chore(deps): bump next from 16.1.6 to 16.1.7 by dependabot[bot] · Pull Request #1086 · objectstack-ai/objectui

dependabot · 2026-03-17T21:33:03Z

Bumps next from 16.1.6 to 16.1.7.

Release notes

v16.1.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

[Cache Components] Prevent streaming fetch calls from hanging in dev (#89194)

Apply server actions transform to node_modules in route handlers (#89380)

ensure maxPostponedStateSize is always respected (See: CVE-2026-27979)

feat(next/image): add lru disk cache and images.maximumDiskCacheSize (See: CVE-2026-27980)

Allow blocking cross-site dev-only websocket connections from privacy-sensitive origins (See: CVE-2026-27977)

Disallow Server Action submissions from privacy-sensitive contexts by default (See: CVE-2026-27978)

fix: patch http-proxy to prevent request smuggling in rewrites (See: CVE-2026-29057)

Credits

Huge thanks to @unstubbable, @styfle, @eps1lon, and @ztanner for helping!

Commits

bdf3e35 v16.1.7
dc98c04 [backport]: fix: patch http-proxy to prevent request smuggling in rewrites (#...
9023c0a [backport] Disallow Server Action submissions from privacy-sensitive contexts...
36a97b9 Allow blocking cross-site dev-only websocket connections from privacy-sensiti...
93c3993 [backport]: feat(next/image): add lru disk cache and `images.maximumDiskCache...
c68d62d Backport documentation fixes for 16.1.x (#90655)
5214ac1 [backport]: ensure maxPostponedStateSize is always respected (#90060) (#90471)
c95e357 Backport/docs fixes 16.1.x (#90125)
cba6144 [backport] Apply server actions transform to node_modules in route handlers...
3db9063 [backport] [Cache Components] Prevent streaming fetch calls from hanging in d...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [next](https://github.com/vercel/next.js) from 16.1.6 to 16.1.7. - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v16.1.6...v16.1.7) --- updated-dependencies: - dependency-name: next dependency-version: 16.1.7 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-03-17T21:33:04Z

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2026-03-17T21:33:06Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
objectui	Ready	Preview, Comment	Mar 17, 2026 9:45pm
objectui-demo	Ready	Preview, Comment	Mar 17, 2026 9:45pm
objectui-storybook	Ready	Preview, Comment	Mar 17, 2026 9:45pm

github-actions · 2026-03-17T21:37:03Z

✅ Console Performance Budget

Metric	Value	Budget
Main entry (gzip)	58.1 KB	60 KB
Entry file	`index-BX8XowPF.js`	—
Status	PASS	—

