Skip to content

chore(deps): bump next from 16.3.5 to 16.3.6 in the next group across 1 directory - #775

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/next-d85e515fd1
Sep 28, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/next-d85e515fd1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the next group with 1 update in the / directory: next.

Updates next from 16.3.5 to 16.3.6

Release notes

Sourced from next's releases.

v16.3.6

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 28, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) September 28, 2026 07:11
@dependabot dependabot Bot changed the title chore(deps): bump next from 16.3.5 to 16.3.6 in the next group chore(deps): bump next from 16.3.5 to 16.3.6 in the next group across 1 directory Sep 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-d85e515fd1 branch 7 times, most recently from 9519a75 to 52ec3db Compare September 28, 2026 07:48
Bumps the next group with 1 update in the / directory: [next](https://github.com/vercel/next.js).


Updates `next` from 16.3.5 to 16.3.6
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.5...v16.3.6)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: next
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-d85e515fd1 branch from 52ec3db to 7cda919 Compare September 28, 2026 07:54
@github-actions
github-actions Bot merged commit 790566b into main Sep 28, 2026
13 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/next-d85e515fd1 branch September 28, 2026 07:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants