Skip to content

chore(deps): bump next from 16.3.6 to 16.3.8 in the next group across 1 directory - #870

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/next-9284864cd3
Oct 5, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/next-9284864cd3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the next group with 1 update in the / directory: next.

Updates next from 16.3.6 to 16.3.8

Release notes

Sourced from next's releases.

v16.3.8

This release contains security fixes for the following advisories:

High:

Medium:

Low:

v16.3.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)

Credits

Huge thanks to @​lukesandberg for helping!

Commits
  • b0fad0d v16.3.8
  • 719e4c6 [lts-active] Scope response cache keys to their source route (#218)
  • e92db45 [lts-active] Fix metadata propagation for deduplicated nested caches (#223)
  • 40c2ba9 [lts-active] Match Next data paths case-sensitively (#196)
  • 2d9f50a [lts-active] Fix MCP middleware DNS rebinding (#213)
  • bd9214f [lts-active] Fix draft mode leaks through cross-request 'use cache' dedupli...
  • 8db4a62 [lts-active][webpack] Ensure dynamicParams is respected in `opengraph-image...
  • e002ad6 [lts-active] fix(next/image): Pin DNS resolution when fetching external image...
  • 4c20699 v16.3.7
  • 2521aec [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...
  • See full diff in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 5, 2026
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 5, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) October 5, 2026 07:11
@dependabot dependabot Bot changed the title chore(deps): bump next from 16.3.6 to 16.3.8 in the next group chore(deps): bump next from 16.3.6 to 16.3.8 in the next group across 1 directory Oct 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-9284864cd3 branch from 0563c9e to 6afa120 Compare October 5, 2026 07:19
Bumps the next group with 1 update in the / directory: [next](https://github.com/vercel/next.js).


Updates `next` from 16.3.6 to 16.3.8
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.6...v16.3.8)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: next
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-9284864cd3 branch from 6afa120 to e524edf Compare October 5, 2026 07:25
@github-actions
github-actions Bot merged commit 79b2a05 into main Oct 5, 2026
13 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/next-9284864cd3 branch October 5, 2026 07:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants