Skip to content

chore(deps-dev): bump eslint-config-next from 14.2.35 to 16.1.6#13

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/eslint-config-next-16.1.6
Open

chore(deps-dev): bump eslint-config-next from 14.2.35 to 16.1.6#13
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/eslint-config-next-16.1.6

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Mar 5, 2026

Bumps eslint-config-next from 14.2.35 to 16.1.6.

Release notes

Sourced from eslint-config-next's releases.

v16.1.6

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Upgrade to swc 54 (#88207)
  • implement LRU cache with invocation ID scoping for minimal mode response cache (#88509)
  • tweak LRU sentinel key (#89123)

Credits

Huge thanks to @​mischnic, @​wyattjoh, and @​ztanner for helping!

v16.1.5

Please refer the following changelogs for more information about this security release:

https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472 https://vercel.com/changelog/summary-of-cve-2026-23864

v16.1.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Only filter next config if experimental flag is enabled (#88733)

Credits

Huge thanks to @​mischnic for helping!

v16.1.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Fix linked list bug in LRU deleteFromLru (#88652)
  • Fix relative same host redirects in node middleware (#88253)

Credits

Huge thanks to @​acdlite and @​ijjk for helping!

v16.1.1-canary.36

Core Changes

  • Rename rewroteURL to rewrittenPathname in request metadata: #88751
  • Simplify getImplicitTags to accept pathname instead of url object: #88753
  • Add NEXT_DEPLOYMENT_ID global: #86738

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Upgrade eslint-config-next from 14.2.35 to 16.1.7 to pull in security fixes and the latest Next.js ESLint rules. Dev-only change; no runtime impact.

  • Migration
    • Install deps, run eslint --fix, and address new warnings/errors.
    • Update local ESLint config if new rules conflict with existing settings.

Written for commit 6df0cfc. Summary will update on new commits.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Mar 5, 2026
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 1 file

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="package.json">

<violation number="1" location="package.json:61">
P1: Major version incompatibility: `eslint-config-next@16.x` requires ESLint 9 with flat config, but the project uses ESLint 8 (`^8.56.0`) with a legacy `.eslintrc.json`. It also expects Next.js 16, but the project uses `next@^14.2.0`. This will break `pnpm lint` and likely cause peer dependency installation failures.

To adopt eslint-config-next 16, you would also need to:
- Upgrade `eslint` to `^9.x`
- Migrate `.eslintrc.json` to `eslint.config.mjs` (flat config format)
- Upgrade `next` to `^16.x` (and React to 19)

Otherwise, keep eslint-config-next aligned with your Next.js version: `"eslint-config-next": "^14.2.0"`.</violation>
</file>

Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.

Comment thread package.json Outdated
"autoprefixer": "^10.4.18",
"eslint": "^8.56.0",
"eslint-config-next": "^14.2.0",
"eslint-config-next": "^16.1.6",
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot Mar 5, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1: Major version incompatibility: eslint-config-next@16.x requires ESLint 9 with flat config, but the project uses ESLint 8 (^8.56.0) with a legacy .eslintrc.json. It also expects Next.js 16, but the project uses next@^14.2.0. This will break pnpm lint and likely cause peer dependency installation failures.

To adopt eslint-config-next 16, you would also need to:

  • Upgrade eslint to ^9.x
  • Migrate .eslintrc.json to eslint.config.mjs (flat config format)
  • Upgrade next to ^16.x (and React to 19)

Otherwise, keep eslint-config-next aligned with your Next.js version: "eslint-config-next": "^14.2.0".

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At package.json, line 61:

<comment>Major version incompatibility: `eslint-config-next@16.x` requires ESLint 9 with flat config, but the project uses ESLint 8 (`^8.56.0`) with a legacy `.eslintrc.json`. It also expects Next.js 16, but the project uses `next@^14.2.0`. This will break `pnpm lint` and likely cause peer dependency installation failures.

To adopt eslint-config-next 16, you would also need to:
- Upgrade `eslint` to `^9.x`
- Migrate `.eslintrc.json` to `eslint.config.mjs` (flat config format)
- Upgrade `next` to `^16.x` (and React to 19)

Otherwise, keep eslint-config-next aligned with your Next.js version: `"eslint-config-next": "^14.2.0"`.</comment>

<file context>
@@ -58,7 +58,7 @@
     "autoprefixer": "^10.4.18",
     "eslint": "^8.56.0",
-    "eslint-config-next": "^14.2.0",
+    "eslint-config-next": "^16.1.6",
     "playwright-core": "^1.58.1",
     "postcss": "^8.4.35",
</file context>
Suggested change
"eslint-config-next": "^16.1.6",
"eslint-config-next": "^14.2.0",
Fix with Cubic

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/eslint-config-next-16.1.6 branch from aa99fe9 to f16d9af Compare March 17, 2026 18:34
Bumps [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) from 14.2.35 to 16.1.6.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/commits/v16.1.6/packages/eslint-config-next)

---
updated-dependencies:
- dependency-name: eslint-config-next
  dependency-version: 16.1.6
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/eslint-config-next-16.1.6 branch from f16d9af to 6df0cfc Compare March 17, 2026 18:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants