REPORT / 01
Analysis Report · next.js v16.1.3 → v16.1.4
Shared security patch analysis results
02 ·
Share this analysis
copy link · embed report
03 ·
Findings
filter · search · paginate
Showing 0 to 0 of 0 results
lerna.json
--- cache/next.js_v16.1.3/lerna.json 2026-01-20 22:00:35.674772180 +0000+++ cache/next.js_v16.1.4/lerna.json 2026-01-20 22:00:43.447252298 +0000@@ -16,5 +16,5 @@ "registry": "https://registry.npmjs.org/" } },- "version": "16.1.3"+ "version": "16.1.4" }\ No newline at end of file
packages/create-next-app/package.json
--- cache/next.js_v16.1.3/packages/create-next-app/package.json 2026-01-20 22:00:35.678772427 +0000+++ cache/next.js_v16.1.4/packages/create-next-app/package.json 2026-01-20 22:00:43.447252298 +0000@@ -1,6 +1,6 @@ { "name": "create-next-app",- "version": "16.1.3",+ "version": "16.1.4", "keywords": [ "react", "next",
packages/eslint-config-next/package.json
--- cache/next.js_v16.1.3/packages/eslint-config-next/package.json 2026-01-20 22:00:35.690773169 +0000+++ cache/next.js_v16.1.4/packages/eslint-config-next/package.json 2026-01-20 22:00:43.475254028 +0000@@ -1,6 +1,6 @@ { "name": "eslint-config-next",- "version": "16.1.3",+ "version": "16.1.4", "description": "ESLint configuration used by Next.js.", "license": "MIT", "repository": {@@ -12,7 +12,7 @@ "dist" ], "dependencies": {- "@next/eslint-plugin-next": "16.1.3",+ "@next/eslint-plugin-next": "16.1.4", "eslint-import-resolver-node": "^0.3.6", "eslint-import-resolver-typescript": "^3.5.2", "eslint-plugin-import": "^2.32.0",
packages/eslint-plugin-internal/package.json
--- cache/next.js_v16.1.3/packages/eslint-plugin-internal/package.json 2026-01-20 22:00:35.690773169 +0000+++ cache/next.js_v16.1.4/packages/eslint-plugin-internal/package.json 2026-01-20 22:00:43.475254028 +0000@@ -1,7 +1,7 @@ { "name": "@next/eslint-plugin-internal", "private": true,- "version": "16.1.3",+ "version": "16.1.4", "description": "ESLint plugin for working on Next.js.", "exports": { ".": "./src/eslint-plugin-internal.js"
packages/eslint-plugin-next/package.json
--- cache/next.js_v16.1.3/packages/eslint-plugin-next/package.json 2026-01-20 22:00:35.690773169 +0000+++ cache/next.js_v16.1.4/packages/eslint-plugin-next/package.json 2026-01-20 22:00:43.475254028 +0000@@ -1,6 +1,6 @@ { "name": "@next/eslint-plugin-next",- "version": "16.1.3",+ "version": "16.1.4", "description": "ESLint plugin for Next.js.", "main": "dist/index.js", "types": "dist/index.d.ts",
packages/font/package.json
--- cache/next.js_v16.1.3/packages/font/package.json 2026-01-20 22:00:35.694773416 +0000+++ cache/next.js_v16.1.4/packages/font/package.json 2026-01-20 22:00:43.479254275 +0000@@ -1,7 +1,7 @@ { "name": "@next/font", "private": true,- "version": "16.1.3",+ "version": "16.1.4", "repository": { "url": "vercel/next.js", "directory": "packages/font"
packages/next-bundle-analyzer/package.json
--- cache/next.js_v16.1.3/packages/next-bundle-analyzer/package.json 2026-01-20 22:00:35.698773663 +0000+++ cache/next.js_v16.1.4/packages/next-bundle-analyzer/package.json 2026-01-20 22:00:43.483254522 +0000@@ -1,6 +1,6 @@ { "name": "@next/bundle-analyzer",- "version": "16.1.3",+ "version": "16.1.4", "main": "index.js", "types": "index.d.ts", "license": "MIT",
packages/next-codemod/package.json
--- cache/next.js_v16.1.3/packages/next-codemod/package.json 2026-01-20 22:00:35.698773663 +0000+++ cache/next.js_v16.1.4/packages/next-codemod/package.json 2026-01-20 22:00:43.483254522 +0000@@ -1,6 +1,6 @@ { "name": "@next/codemod",- "version": "16.1.3",+ "version": "16.1.4", "license": "MIT", "repository": { "type": "git",
packages/next-env/package.json
--- cache/next.js_v16.1.3/packages/next-env/package.json 2026-01-20 22:00:35.718774898 +0000+++ cache/next.js_v16.1.4/packages/next-env/package.json 2026-01-20 22:00:43.503255757 +0000@@ -1,6 +1,6 @@ { "name": "@next/env",- "version": "16.1.3",+ "version": "16.1.4", "keywords": [ "react", "next",
packages/next-mdx/package.json
--- cache/next.js_v16.1.3/packages/next-mdx/package.json 2026-01-20 22:00:35.718774898 +0000+++ cache/next.js_v16.1.4/packages/next-mdx/package.json 2026-01-20 22:00:43.503255757 +0000@@ -1,6 +1,6 @@ { "name": "@next/mdx",- "version": "16.1.3",+ "version": "16.1.4", "main": "index.js", "license": "MIT", "repository": {
packages/next-plugin-storybook/package.json
--- cache/next.js_v16.1.3/packages/next-plugin-storybook/package.json 2026-01-20 22:00:35.718774898 +0000+++ cache/next.js_v16.1.4/packages/next-plugin-storybook/package.json 2026-01-20 22:00:43.503255757 +0000@@ -1,6 +1,6 @@ { "name": "@next/plugin-storybook",- "version": "16.1.3",+ "version": "16.1.4", "repository": { "url": "vercel/next.js", "directory": "packages/next-plugin-storybook"
packages/next-polyfill-module/package.json
--- cache/next.js_v16.1.3/packages/next-polyfill-module/package.json 2026-01-20 22:00:35.718774898 +0000+++ cache/next.js_v16.1.4/packages/next-polyfill-module/package.json 2026-01-20 22:00:43.503255757 +0000@@ -1,6 +1,6 @@ { "name": "@next/polyfill-module",- "version": "16.1.3",+ "version": "16.1.4", "description": "A standard library polyfill for ES Modules supporting browsers (Edge 16+, Firefox 60+, Chrome 61+, Safari 10.1+)", "main": "dist/polyfill-module.js", "license": "MIT",
packages/next-polyfill-nomodule/package.json
--- cache/next.js_v16.1.3/packages/next-polyfill-nomodule/package.json 2026-01-20 22:00:35.718774898 +0000+++ cache/next.js_v16.1.4/packages/next-polyfill-nomodule/package.json 2026-01-20 22:00:43.503255757 +0000@@ -1,6 +1,6 @@ { "name": "@next/polyfill-nomodule",- "version": "16.1.3",+ "version": "16.1.4", "description": "A polyfill for non-dead, nomodule browsers.", "main": "dist/polyfill-nomodule.js", "license": "MIT",
packages/next-rspack/package.json
--- cache/next.js_v16.1.3/packages/next-rspack/package.json 2026-01-20 22:00:35.718774898 +0000+++ cache/next.js_v16.1.4/packages/next-rspack/package.json 2026-01-20 22:00:43.507256004 +0000@@ -1,6 +1,6 @@ { "name": "next-rspack",- "version": "16.1.3",+ "version": "16.1.4", "repository": { "url": "vercel/next.js", "directory": "packages/next-rspack"
packages/next-swc/package.json
--- cache/next.js_v16.1.3/packages/next-swc/package.json 2026-01-20 22:00:35.718774898 +0000+++ cache/next.js_v16.1.4/packages/next-swc/package.json 2026-01-20 22:00:43.507256004 +0000@@ -1,6 +1,6 @@ { "name": "@next/swc",- "version": "16.1.3",+ "version": "16.1.4", "private": true, "files": [ "native/"
packages/next/package.json