📦 Bundle Size Report

Package	Size	Gzipped
auth (AuthContext.js)	0.31KB	0.24KB
auth (AuthGuard.js)	1.17KB	0.53KB
auth (AuthProvider.js)	7.37KB	1.79KB
auth (ForgotPasswordForm.js)	4.91KB	1.66KB
auth (LoginForm.js)	5.00KB	1.64KB
auth (PreviewBanner.js)	0.90KB	0.50KB
auth (RegisterForm.js)	6.85KB	1.86KB
auth (UserMenu.js)	3.40KB	1.22KB
auth (createAuthClient.js)	5.14KB	1.60KB
auth (createAuthenticatedFetch.js)	1.24KB	0.60KB
auth (index.js)	1.18KB	0.51KB
auth (types.js)	0.59KB	0.35KB
auth (useAuth.js)	1.57KB	0.57KB
collaboration (CommentThread.js)	18.38KB	4.49KB
collaboration (LiveCursors.js)	3.17KB	1.27KB
collaboration (PresenceAvatars.js)	3.65KB	1.42KB
collaboration (index.js)	1.16KB	0.50KB
collaboration (useCommentSearch.js)	1.98KB	0.88KB
collaboration (useConflictResolution.js)	7.75KB	1.86KB
collaboration (useMentionNotifications.js)	1.81KB	0.68KB
collaboration (usePresence.js)	6.33KB	1.84KB
collaboration (useRealtimeSubscription.js)	7.91KB	2.01KB
components (index.js)	2120.54KB	499.62KB
core (index.js)	1.29KB	0.51KB
create-plugin (index.js)	10.13KB	3.17KB
data-objectstack (index.js)	44.50KB	10.95KB
fields (index.js)	116.32KB	24.04KB
i18n (i18n.js)	2.03KB	0.77KB
i18n (index.js)	1.90KB	0.76KB
i18n (provider.js)	4.63KB	1.47KB
i18n (useObjectLabel.js)	4.51KB	1.61KB
layout (index.js)	101.45KB	26.75KB
mobile (MobileProvider.js)	0.92KB	0.49KB
mobile (ResponsiveContainer.js)	0.94KB	0.38KB
mobile (breakpoints.js)	1.51KB	0.70KB
mobile (index.js)	1.19KB	0.53KB
mobile (pwa.js)	0.97KB	0.49KB
mobile (serviceWorker.js)	1.48KB	0.62KB
mobile (useBreakpoint.js)	1.54KB	0.65KB
mobile (useGesture.js)	4.42KB	1.27KB
mobile (usePullToRefresh.js)	2.53KB	0.85KB
mobile (useResponsive.js)	0.71KB	0.42KB
mobile (useResponsiveConfig.js)	1.36KB	0.63KB
mobile (useSpecGesture.js)	1.77KB	0.77KB
mobile (useTouchTarget.js)	1.01KB	0.54KB
permissions (PermissionContext.js)	0.31KB	0.25KB
permissions (PermissionGuard.js)	0.89KB	0.45KB
permissions (PermissionProvider.js)	3.11KB	0.87KB
permissions (evaluator.js)	4.00KB	1.23KB
permissions (index.js)	0.85KB	0.40KB
permissions (store.js)	0.91KB	0.42KB
permissions (useFieldPermissions.js)	1.28KB	0.52KB
permissions (usePermissions.js)	0.99KB	0.49KB
plugin-aggrid (AddressField-C1SRL4J0.js)	3.05KB	0.76KB
plugin-aggrid (AgGridImpl-CZzkAYce.js)	7.04KB	2.33KB
plugin-aggrid (AutoNumberField-nJ16WHXY.js)	0.28KB	0.27KB
plugin-aggrid (FileField-D_P8YqZk.js)	5.90KB	2.10KB
plugin-aggrid (FormulaField-C2N4hxxD.js)	0.52KB	0.38KB
plugin-aggrid (GeolocationField-CzqFZHjA.js)	4.46KB	1.50KB
plugin-aggrid (GridField-DuByLsx7.js)	1.74KB	0.68KB
plugin-aggrid (LocationField-BGin_RdM.js)	0.93KB	0.54KB
plugin-aggrid (MasterDetailField-D_FxBR5u.js)	3.75KB	1.14KB
plugin-aggrid (ObjectAgGridImpl-Dv9IhLRd.js)	942.46KB	208.93KB
plugin-aggrid (ObjectField-CfmcbXUh.js)	1.61KB	0.77KB
plugin-aggrid (QRCodeField-B7OXsysP.js)	3.38KB	1.23KB
plugin-aggrid (RichTextField-Bk7qWNWh.js)	1.16KB	0.59KB
plugin-aggrid (SignatureField-Bjr5HcL6.js)	3.33KB	1.29KB
plugin-aggrid (SummaryField-BYMNatDx.js)	0.48KB	0.37KB
plugin-aggrid (UserField-DapA4pRL.js)	2.44KB	0.94KB
plugin-aggrid (VectorField-fxtEazIV.js)	0.79KB	0.45KB
plugin-aggrid (index-OskGlWaY.js)	19.95KB	5.03KB
plugin-aggrid (index.js)	0.22KB	0.16KB
plugin-ai (index.js)	25.36KB	6.40KB
plugin-calendar (index.js)	49.23KB	13.43KB
plugin-charts (AdvancedChartImpl-DW8x9DgS.js)	130.15KB	26.72KB
plugin-charts (BarChart-CdpS5ozp.js)	554.05KB	138.32KB
plugin-charts (ChartImpl-DQsl4_ct.js)	3.19KB	1.10KB
plugin-charts (index-CYV5Bp-d.js)	17.03KB	5.02KB
plugin-charts (index.js)	0.19KB	0.16KB
plugin-chatbot (index.js)	1140.69KB	333.05KB
plugin-dashboard (index.js)	181.92KB	44.73KB
plugin-designer (index.js)	262.93KB	47.76KB
plugin-detail (AddressField-CPmJuZXJ.js)	2.98KB	0.75KB
plugin-detail (AutoNumberField-BxnFqllo.js)	0.28KB	0.26KB
plugin-detail (AvatarField-CDlh3Sdk.js)	2.62KB	1.07KB
plugin-detail (BooleanField-DNUFSKbp.js)	1.13KB	0.51KB
plugin-detail (CodeField-CY_2TkX6.js)	0.74KB	0.47KB
plugin-detail (ColorField-BcoRPPcq.js)	1.23KB	0.54KB
plugin-detail (CurrencyField-D-pf72vx.js)	1.48KB	0.73KB
plugin-detail (DateField-ZXD_BmPR.js)	0.54KB	0.37KB
plugin-detail (DateTimeField-C0I2AYYL.js)	0.71KB	0.42KB
plugin-detail (EmailField-nsnfVDdU.js)	0.81KB	0.48KB
plugin-detail (FileField-Cc-bhhFv.js)	5.50KB	1.94KB
plugin-detail (FormulaField-CJkkwIK8.js)	0.51KB	0.38KB
plugin-detail (GeolocationField-B0cUDk81.js)	3.71KB	1.21KB
plugin-detail (GridField-CXUNK_po.js)	1.71KB	0.68KB
plugin-detail (ImageField-WD31D103.js)	2.83KB	1.14KB
plugin-detail (LocationField-C0aOX875.js)	0.95KB	0.54KB
plugin-detail (MasterDetailField-Ce8S1k8B.js)	3.40KB	1.00KB
plugin-detail (NumberField-Dz6C1i4h.js)	0.68KB	0.44KB
plugin-detail (ObjectField-B1uhpxsM.js)	1.64KB	0.76KB
plugin-detail (PasswordField-DvsXX7gN.js)	1.21KB	0.63KB
plugin-detail (PercentField-seN0PEGk.js)	1.89KB	0.84KB
plugin-detail (PhoneField-uNHs53W3.js)	0.80KB	0.48KB
plugin-detail (QRCodeField-D8arzjPL.js)	2.35KB	0.91KB
plugin-detail (RatingField-C1nRv0L_.js)	1.62KB	0.66KB
plugin-detail (RichTextField-Bdyi8TLZ.js)	1.15KB	0.59KB
plugin-detail (SelectField-CzyeBng4.js)	0.90KB	0.49KB
plugin-detail (SignatureField-CpTUWrGx.js)	2.97KB	1.10KB
plugin-detail (SliderField-Bc_-lz_G.js)	1.00KB	0.49KB
plugin-detail (SummaryField-ugYPYxjP.js)	0.47KB	0.36KB
plugin-detail (TextAreaField-B3nuiecT.js)	1.09KB	0.59KB
plugin-detail (TextField-pVMJo3-2.js)	0.82KB	0.43KB
plugin-detail (TimeField-CZQZw_QZ.js)	0.50KB	0.34KB
plugin-detail (UrlField-DBWYuNEP.js)	0.98KB	0.52KB
plugin-detail (UserField-B14hh0-B.js)	2.33KB	0.90KB
plugin-detail (VectorField-CKg9jdGa.js)	0.78KB	0.44KB
plugin-detail (index-Bss7KnXA.js)	3310.20KB	771.36KB
plugin-detail (index.js)	1.08KB	0.60KB
plugin-editor (MonacoImpl-hfdmoz6k.js)	18.15KB	5.59KB
plugin-editor (index-CuYbY6xb.js)	10.10KB	3.32KB
plugin-editor (index.js)	0.19KB	0.15KB
plugin-form (index.js)	67.07KB	14.02KB
plugin-gantt (index.js)	249.49KB	60.32KB
plugin-grid (index.js)	110.41KB	28.92KB
plugin-kanban (KanbanEnhanced-CpLrdlq-.js)	33.89KB	9.40KB
plugin-kanban (KanbanImpl-CKLLfmaX.js)	14.19KB	4.18KB
plugin-kanban (index-BN2YhB8L.js)	31.27KB	9.24KB
plugin-kanban (index.js)	0.42KB	0.26KB
plugin-kanban (sortable.esm-CNNHgHk5.js)	71.43KB	18.99KB
plugin-list (index.js)	3228.40KB	754.60KB
plugin-map (index.js)	130.49KB	31.72KB
plugin-map (maplibre-gl-DLx7lg9o.js)	1454.45KB	310.19KB
plugin-markdown (MarkdownImpl-E6vCIsNj.js)	256.68KB	64.45KB
plugin-markdown (index-Dr10kVgr.js)	9.63KB	3.17KB
plugin-markdown (index.js)	0.19KB	0.15KB
plugin-report (index.js)	86.28KB	17.18KB
plugin-timeline (index.js)	108.70KB	25.29KB
plugin-view (index.js)	141.51KB	35.69KB
plugin-workflow (index.js)	82.94KB	17.11KB
react (LazyPluginLoader.js)	3.77KB	1.33KB
react (SchemaRenderer.js)	9.04KB	2.82KB
react (index.js)	0.76KB	0.42KB
tenant (TenantContext.js)	0.31KB	0.25KB
tenant (TenantGuard.js)	1.04KB	0.43KB
tenant (TenantProvider.js)	2.76KB	0.98KB
tenant (TenantScopedQuery.js)	0.77KB	0.44KB
tenant (index.js)	0.75KB	0.38KB
tenant (resolver.js)	2.64KB	0.76KB
tenant (useTenant.js)	0.50KB	0.32KB
tenant (useTenantBranding.js)	0.62KB	0.39KB
types (ai.js)	0.20KB	0.17KB
types (api-types.js)	0.20KB	0.18KB
types (app.js)	2.87KB	0.99KB
types (base.js)	0.20KB	0.18KB
types (blocks.js)	0.20KB	0.18KB
types (complex.js)	0.20KB	0.18KB
types (crud.js)	0.20KB	0.18KB
types (data-display.js)	0.20KB	0.18KB
types (data-protocol.js)	0.20KB	0.19KB
types (data.js)	0.20KB	0.18KB
types (designer.js)	0.74KB	0.39KB
types (disclosure.js)	0.20KB	0.18KB
types (feedback.js)	0.20KB	0.18KB
types (field-types.js)	0.20KB	0.18KB
types (form.js)	0.20KB	0.18KB
types (index.js)	1.25KB	0.58KB
types (layout.js)	0.20KB	0.18KB
types (mobile.js)	0.20KB	0.18KB
types (navigation.js)	0.20KB	0.18KB
types (objectql.js)	0.20KB	0.18KB
types (overlay.js)	0.20KB	0.18KB
types (permissions.js)	0.20KB	0.18KB
types (plugin-scope.js)	0.20KB	0.18KB
types (record-components.js)	0.20KB	0.19KB
types (registry.js)	0.20KB	0.18KB
types (reports.js)	0.20KB	0.18KB
types (tenant.js)	0.20KB	0.18KB
types (theme.js)	0.20KB	0.18KB
types (ui-action.js)	0.20KB	0.18KB
types (views.js)	0.20KB	0.18KB
types (widget.js)	0.20KB	0.18KB
types (workflow.js)	0.20KB	0.18KB

Size Limits

✅ Core packages should be < 50KB gzipped
✅ Component packages should be < 100KB gzipped
⚠️ Plugin packages should be < 150KB gzipped

dependabot bot added the dependencies label Mar 17, 2026

github-actions bot added the apps label Mar 17, 2026

github-actions bot merged commit 84b6b8b into main Mar 17, 2026
5 of 11 checks passed

github-actions bot approved these changes Mar 17, 2026

View reviewed changes

dependabot bot deleted the dependabot/npm_and_yarn/next-16.1.7 branch March 17, 2026 21:33

vercel bot deployed to Preview – objectui-demo March 17, 2026 21:33 View deployment

vercel bot deployed to Preview – objectui March 17, 2026 21:44 View deployment

vercel bot deployed to Preview – objectui-storybook March 17, 2026 21:45 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump next from 16.1.6 to 16.1.7#1086

chore(deps): bump next from 16.1.6 to 16.1.7#1086
github-actions[bot] merged 1 commit intomainfrom
dependabot/npm_and_yarn/next-16.1.7

dependabot bot commented on behalf of github Mar 17, 2026

Uh oh!

dependabot bot commented on behalf of github Mar 17, 2026

Uh oh!

vercel bot commented Mar 17, 2026 •

edited

Loading

Uh oh!

Uh oh!

github-actions bot commented Mar 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 17, 2026

v16.1.7

Core Changes

Credits

Uh oh!

dependabot bot commented on behalf of github Mar 17, 2026

Labels

Uh oh!

vercel bot commented Mar 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

github-actions bot commented Mar 17, 2026

✅ Console Performance Budget

📦 Bundle Size Report

Size Limits

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

vercel bot commented Mar 17, 2026 •

edited

Loading