Update dependency eslint-config-next to v13.5.11 by renovate[bot] · Pull Request #4 · descope-sample-apps/linkedin-sample-app

renovate · 2025-01-20T23:37:39Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
eslint-config-next (source)	`13.4.19` → `13.5.11`

Release Notes

vercel/next.js (eslint-config-next)

`v13.5.11`

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Lock swc binaries version

`v13.5.10`

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Match subrequest handling for edge and node

`v13.5.9`

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.
This release contains a security patch for CVE-2025-29927.

Core Changes

[backport] middleware subrequest patch (#77418)

`v13.5.8`

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Update React from d900fad to 1dba980: #74202
[i18n] Routing fix: #70761

Credits

Huge thanks to @wyattjoh and @ztanner for helping!

`v13.5.7`

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Remove invalid fallback revalidate value (#69990)
Shared Revalidate Timings (#64370)

Credits

Huge thanks to @wyattjoh and @ijjk for helping!

`v13.5.6`

Compare Source

Core Changes

Upgrade edge-runtime/cookies #57021
Patch React with fix for write-after-close for ReadableStream #57011

Credits

Huge thanks to @ijjk @huozhi @gnoff for helping!

`v13.5.5`

Compare Source

Core Changes

Update parallelizing tasks with webpackBuildWorker config: #56287
Misc Typescript and export updates: #55841
chore: pass defineEnv from next.js to rust directly: #56216
Expose util internally for debugging: #56381
App Router - preinitialize chunks during SSR: #54752
fix: use fs.existsSync to avoid race condition: #56387
Ensure loader generated export default has name: #56388
Move Edge SSR event waitUntil into the handler: #56404
fix: avoid unnecessary existSync call: #56419
fix: avoid creation of buffers for read ops: #56421
fix empty externals list, pnpm special case, and project path: #56402
chore: extract edge-app-route loader template: #56424
Separate RSC and SSR jsx-runtime modules: #56438
Async Batcher: #56423
Fix cli log next.js color: #56448
Turbopack: Implement Server Actions: #53890
Component Module Types: #56454
refactor: rewrite config schema in zod: #56383
Dev Service: #56442
feat(turbopack): port next.js template loading logic: #56425
Chunking Refactor Step 1: #56467
Use native node:fs in taskfile.js: #56491
Loose RSC import restrictions for 3rd party packages: #56501
turbopack: Chunking Refactor Step 2 : #56504
update turbopack, fix sass peer dependency: #56508
Remove ServerDirectiveTransformer: #56496
Improve failed to fetch RSC error: #56517
misc: fix wrong next start start duration: #56512
turbopack: Extract as_chunk into shared ChunkType trait: #56506
Flatten recursive wildcard exports in barrel optimization: #56489
Turbopack + app router: always use externals for predefined packages: #56440
fix: log error cause: #56528
Unsilence Taskr Webpack errors: #56542
refactor: cleanup app render: #56538
fix: don't add isolateModules to tsconfig when extending from tsconfig with verbatimModuleSyntax: #54164
enable verbatimModuleSyntax to make type imports/exports explicit: #56551
Ensure react-server-dom-turbopack-experimental uses the right package: #56560
Fix build restart log: #56543
feat(turbopack): add support for edge app pages: #56426
Improve error handling of Server Actions with skewed deployment: #56618
misc: split app-render into smaller functions: #56611
remove unnecessary structuredClone: #56570
Fix trace ignore handling: #56674
fix(next-core): allow sass loader for foreign codes: #56679
Fix SSG query with experimental-compile: #56680
Ensure rewrites are included in build manifest when using Turbopack: #56692
fix static worker restart behavior: #56728
Improve internal waitUntil utility: #56720
Fix reconnection loop when devserver is offline: #56698
Fix ensurePage for client-side navigation to / in Turbopack: #56704
ci: add job summary to the test suite runs: #56742
Prefer module over main on main fields for app router server compiler: #56532
Check origins of Server Action requests: #56753
OpenTelemetry: ignore bubble errors to avoid spamming traces: #56625
fix(turbopack): always alias server-only and client-only: #56760
Utilize Promise.withResolvers: #56764
Revert "Prefer module over main on main fields for app router server compiler": #56766
Revalidate Type: #56763
Revert static worker refactor: #56767
memoize useParams: #56771
Turbopack: Chunking Refactoring: #56756
Chunking Refactoring followup fixes: #56789
put app code into a separate layer: #56800
fix: add x-forwarded-* headers: #56797
fix(turbopack): middleware path and aliases: #56804
Implement preferredRegion array in Turbopack: #56743
Fix build traces case: #56817
Revert "Drop ipc server headers filters (#56226)": #56836
Implement getOptimizedModuleAliases for Turbopack: #56839
chore: bump undici: #56851
bump: edge-runtime: #56856
feat(turbopack): support basic next/dynamic: #56389
Revert "feat(turbopack): support basic next/dynamic": #56885

Documentation Changes

add digest property to error prop: #56339
Updates MDX docs: #56378
Update redirect.mdx: #56414
docs: add missing word: #56547
docs: update code snippet for correct file name: #56006
corrected sentence: #56595
clarify client components render on server on full page load: #55469
docs(router): clarify dynamic route slug is about a file name, not "folder": #56596
Update 01-contribution-guide.mdx: Fix a typo: #56665
fix(docs): adjust api route documentation examples: #56660
Updates Large Page Data error message doc to use JSON.parse to make reading output easier: #56713
Docs: Add missing description field: #56749
Changes codeblock filename delimiter: #56712
Update supported-browsers.mdx: #56815
docs: fix cypress script typo in 10-testing.mdx: #56765
Fix typo: #56863

Example Changes

Maintenance: minor example dep bumps to fix moderate vulns: #56375
Update actions.ts: #56579
updated fauna fql v10: #56185
fix lint error from fauna example: #56719
chore(example): bump @radix-ui/react-icons: #56452
fix: http2 example issue: #56768

Misc Changes

Fix mjs import for Turbopack test: #56354
Add test case for the permalink option of useFormState: #56329
Fix code freeze disable handling: #56340
add cargo fmt to lint staged: #56430
fix: .../templates/*/app/layout.* import order: #56380
Update .node-version: #56460
Fix logging level in actions test: #56473
Remove app dir warning test: #56350
Use consistent name for App Router tests: #56352
Remove isTurbo check in custom-routes test: #56360
test: speed up isolated next instance test setup: #56525
Update rust-toolchain to nightly-2023-10-06: #56541
update test manifest: #56522
chore: bump pnpm to 8.9: #56649
fix: next dev with edge runtime on windows: #56502
invert test filtering logic to exclude known failing: #56663
(test only) Integration tests: remove flatMap polyfill: #56546
Use node:fs instead of fs-extra in .github/actions: #56536
Use unique names for separate test suites: #56695
misc: tweak stats github action: #56694
CI: add manual workflow for running e2e on prod: #56738
Improve chunk encoding test to check right path for Turbopack: #56747
change those->some for clarity: #56688
docs: fix typo in Update 02-get-static-paths.mdx: #56757
Break out E2E deploy test workflow to its own: #56755
Trigger canary release nightly: #56758
feat: add self-documenting .env.example file: #56469
update manifest: #56737
docs: fix several typos: #56788
Skip artifact download for test e2e deploy workflow: #56807
Add missing nanoid dependency to app-dir tests: #56830
Remove specific hash checks for metadata.test.ts: #56843
Fix CSP test when using Turbopack: #56833
Skip webpack specific tests in Turbopack test run: #56877

Credits

Huge thanks to @ijjk, @timneutkens, @shuding, @wyattjoh, @Syphini, @manovotny, @ForsakenHarmony, @gnoff, @anonrig, @viktorronnback, @Rylab, @sokra, @hamirmahal, @huozhi, @jridgewell, @SukkaW, @wbinnssmith, @feedthejim, @balazsorban44, @jazsouf, @2XG-DEV, @stefanprobst, @ztanner, @mzab1985, @Mustafadagkiranlar, @JoRyGu, @cmbritten, @styfle, @Krishnanand2517, @bahag-buttf, @kwonoj, @Shadid12, @delbaoliveira, @mayankkamboj47, @dvoytenko, @mayank1513, @himself65, @suravshrestha, @fvaysh, @dianacpg, @joristirado, and @Kikobeats for helping!

`v13.5.4`

Compare Source

Core Changes

chore: NextJS -> Next.js: #55961
fix-failed-to-generate-self-signed-certificate issue:#55891: #55947
Remove .test.js from dist: #55946
Turbopack next/font/google: don't insert css rules for multiple weights or styles: #55852
Fix stale revalidate stream handling: #55978
turbopack: improve turbopack/test stability: #56024
Mark testmode fetches internal: #56036
chore: Remove 'beta.' Subdomain from beta.nextjs.org Links: #55924
Remove experimental.sharedPool: #56021
fix(worker): pass env to build worker w/ config.experimental.workerThreads: #55257
Update swc_core to v0.83.26: #55780
Revert "Update swc_core to v0.83.26": #56077
fix reporting of illegal segments when directory only contains irrelevant files: #56076
Make permanentRedirect return 308 in route handlers: #56065
Remove unneeded next-dev js in next-core: #56039
Fix: Use boolean instead of false for experimental logging config: #56110
chore: remove chalk in favor of picocolors: #55992
Revert: "Generate prefetch RSC payload during build for SSR paths (#54403)": #56059
fetching logging on edge: #56108
Optimize build trace handling: #56048
Update font data: #56121
feat(turbopack): port bloom filter to nexturbo: #55678
Fixes performance problems due to TaskScopes: #55721
perf: remove react dom legacy from app router: #56082
perf: replace zod with superstruct: #56083
perf: externalise ws for bundled server: #56095
misc: refactor node utils: #56096
Add support for skipTrailingSlashRedirect and skipMiddlewareUrlNormalize in Turbopack: #56147
Add experimental.scrollRestoration for Turbopack: #56150
misc: refactor handleExternals: #56161
perf: add option to bundle pages externals: #56162
Allow jest to run with use server directive: #56148
Update experimental compile cache handling: #56139
App render related code clean up: #56178
Add support for i18n config in Turbopack: #56182
Implement list of config options for Turbopack: #56188
Turbopack: add support for an assetPrefix and basePath: #56058
update turbopack: #56197
Update supported options list to reflect #56188: #56200
Add support for experimental.logging.level in Turbopack: #56201
Add next.config.js options to turbopack warning file: #56207
fix: @libsql/client build error: #56192
chore: bump postcss: #56225
Add additional handling for experimental-compile: #56224
Drop ipc server headers filters: #56226
only override NODE_EXTRA_CA_CERTS when using experimental https flag: #56252
Pass same mangling option as terser to SWC minifier: #56281
update turbopack: #56285
clear require cache only when needed: #56198
misc: enable source maps for bundled runtime: #56289
misc: shortcut styled-jsx in external resolution: #56291
Support serverRuntimeConfig and publicRuntimeConfig in Turbopack: #56310
Reland static prefetches & fix prefetch bailout behavior: #56228
fix(#53190): add missing crossOrigin to assetsPrefix resources: #56311
misc: fix instrumentation with bundled server: #56318
fix(next/client): keep hash when navigating from app to pages router: #56223
fix: support both decoded and encoded url requests of conventioned files : #56187
fix: Invalid URL (404) provided on server actions error: #56323
Revert "misc: shortcut styled-jsx in external resolution (#56291)": #56334
Fix build output logging order: #56335

Documentation Changes

docs: add not-found to file conventions page: #55944
Update 03-linking-and-navigating.mdx: #55907
docs: Correct place for passing extension option to createMDX(): #55967
docs-55629 update router cache column in cache interactions api table: #55630
Update 03-linking-and-navigating.mdx: #55969
Updates "Prerender Error" page for App Router: #56044
Add the default import alias to create-next-app prompt for clarity: #55896
Update revalidatePath.mdx to fix confusing wording of arguments section.: #56099
docs: Renamed function that is used by other name: #56170
(docs) Document Server Actions .bind method: #56164
docs: Use Response.json over NextResponse.json: #56173
correcting link to useSearchParams ref: #56169
docs(sharp-missing-in-production.mdx): update standalone command: #56191
docs(sharp-missing-in-production.mdx): update standalone command: #56239
Update image.mdx: #56269
Update image.mdx: #56266

Example Changes

chore(examples): bump dependency versions: #55899
Update to with-supertokens example app: #56035
Update dependencies in examples : #55993
Chore/update with supabase demo deploy button: #52483
chore(examples): remove deprecated dependency from with-jest: #56152
chore(examples): fix with-jest types: #56193
(Examples) update Grafbase example: #54705
fix: typo in with-stripe-typescript example: #56274

Misc Changes

Skip production tests for Turbopack: #56045
Fix invalid build-and-test workflow: #56053
turbopack: Add more skipped tests: #56052
Skip next build test: #56079
add flakey test: #56080
Skip more production tests for turbopack: #56084
Ensure tests suites have unique names: #56085
Skip experimental.nextScriptWorkers test for Turbopack: #56086
Skip production tests for Turbopack: #56089
Skip Babel tests for Turbopack: #56091
misc: add node-version file: #55938
Ensure unique name for app dir css tests: #56088
Decrease default test timeouts: #56116
misc: stop hiding node_modules in vscode: #56081
special case timeout on windows: #56120
Turbopack: update test manifest: #56133
More test updates: #56146
fix(cna): pin dependency versions: #56177
Update swc_core to v0.83.28: #56134
Fix middleware-general test for Turbopack: #56211
More Turbopack test fixes: #56248
update test mainfest: #56214
More Turbopack fixes: #56275
More Turbopack fixes: #56299
misc: update code owners: #56290
Fix flaky test for size output: #56303
update webp crate: #56307
Remove buildId test as it's no longer relevant: #56316
Add code freeze GitHub actions for releasing: #56325
test: add flaky turbopack integration tests to manifest: #56309

Credits

Huge thanks to @balazsorban44, @sdkdeepa, @aayman997, @mayank1513, @timneutkens, @2XG-DEV, @eliot-akira, @hi-matthew, @riobits, @wbinnssmith, @ijjk, @sokra, @dvoytenko, @rishabhpoddar, @manovotny, @A7med3bdulBaset, @huozhi, @jridgewell, @joulev, @SukkaW, @kdy1, @feedthejim, @Fredkiss3, @styfle, @MildTomato, @ForsakenHarmony, @walfly, @bzhn, @shuding, @boylett, @Loki899899, @devrsi0n, @ImBIOS, @vinaykulk621, @ztanner, @sdaigo, @hamirmahal, @blurrah, @omarmciver, and @alexBaizeau for helping!

`v13.5.3`

Compare Source

Core Changes

only put css in entry_css_files: #55585
update taskfile to generate types during build: #55628
refactor: use fs.existsSync instead of accessSync: #55675
Capitalize compiling log: #55685
Split prerending by route kind: #55622
turbopack: Update the next/dist/esm rewrite ResolvePlugin: #55689
refactor: modernize get-online with dns/promises: #55674
ensure fetchServerResponse is a valid record when stored in router cache: #55690
fix(react-refresh-utils): avoid memory leaks caused by prevExports: #53797
fix(ts): allow auto-import of next/navigation: #55743
remove --watch from generate_types task: #55748
Remove the left padding in next info output: #55704
test(turbopack): remove escape hatches for custom turbopack bindings: #55757
fix: Invoke cancel, only if the stream is not closed: #55684
Revert "fix: Invoke cancel, only if the stream is not closed (#55684)": #55764
fix thenable types & update another incorrect cache record: #55758
turbopack: Rewrite ESM modules to CJS during client transition: #55693
Fix output log extra new line: #55770
Remove unused internal env var: #55762
fix Image when used with --experimental-https: #55775
chore: update turbopack to turbopack-230922.2: #55828
Move DefineEnv to separate file: #55811
Remove legacy checks for unstable_getXProps: #55813
Remove next-typescript check in webpack config: #55819
Correctly mark turbo sessions in telemetry: #55835
feat(turbopack): construct output path with distDir next.js config: #55613
Remove extra type: #55837
Update rust toolchain to nightly-2023-09-21: #55774
Remove unused internal env var: #55762
fix Image when used with --experimental-https: #55775
chore: update turbopack to turbopack-230922.2: #55828
Move DefineEnv to separate file: #55811
Remove legacy checks for unstable_getXProps: #55813
Remove next-typescript check in webpack config: #55819
Correctly mark turbo sessions in telemetry: #55835
feat(turbopack): construct output path with distDir next.js config: #55613
Remove extra type: #55837
Update rust toolchain to nightly-2023-09-21: #55774
Ensure next-swc-loader types are used: #55846
Use swc for runtime bundling: #55842
fix bugs pertaining to server actions + navigation: #55853
Ensure opentelemetry mismatched version error bubbles: #55868
test: re-enabled the disabled manifest test: #55810
Remove unnecessary Object.assign: #55882
Move experimental.runtime warning to config loading: #55880
Add experimental.strictNextHead to Turbopack: #55915
Loose types of app routes return value: #55849
Add trailingSlash, basePath, and assetPrefix to Turbopack: #55921
app router: ensure static prefetch renders loading.js: #55950

Documentation Changes

add tip for case sensitivity of imports: #55662
Docs - Fix VSCode Full Stack Debugging Regex Pattern: #55670
Feedback: Remove line saying server actions is dynamic-only: #55746
Update 01-pages-and-layouts.mdx: #55795
fix typo in API Reference - Image Component: #55776
Update 01-pages-and-layouts.mdx: #55795
fix typo in API Reference - Image Component: #55776
docs: useFormState: #55564
Update 10-testing.mdx: #55801
Revert "fix typo in API Reference - Image Component": #55889
Fix missing async keyword in function declaration: #55887
docs: Add note that Server Actions work with static routes: #55626
docs: Add example on query parameters in route handlers: #55789

Example Changes

Fix/upgrade examples with clerk: #55676
Fix/upgrade examples data fetch: #55695

Misc Changes

Upgrade to latest NAPI-RS infra: #55505
ci(tests): enable turbopack /e2e tests: #55681
chore: bump nissuer: #55723
improve CI log: #55736
fix(cna): separate dependencies/devDependencies: #55730
misc: improve profiling script: #55732
test(fixture): prevent start failure teardowns whole process: #55760
Update fnm setup for CI: #55765
test(turbopack): explicitly clean up instance for turbopack: #55772
Update flakey next-image tests: #55838
Update flakey next-image tests: #55838
Allow filtering individual test cases inside test files: #55786
Move client-navigation test to test/development: #55888
Ensure Turbopack passing test list is sorted: #55948

Credits

Huge thanks to @sokra, @ztanner, @anonrig, @huozhi, @mayank1513, @travisanderson, @wyattjoh, @jridgewell, @ryanagillie, @Brooooooklyn, @kwonoj, @balazsorban44, @naruaway, @S3Prototype, @feedthejim, @joulev, @icyJoseph, @ijjk, @ForsakenHarmony, @timneutkens, @wbinnssmith, @sdkdeepa, @sdaigo, @leerob, @dominiksipowicz, @joao-vasconcelos, and @mostafaegouda for helping!

`v13.5.2`

Compare Source

Core Changes

Remove link to closed discussion: #55596
test(turbopack) migrate api tests, few image tests: #55552
fix: handle string nodejs signals: #55606
Update React from d6dcad6 to 2807d78: #55590
Simplified ensure promise handling: #55562
chore: bump @vercel/og and satori: #55654
Fix header resent when error occured: #55619
Add additional cleanup logic for forked process: #55652
Polish error icon for error log: #55618
Fix importing name multiple times with the named_import transform: #55664

Documentation Changes

create-next-app templates: Change bun run dev commands to bun dev: #55603
docs: move optimizePackageImports to experimental: #55614
fix(docs): internationalization middleware example: #55645

Example Changes

fix: examples/with-fauna/package.json to reduce vulnerabilities: #55594
fix: examples/with-grafbase/package.json to reduce vulnerabilities: #55593
chore(examples): upgrade next-translate dependencies: #55637

Misc Changes

chore: run repro validation only on bug reports: #55610
Run unit tests in a separate job: #55621
Run unit tests in a single job run: #55625

Credits

Huge thanks to @padmaia, @mayank1513, @jakeboone02, @balazsorban44, @kwonoj, @huozhi, @Yovach, @ztanner, @wyattjoh, @GabenGar, @timneutkens, and @shuding for helping!

`v13.5.1`

Compare Source

Core Changes

Update font data: #54257
add experimental https support to next dev: #54016
Fix emotion-js transform for server components: #54284
Handle basePath for redirect(): #54277
Remove unused array in router-server: #54278
app-router: tweak prefetch cache status heuristics: #53864
Adds nonce to preinit scripts: #54059
Fix default export of server action utility aliases: #54254
fix: improve error message when output: export in app router: #54202
ci(trace): allow to opt in to upload full trace: #54347
fix: server actions blocking navigation events: #54307
Skip getStaticPaths check for non-dynamic app routes: #54351
OpenTel: ensure that exceptions are recorded on an active span: #54131
Testmode: intercept rewrite fetches: #54259
Polyfill Array.prototype.at: #44436
Fix missing locale info for middleware data request: #54357
fix: minimum node version 16.14.0: #54331
Merge app renderer process: #54143
Fix data route ordering in dev: #54364
fix(app): enable React Strict Mode by default: #53375
Fix swc compiling of client components when directive appears later than exports: #54392
Upgrade vendored react: #54399
Code clean up: #54405
Upgrade precompiled ua-parser-js: #54404
Fix compilation of next/dynamic with ssr: false in App Router: #54411
refactor: Use swc AST to determine use client and server directives: [#54358](https

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Jerusalem)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

vercel · 2025-01-20T23:37:44Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
linkedin-sample-app	Ready	Preview, Comment	Jun 11, 2026 9:03am

renovate · 2026-02-04T03:12:49Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: linkedin-sample-app@0.1.0
npm error Found: eslint@9.26.0
npm error node_modules/eslint
npm error   eslint@"9.26.0" from the root project
npm error
npm error Could not resolve dependency:
npm error peer eslint@"^7.23.0 || ^8.0.0" from eslint-config-next@13.5.11
npm error node_modules/eslint-config-next
npm error   eslint-config-next@"13.5.11" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-06-11T09_01_23_768Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-06-11T09_01_23_768Z-debug-0.log

wiz-d45ab51820 · 2026-05-12T13:50:39Z

    "dotenv": "^16.3.1",
    "eslint": "9.26.0",
-    "eslint-config-next": "13.4.19",
+    "eslint-config-next": "13.5.11",


Vulnerability Finding

The following vulnerabilities impact minimatch versions <14.1.1-canary.68: CVE-2026-26996, CVE-2026-27903, CVE-2026-27904.

These can be remediated by updating to version 14.1.1-canary.68 or higher.

Dependency Tree

eslint-config-next@13.5.11 └── @typescript-eslint/parser@6.21.0 └── @typescript-eslint/typescript-estree@6.21.0 └── minimatch@9.0.3

To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason

If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).

To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate

Suggested change

"eslint-config-next": "13.5.11",

"eslint-config-next": "14.1.1-canary.68",

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 9256baa to 12130d4 Compare February 9, 2025 23:07

vercel Bot deployed to Preview February 9, 2025 23:09 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 12130d4 to b1da0d7 Compare March 8, 2025 00:48

vercel Bot deployed to Preview March 8, 2025 01:06 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from b1da0d7 to 3cfe7c3 Compare March 22, 2025 00:32

vercel Bot deployed to Preview March 22, 2025 00:33 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 3cfe7c3 to 867f981 Compare April 12, 2025 21:09

renovate Bot changed the title ~~Update dependency eslint-config-next to v13.5.8~~ Update dependency eslint-config-next to v13.5.9 Apr 12, 2025

vercel Bot deployed to Preview April 12, 2025 21:10 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 867f981 to f6f5584 Compare April 15, 2025 01:08

renovate Bot changed the title ~~Update dependency eslint-config-next to v13.5.9~~ Update dependency eslint-config-next to v13.5.10 Apr 15, 2025

vercel Bot deployed to Preview April 15, 2025 01:09 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from f6f5584 to 14c0703 Compare April 17, 2025 01:04

renovate Bot changed the title ~~Update dependency eslint-config-next to v13.5.10~~ Update dependency eslint-config-next to v13.5.11 Apr 17, 2025

vercel Bot deployed to Preview April 17, 2025 01:05 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 14c0703 to 32fb6dd Compare May 25, 2025 01:21

vercel Bot deployed to Preview May 25, 2025 01:22 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 32fb6dd to da4190b Compare July 4, 2025 08:42

vercel Bot deployed to Preview July 4, 2025 08:43 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from da4190b to 4bf9bee Compare September 10, 2025 22:59

vercel Bot deployed to Preview September 10, 2025 23:02 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 4bf9bee to fff251c Compare September 11, 2025 03:15

vercel Bot deployed to Preview September 11, 2025 03:17 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from fff251c to 3e07120 Compare September 14, 2025 01:43

vercel Bot deployed to Preview September 14, 2025 01:44 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 3e07120 to d0203eb Compare September 25, 2025 17:38

vercel Bot deployed to Preview September 25, 2025 17:39 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from d0203eb to 61077d0 Compare October 21, 2025 19:57

vercel Bot deployed to Preview October 21, 2025 19:58 View deployment

vercel Bot deployed to Preview December 4, 2025 04:48 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from d582770 to 2cba949 Compare December 12, 2025 20:16

vercel Bot deployed to Preview December 12, 2025 20:17 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 2cba949 to 068a0bb Compare December 13, 2025 00:04

vercel Bot deployed to Preview December 13, 2025 00:06 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 068a0bb to b70c387 Compare January 8, 2026 21:37

vercel Bot deployed to Preview January 8, 2026 21:39 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from b70c387 to cd49acd Compare February 4, 2026 03:12

vercel Bot deployed to Preview February 4, 2026 03:14 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from cd49acd to 04c3797 Compare March 5, 2026 16:43

vercel Bot deployed to Preview March 5, 2026 16:46 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 04c3797 to cab7186 Compare March 13, 2026 12:39

vercel Bot deployed to Preview March 13, 2026 12:41 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from cab7186 to c0fd9f6 Compare April 15, 2026 13:17

vercel Bot deployed to Preview April 15, 2026 13:25 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from c0fd9f6 to fafb8a9 Compare April 29, 2026 17:34

wiz-d45ab51820 Bot reviewed Apr 29, 2026

View reviewed changes

vercel Bot deployed to Preview April 29, 2026 17:35 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from fafb8a9 to 390172e Compare May 12, 2026 13:49

wiz-d45ab51820 Bot reviewed May 12, 2026

View reviewed changes

vercel Bot deployed to Preview May 12, 2026 13:51 View deployment

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 390172e to 1c1f56c Compare May 28, 2026 22:57

vercel Bot deployed to Preview May 28, 2026 22:58 View deployment

renovate Bot changed the title ~~Update dependency eslint-config-next to v13.5.11~~ Update nextjs monorepo to v13.5.11 Jun 2, 2026

Update nextjs monorepo to v13.5.11

f229aa2

renovate Bot force-pushed the renovate/nextjs-monorepo branch from 1c1f56c to f229aa2 Compare June 11, 2026 09:01

vercel Bot deployed to Preview June 11, 2026 09:03 View deployment

renovate Bot changed the title ~~Update nextjs monorepo to v13.5.11~~ Update nextjs monorepo Jun 22, 2026

renovate Bot changed the title ~~Update nextjs monorepo~~ Update dependency eslint-config-next to v13.5.11 Jun 25, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update dependency eslint-config-next to v13.5.11#4

Update dependency eslint-config-next to v13.5.11#4
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/nextjs-monorepo

renovate Bot commented Jan 20, 2025 •

edited

Loading

Uh oh!

vercel Bot commented Jan 20, 2025 •

edited

Loading

Uh oh!

renovate Bot commented Feb 4, 2026 •

edited

Loading

Uh oh!

wiz-d45ab51820 Bot May 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

	"eslint-config-next": "13.5.11",
	"eslint-config-next": "14.1.1-canary.68",

Uh oh!

Conversation

renovate Bot commented Jan 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Core Changes

Core Changes

Core Changes

Core Changes

Credits

Core Changes

Credits

Core Changes

Credits

Core Changes

Documentation Changes

Example Changes

Misc Changes

Credits

Core Changes

Documentation Changes

Example Changes

Misc Changes

Credits

Core Changes

Documentation Changes

Example Changes

Misc Changes

Credits

Core Changes

Documentation Changes

Example Changes

Misc Changes

Credits

Core Changes

Configuration

Uh oh!

vercel Bot commented Jan 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

renovate Bot commented Feb 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: package-lock.json

Uh oh!

wiz-d45ab51820 Bot May 12, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jan 20, 2025 •

edited

Loading

vercel Bot commented Jan 20, 2025 •

edited

Loading

renovate Bot commented Feb 4, 2026 •

edited

Loading