--- cache/next.js_v16.1.3/packages/next/package.json 2026-01-20 22:00:35.730775640 +0000+++ cache/next.js_v16.1.4/packages/next/package.json 2026-01-20 22:00:43.515256499 +0000@@ -1,6 +1,6 @@ { "name": "next",- "version": "16.1.3",+ "version": "16.1.4", "description": "The React Framework", "main": "./dist/server/next.js", "license": "MIT",@@ -97,7 +97,7 @@ ] }, "dependencies": {- "@next/env": "16.1.3",+ "@next/env": "16.1.4", "@swc/helpers": "0.5.15", "baseline-browser-mapping": "^2.8.3", "caniuse-lite": "^1.0.30001579",@@ -162,11 +162,11 @@ "@modelcontextprotocol/sdk": "1.18.1", "@mswjs/interceptors": "0.23.0", "@napi-rs/triples": "1.2.0",- "@next/font": "16.1.3",- "@next/polyfill-module": "16.1.3",- "@next/polyfill-nomodule": "16.1.3",- "@next/react-refresh-utils": "16.1.3",- "@next/swc": "16.1.3",+ "@next/font": "16.1.4",+ "@next/polyfill-module": "16.1.4",+ "@next/polyfill-nomodule": "16.1.4",+ "@next/react-refresh-utils": "16.1.4",+ "@next/swc": "16.1.4", "@opentelemetry/api": "1.6.0", "@playwright/test": "1.51.1", "@rspack/core": "1.6.7",
packages/next/src/build/index.ts
--- cache/next.js_v16.1.3/packages/next/src/build/index.ts 2026-01-20 22:00:35.734775887 +0000+++ cache/next.js_v16.1.4/packages/next/src/build/index.ts 2026-01-20 22:00:43.519256746 +0000@@ -1852,11 +1852,15 @@ } } + // getNextConfigRuntime only filters if experimental.runtimeServerDeploymentId is true,+ // but we unconditionally want to remove configFile for this manifest+ let runtimeConfigWithoutFilePath = { ...runtimeConfig }+ delete (runtimeConfigWithoutFilePath as NextConfigComplete).configFile+ const serverFilesManifest: RequiredServerFilesManifest = { version: 1, config: {- ...runtimeConfig,-+ ...runtimeConfigWithoutFilePath, ...(ciEnvironment.hasNextSupport ? { compress: false,
packages/next/src/server/config-shared.ts
--- cache/next.js_v16.1.3/packages/next/src/server/config-shared.ts 2026-01-20 22:00:36.086797632 +0000+++ cache/next.js_v16.1.4/packages/next/src/server/config-shared.ts 2026-01-20 22:00:43.867278243 +0000@@ -1683,6 +1683,11 @@ export function getNextConfigRuntime( config: NextConfigComplete | NextConfigRuntime ): NextConfigRuntime {+ // This config filter is a breaking change, so only do it if experimental.runtimeServerDeploymentId is enabled+ if (!config.experimental.runtimeServerDeploymentId) {+ return config+ }+ let ex = config.experimental type Requiredish<T> = {
packages/react-refresh-utils/package.json
--- cache/next.js_v16.1.3/packages/react-refresh-utils/package.json 2026-01-20 22:00:36.130800350 +0000+++ cache/next.js_v16.1.4/packages/react-refresh-utils/package.json 2026-01-20 22:00:43.911280961 +0000@@ -1,6 +1,6 @@ { "name": "@next/react-refresh-utils",- "version": "16.1.3",+ "version": "16.1.4", "description": "An experimental package providing utilities for React Refresh.", "repository": { "url": "vercel/next.js",
packages/third-parties/package.json
--- cache/next.js_v16.1.3/packages/third-parties/package.json 2026-01-20 22:00:36.130800350 +0000+++ cache/next.js_v16.1.4/packages/third-parties/package.json 2026-01-20 22:00:43.911280961 +0000@@ -1,6 +1,6 @@ { "name": "@next/third-parties",- "version": "16.1.3",+ "version": "16.1.4", "repository": { "url": "vercel/next.js", "directory": "packages/third-parties"@@ -26,7 +26,7 @@ "third-party-capital": "1.0.20" }, "devDependencies": {- "next": "16.1.3",+ "next": "16.1.4", "outdent": "0.8.0", "prettier": "2.5.1", "typescript": "5.9.2"
Showing 1 to 20 of 21 results