deps(npm): bump eslint-config-next from 16.1.6 to 16.3.4 #61

Open
dependabot[bot] wants to merge 1 commits from dependabot/npm_and_yarn/eslint-config-next-16.3.4 into main
pull from: dependabot/npm_and_yarn/eslint-config-next-16.3.4
dependabot[bot] commented 2026-09-04 04:13:50 +00:00 (Migrated from github.com)

Bumps eslint-config-next from 16.1.6 to 16.3.4.

Release notes

Sourced from eslint-config-next's releases.

v16.3.4

Follow-up release to v16.3.3 re-enabling AVIF Image Optimization (#97949).

The following bug fixes have been backported. It does not include all pending features/changes on canary.

  • testmode: Fix infinite recursion in testmode passthrough fetch (#97691)
  • Fix build error when aliasing typescript to @​typescript/typescript6 (#97997)
  • Fix unset crossOrigin in Turbopack manifests (#97930)

Credits

Huge thanks to @​eps1lon, @​mischnic, and @​timneutkens for helping!

v16.3.3

This release contains security fixes for the following advisories:

Critical:

v16.3.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [backport] Scope app-entry export validation to files inside the app directory (#97357)
  • [backport] Fix catch-all index page being served for every other slug (#97416)
  • [16.3] Turbopack: don't trace embedded WASM loader helpers (#97353) (#97463)
  • [16.3] Turbopack: retain conditions when replacing resolve request keys (#97453)
  • [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#97419)
  • [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

v16.3.1

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-config-next since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) from 16.1.6 to 16.3.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vercel/next.js/releases">eslint-config-next's releases</a>.</em></p> <blockquote> <h2>v16.3.4</h2> <p>Follow-up release to <a href="https://github.com/vercel/next.js/releases/tag/v16.3.3">v16.3.3</a> re-enabling AVIF Image Optimization (<a href="https://redirect.github.com/vercel/next.js/pull/97949">#97949</a>).</p> <p>The following bug fixes have been backported. It does <strong>not</strong> include all pending features/changes on canary.</p> <ul> <li>testmode: Fix infinite recursion in testmode passthrough fetch (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/97691">#97691</a>)</li> <li>Fix build error when aliasing typescript to <code>@​typescript/typescript6</code> (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/97997">#97997</a>)</li> <li>Fix unset crossOrigin in Turbopack manifests (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/97930">#97930</a>)</li> </ul> <h3>Credits</h3> <p>Huge thanks to <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a>, <a href="https://github.com/mischnic"><code>@​mischnic</code></a>, and <a href="https://github.com/timneutkens"><code>@​timneutkens</code></a> for helping!</p> <h2>v16.3.3</h2> <p>This release contains security fixes for the following advisories:</p> <p>Critical:</p> <ul> <li><a href="https://github.com/vercel/next.js/security/advisories/GHSA-p293-qw3h-jr36">Unauthenticated Remote Code Execution on windows-hosted servers</a></li> <li><a href="https://github.com/vercel/next.js/security/advisories/GHSA-2xp9-vwfh-vxw4">Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used</a></li> </ul> <h2>v16.3.2</h2> <blockquote> <p>[!NOTE] This release is backporting bug fixes. It does <strong>not</strong> include all pending features/changes on canary.</p> </blockquote> <h3>Core Changes</h3> <ul> <li>[backport] Scope app-entry export validation to files inside the app directory (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/97357">#97357</a>)</li> <li>[backport] Fix catch-all index page being served for every other slug (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/97416">#97416</a>)</li> <li>[16.3] Turbopack: don't trace embedded WASM loader helpers (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/97353">#97353</a>) (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/97463">#97463</a>)</li> <li>[16.3] Turbopack: retain conditions when replacing resolve request keys (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/97453">#97453</a>)</li> <li>[16.3.x] Fix Turbopack worker chunk loading with asset prefix (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/97419">#97419</a>)</li> <li>[16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (<a href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/97603">#97603</a>)</li> </ul> <h3>Credits</h3> <p>Huge thanks to <a href="https://github.com/lubieowoce"><code>@​lubieowoce</code></a>, <a href="https://github.com/unstubbable"><code>@​unstubbable</code></a>, <a href="https://github.com/timneutkens"><code>@​timneutkens</code></a>, <a href="https://github.com/mischnic"><code>@​mischnic</code></a>, and <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a> for helping!</p> <h2>v16.3.1</h2> <h2>What's Changed</h2> <ul> <li>[16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by <a href="https://github.com/lukesandberg"><code>@​lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96653">vercel/next.js#96653</a></li> <li>[16.x] [turbopack] Add <code>turbopack_ecmascript</code> and <code>turbopack_wasm</code>'s embeded FS to <code>internal_assets_conditions</code> by <a href="https://github.com/lukesandberg"><code>@​lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96655">vercel/next.js#96655</a></li> <li>[16.x] [turbopack] Collapse nested promises in the analyzer by <a href="https://github.com/sampoder"><code>@​sampoder</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96675">vercel/next.js#96675</a></li> <li>[16.x] fix(next/image): preserve image response after optimization by <a href="https://github.com/styfle"><code>@​styfle</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96733">vercel/next.js#96733</a></li> <li>[16.3.x] Default deploy e2e tests to the repo next version by <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96900">vercel/next.js#96900</a></li> <li>[backport] Bump <code>@​swc/helpers</code> by <a href="https://github.com/mischnic"><code>@​mischnic</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/96885">vercel/next.js#96885</a></li> <li>[backport] [turbopack] Raise registration calls in hoisted modules to the top by <a href="https://github.com/lukesandberg"><code>@​lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97308">vercel/next.js#97308</a></li> <li>[backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by <a href="https://github.com/lukesandberg"><code>@​lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97302">vercel/next.js#97302</a></li> <li>[backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by <a href="https://github.com/lukesandberg"><code>@​lukesandberg</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97317">vercel/next.js#97317</a></li> <li>[backport] Restore the live <code>headers()</code> view of the incoming request by <a href="https://github.com/unstubbable"><code>@​unstubbable</code></a> in <a href="https://redirect.github.com/vercel/next.js/pull/97311">vercel/next.js#97311</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vercel/next.js/commit/299180d3315c7ebd7b199d2b1a265b5986c5fc7d"><code>299180d</code></a> v16.3.4</li> <li><a href="https://github.com/vercel/next.js/commit/a9a1cb7859f178f830ad3773b303130c21b19586"><code>a9a1cb7</code></a> v16.3.3</li> <li><a href="https://github.com/vercel/next.js/commit/d0ac8828c2fe6026dd7d700488bfd8289711fde6"><code>d0ac882</code></a> v16.3.2</li> <li><a href="https://github.com/vercel/next.js/commit/3d32eb870fb4c7009d580a31e2de81a626562270"><code>3d32eb8</code></a> v16.3.1</li> <li><a href="https://github.com/vercel/next.js/commit/d73f5622e226358dcef8cf7a8a373333ff265ae7"><code>d73f562</code></a> v16.3.0</li> <li><a href="https://github.com/vercel/next.js/commit/4fd843fb488f770c5b2023ddc58ff4be4ee81f14"><code>4fd843f</code></a> v16.3.0-canary.107</li> <li><a href="https://github.com/vercel/next.js/commit/9480f7f9ffdc271014d959e7b10d681882eaabb5"><code>9480f7f</code></a> v16.3.0-canary.106</li> <li><a href="https://github.com/vercel/next.js/commit/a8dcd2562f0bde39380d48507ec3fffd86c21e53"><code>a8dcd25</code></a> v16.3.0-canary.105</li> <li><a href="https://github.com/vercel/next.js/commit/38f0cdee4659b1b8f987bc46e3f1aacd12ee5c90"><code>38f0cde</code></a> v16.3.0-canary.104</li> <li><a href="https://github.com/vercel/next.js/commit/f3edea1b06730ce507aeb1b10c8e4f652ca5540d"><code>f3edea1</code></a> v16.3.0-canary.103</li> <li>Additional commits viewable in <a href="https://github.com/vercel/next.js/commits/v16.3.4/packages/eslint-config-next">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for eslint-config-next since your current version.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint-config-next&package-manager=npm_and_yarn&previous-version=16.1.6&new-version=16.3.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
dependabot[bot] commented 2026-09-04 04:13:50 +00:00 (Migrated from github.com)

Labels

The following labels could not be found: website. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

### Labels The following labels could not be found: `website`. Please create it before Dependabot can add it to a pull request. Please fix the above issues or remove invalid values from `dependabot.yml`.
This pull request has changes conflicting with the target branch.
  • package-lock.json
  • package.json
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/npm_and_yarn/eslint-config-next-16.3.4:dependabot/npm_and_yarn/eslint-config-next-16.3.4
git checkout dependabot/npm_and_yarn/eslint-config-next-16.3.4
Sign in to join this conversation.