Skip to content

chore(deps): pair Next 16.3.8 and lint with portable license approval - #127

Merged
atk0309 merged 4 commits into
mainfrom
dependabot/npm_and_yarn/next-runtime-9284864cd3
Oct 5, 2026
Merged

atk0309 merged 4 commits into
mainfrom
dependabot/npm_and_yarn/next-runtime-9284864cd3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Update Next and eslint-config-next together to exactly 16.3.8, including #130's reviewed published lint records. Group future runtime/configuration updates together.

Portable packaging previously rejected the new @next/env version because supplemental license associations and distribution approval covered only 16.3.6. Add the verified 16.3.8 association while retaining 16.3.6, license hashes, rejection of unapproved versions and image-library exclusions. Add acceptance/rejection regression coverage.

Validation: original dependency/license evidence and all 1,170 cumulative lockfile edges verified. Current-head pinned CI passed formatting, lint, typecheck, 1,569 unit tests, build and 32 Chromium cases on acbacead710c86f451ab3b83feea35271d32c2fe. Both CodeQL analyses passed. Linux and Windows native acceptance passed real install/first-login/browser, archive/license and upgrade/crash/rollback checks on source head 7f5d42ba9f8230e0ba99524bfae010b6b38336a2; Codex reviewed it with no major issues. Current head adds merged-main ancestry only and has identical source tree a2d170fda22634b559640b61a522b73b18efc4d4; repeated optional native jobs do not change that evidence.

#130's dependency change is incorporated here. This validates preview source and packaging; issue #119 still tracks final versioned release assets and consumer-machine sign-off.

Bumps the next-runtime group with 1 update: [next](https://github.com/vercel/next.js).


Updates `next` from 16.3.6 to 16.3.8
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.6...v16.3.8)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: next-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 5, 2026
@coderabbitai

coderabbitai Bot commented Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: atk0309/project_Examify/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: c9c462de-2442-4eb0-8ef3-7cedffdfd67c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

Bumps the lint-format group with 1 update in the / directory: [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next).


Updates `eslint-config-next` from 16.3.6 to 16.3.8
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.8/packages/eslint-config-next)

---
updated-dependencies:
- dependency-name: eslint-config-next
  dependency-version: 16.3.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: lint-format
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@atk0309 atk0309 changed the title chore(deps)(deps): bump next from 16.3.6 to 16.3.8 in the next-runtime group chore(deps): pair Next 16.3.8 and lint with portable license approval Oct 5, 2026

atk0309 commented Oct 5, 2026

Copy link
Copy Markdown
Owner

@codex review

Review current integrated head 7f5d42b. Next and eslint-config-next are paired at 16.3.8; #130's current published lint records are included. Focus on frozen lockfile integrity, exact supplemental license/distribution approval, rejection of unapproved versions, preserved image exclusions, and future Dependabot pairing. The branch includes the validated accessibility source while #126 awaits its final required CI job.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 5, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-05T20:41:41.062435Z 7f5d42b Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. More of your lovely PRs please.

Reviewed commit: 7f5d42ba9f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@atk0309
atk0309 merged commit 33c0279 into main Oct 5, 2026
9 checks passed
@atk0309
atk0309 deleted the dependabot/npm_and_yarn/next-runtime-9284864cd3 branch October 5, 2026 21:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant