked using PR/Issue comments)

Other keywords and placeholders

CodeRabbit Configuration File (`.coderabbit.yaml`)

Status, Documentation and Community

Uh oh!

socket-security bot commented Aug 19, 2025

Uh oh!

dependabot bot commented on behalf of github Aug 20, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Chore(deps-dev): Bump @next/bundle-analyzer from 15.3.5 to 15.4.7 #7877

Chore(deps-dev): Bump @next/bundle-analyzer from 15.3.5 to 15.4.7 #7877

Uh oh!

Conversation

dependabot bot commented on behalf of github Aug 19, 2025 • edited by pr-codex bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v15.4.6

Core Changes

Credits

v15.4.5

Core Changes

Credits

v15.4.4

Core Changes

Credits

v15.4.3

PR-Codex overview

Detailed summary

Uh oh!

changeset-bot bot commented Aug 19, 2025

⚠️ No Changeset found

Uh oh!

vercel bot commented Aug 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

graphite-app bot commented Aug 19, 2025

How to use the Graphite Merge Queue

Uh oh!

coderabbitai bot commented Aug 19, 2025

Review skipped

Chat

Support

CodeRabbit Commands (Invoked using PR/Issue comments)

Other keywords and placeholders

CodeRabbit Configuration File (.coderabbit.yaml)

Status, Documentation and Community

Uh oh!

socket-security bot commented Aug 19, 2025

Uh oh!

dependabot bot commented on behalf of github Aug 20, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Aug 19, 2025 •

edited by pr-codex bot

Loading

vercel bot commented Aug 19, 2025 •

edited

Loading

CodeRabbit Configuration File (`.coderabbit.yaml`)