Skip to content

Bump postcss and next - #1073

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/multi-4b10dec7ea
Open

Bump postcss and next#1073
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/multi-4b10dec7ea

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss and next. These dependencies needed to be updated together.
Updates postcss from 8.5.19 to 8.5.23

Release notes

Sourced from postcss's releases.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

Changelog

Sourced from postcss's changelog.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

Commits

Updates next from 16.2.11 to 16.3.0

Release notes

Sourced from next's releases.

v16.3.0

Core Changes

  • Update vendored lodash to 4.17.23 to fix CVE-2025-13465: #91558
  • Fix invalid HTML response for route-level RSC requests in deployment adapter: #91541
  • Normalize encoded dynamic placeholders in app routes: #91603
  • Fix(pages-router): restore Content-Length and ETag for /_next/data/ JSON responses: #90304
  • Update tokio from 1.43.0 to 1.47.3: #90945
  • [turbopack] Simplify snapshotting logic: #91178
  • Turbopack: enable server HMR for app route handlers: #91466
  • turbo-tasks-backend: batch find_and_schedule_dirty using for_each_task_meta: #91497
  • [turbopack] Use bail! instead of panic! for duplicate module ident error: #91636
  • Skip loadBindings() Lightning CSS check during next start: #91538
  • turbo-tasks-backend: batch schedule dirty tasks in aggregation_update: #91461
  • Turbopack: Add importModule() support to webpack loaders: #89630
  • turbo-persistence: fix mmap page alignment and improve error context in MetaFile::open_internal: #91640
  • turbopack-css: demote recoverable CSS parse warnings to Warning severity: #91524
  • feat(node-streams): add config flag, define-env, and env precedence test: #90427
  • Rename /_next/webpack-hmr to /_next/hmr: #91415
  • Add per-slot error attribution for instant validation using slot markers and config depth preference: #91610
  • Handle encoded params further: #91627
  • [turbopack] Respect {eval:true} in worker_threads constructors: #91666
  • Fix missing route in otel spans without base-server: #91665
  • [turbopack] Optimize compaction cpu usage: #91468
  • Fix layout segment optimization: move app-page imports to server-utility transition: #91701
  • Fix server actions in standalone mode with cacheComponents: #91711
  • turbo-persistence: remove Unmergeable mmap advice: #91713
  • turbopack: move "compact database" tracing span to backend layer: #91693
  • Turbopack: lazy require metadata and handle TLA: #91705
  • Fix adapter outputs for dynamic metadata routes: #91680
  • Turbopack: fix webpack loader runner layer: #91727
  • [turbopack] Remove incorrect debug_assert in try_read_task_cell: #91699
  • Add module count field to module graph tracing spans: #91697
  • turbopack-cli: add --persistent-caching flag for filesystem-backed cache: #91657
  • Turbopack: pull in updated vercel/nft tests: #91651
  • [turbopack] Improve regressed build speed on cross-compiled MUSL: #91477
  • [Segment Bundling] [Scaffolding] Ensure inlining hint correctness: #91320
  • [Segment Bundling] [Scaffolding] Track which segments can be omitted from prefetch: #91438
  • Avoid deprecated TS node10 moduleResolution defaults: #91847
  • [turbopack] Rebuild the docker build scripts: #91799
  • Fix TS6 baseUrl deprecation for extended tsconfig: #91855
  • Add next internal post-build CLI command for Turbopack database compaction: #91336
  • Turbopack: Define Effect as a trait instead of a closure: #89080
  • Turbopack: Implement TraceRawVcs and NonLocalValue correctly for Effects: #89133
  • turbo-tasks-backend: improve print_cache_item_size instrumentation: #91742
  • Turbopack: switch from base40 to base38 hash encoding (remove ~ and . from charset): #91832
  • Use charCodeAt for normalizePathTrailingSlash: #91380
  • Turbopack: Only patch lockfile when bindings fails to load: #91379
  • [create-next-app] Skip interactive prompts when CLI flags are provided: #91840
  • [devtools] Make instant navs panel draggable: #91914
  • [Segment Bundling] Bundle static prefetches based on size: #91439

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 4, 2026
@vercel

vercel Bot commented Aug 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
omega-website-5xmp Error Error Aug 11, 2026 8:36am

Copy link
Copy Markdown
Owner

build (22.x) fails during next build's TypeScript check step, not in the postcss part of this bump:

src/server/repository/games/memory.test.ts(7,1): error TS2593: Cannot find name 'describe'. ...
src/utils/games.test.ts(4,1): error TS2593: Cannot find name 'describe'. ...
src/utils/index.test.ts(4,1): error TS2593: Cannot find name 'describe'. ...
Failed to type check.

Root cause: this is the next 16.2.11 → 16.3.0 half of the bump. The sibling PR #1072 (fast-uri only, same base commit, no next/postcss bump) builds clean, isolating the failure to the next upgrade. Next 16.3.0's release notes include "Enable TypeScript CLI by default" (vercel/next.js#96497) and related moduleResolution/baseUrl TS-handling changes — this changes how next build's typecheck step resolves ambient types, and it's now type-checking src/**/*.test.ts as part of the production build. Those files rely on Jest's global ambient types (describe/test/expect from @types/jest), which aren't being picked up in that context, so tsc reports them as undefined.

This isn't something Dependabot can fix by rebasing — tsconfig.json's include (src, custom.d.ts, .next/types/**/*.ts, .next/dev/types/**/*.ts) doesn't currently exclude test files, so they need to be excluded from the build's typecheck scope (e.g. add "src/**/*.test.ts" to exclude, or split out a build-specific tsconfig) — a human commit to the repo, not to this branch. Holding until that's done.


Generated by Claude Code

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-4b10dec7ea branch from e7307c3 to 6b6d932 Compare August 5, 2026 08:13
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-4b10dec7ea branch from 6b6d932 to 5a71888 Compare August 6, 2026 08:14

Copy link
Copy Markdown
Owner

Re-checked after today's rebase (new head 5a71888, same target versions: postcss 8.5.19→8.5.23, next 16.2.11→16.3.0): build (22.x) fails with the identical TS2593/TS7006 errors in src/server/repository/games/memory.test.ts, src/utils/games.test.ts, and src/utils/index.test.ts — same root cause as the original diagnosis (#1073 (comment)): Next 16.3's TypeScript-CLI-by-default change now typechecks test files that rely on Jest's ambient globals. Still needs a human commit to exclude src/**/*.test.ts from the build's typecheck scope — not something this branch or a rebase can fix. Holding, no action needed.


Generated by Claude Code

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-4b10dec7ea branch from 5a71888 to 0bfdb93 Compare August 10, 2026 08:16
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-4b10dec7ea branch from 0bfdb93 to 152de35 Compare August 10, 2026 08:20

Copy link
Copy Markdown
Owner

Re-checked after this PR's latest rebase (new head 152de35, same target versions: postcss 8.5.19→8.5.23, next 16.2.11→16.3.0): build (22.x) fails with the identical TS2593/TS7006/TS2552/TS2304 errors in src/server/repository/games/memory.test.ts, src/utils/games.test.ts, and src/utils/index.test.ts — same root cause as the original diagnosis (#1073 (comment)): Next 16.3's TypeScript-CLI-by-default change now typechecks test files that rely on Jest's ambient globals. Still needs a human commit to exclude src/**/*.test.ts from the build's typecheck scope — not something this branch or a rebase can fix. Holding, no action needed.


Generated by Claude Code

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-4b10dec7ea branch from 152de35 to a238482 Compare August 11, 2026 08:13
Bumps [postcss](https://github.com/postcss/postcss) and [next](https://github.com/vercel/next.js). These dependencies needed to be updated together.

Updates `postcss` from 8.5.19 to 8.5.23
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.19...8.5.23)

Updates `next` from 16.2.11 to 16.3.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.11...v16.3.0)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.3.0
  dependency-type: direct:production
- dependency-name: postcss
  dependency-version: 8.5.23
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-4b10dec7ea branch from a238482 to dd0637a Compare August 11, 2026 08:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant