Commit b5f59f3
authored
fix(deps): update dependency next to v15.2.4 [security] (#294)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [next](https://nextjs.org)
([source](https://redirect.github.com/vercel/next.js)) | [`15.2.3` ->
`15.2.4`](https://renovatebot.com/diffs/npm/next/15.2.3/15.2.4) |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
### GitHub Vulnerability Alerts
####
[CVE-2025-30218](https://redirect.github.com/vercel/next.js/security/advisories/GHSA-223j-4rm8-mrmf)
## Summary
In the process of remediating
[CVE-2025-29927](https://redirect.github.com/advisories/GHSA-f82v-jwr5-mffw),
we looked at other possible exploits of Middleware. We independently
verified this low severity vulnerability in parallel with two reports
from independent researchers.
Learn more
[here](https://vercel.com/changelog/cve-2025-30218-5DREmEH765PoeAsrNNQj3O).
## Credit
Thank you to Jinseo Kim [kjsman](https://hackerone.com/kjsman?type=user)
and [ryotak](https://hackerone.com/ryotak?type=user) for the responsible
disclosure. These researchers were awarded as part of our bug bounty
program.
---
### Release Notes
<details>
<summary>vercel/next.js (next)</summary>
###
[`v15.2.4`](https://redirect.github.com/vercel/next.js/releases/tag/v15.2.4)
[Compare
Source](https://redirect.github.com/vercel/next.js/compare/v15.2.3...v15.2.4)
> \[!NOTE]\
> This release is backporting bug fixes. It does **not** include all
pending features/changes on canary.
##### Core Changes
- Match subrequest handling for edge and node
([#​77474](https://redirect.github.com/vercel/next.js/issues/77474))
- exclude images and static media from dev origin check
([#​77417](https://redirect.github.com/vercel/next.js/issues/77417))
- ensure /\__next middleware URLs are included in the origin check
([#​77416](https://redirect.github.com/vercel/next.js/issues/77416))
- remove direct ip/port bypass in dev origin check
([#​77414](https://redirect.github.com/vercel/next.js/issues/77414))
- switch development origin verification to be opt-in rather than
opt-out
([#​77395](https://redirect.github.com/vercel/next.js/issues/77395))
##### Credits
Huge thanks to [@​ijjk](https://redirect.github.com/ijjk) and
[@​ztanner](https://redirect.github.com/ztanner) for helping!
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/kkrishguptaa/study-web3).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjcuMyIsInVwZGF0ZWRJblZlciI6IjM5LjIyNy4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>1 parent 42f262d commit b5f59f3
2 files changed
+57
-57
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
20 | 20 | | |
21 | 21 | | |
22 | 22 | | |
23 | | - | |
| 23 | + | |
24 | 24 | | |
25 | 25 | | |
26 | 26 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
267 | 267 | | |
268 | 268 | | |
269 | 269 | | |
270 | | - | |
271 | | - | |
272 | | - | |
273 | | - | |
| 270 | + | |
| 271 | + | |
| 272 | + | |
| 273 | + | |
274 | 274 | | |
275 | 275 | | |
276 | 276 | | |
| |||
279 | 279 | | |
280 | 280 | | |
281 | 281 | | |
282 | | - | |
283 | | - | |
284 | | - | |
285 | | - | |
286 | | - | |
287 | | - | |
288 | | - | |
289 | | - | |
290 | | - | |
291 | | - | |
292 | | - | |
293 | | - | |
294 | | - | |
295 | | - | |
296 | | - | |
297 | | - | |
298 | | - | |
299 | | - | |
300 | | - | |
301 | | - | |
302 | | - | |
303 | | - | |
304 | | - | |
305 | | - | |
306 | | - | |
307 | | - | |
308 | | - | |
309 | | - | |
310 | | - | |
311 | | - | |
312 | | - | |
313 | | - | |
314 | | - | |
315 | | - | |
316 | | - | |
317 | | - | |
318 | | - | |
319 | | - | |
320 | | - | |
| 282 | + | |
| 283 | + | |
| 284 | + | |
| 285 | + | |
| 286 | + | |
| 287 | + | |
| 288 | + | |
| 289 | + | |
| 290 | + | |
| 291 | + | |
| 292 | + | |
| 293 | + | |
| 294 | + | |
| 295 | + | |
| 296 | + | |
| 297 | + | |
| 298 | + | |
| 299 | + | |
| 300 | + | |
| 301 | + | |
| 302 | + | |
| 303 | + | |
| 304 | + | |
| 305 | + | |
| 306 | + | |
| 307 | + | |
| 308 | + | |
| 309 | + | |
| 310 | + | |
| 311 | + | |
| 312 | + | |
| 313 | + | |
| 314 | + | |
| 315 | + | |
| 316 | + | |
| 317 | + | |
| 318 | + | |
| 319 | + | |
| 320 | + | |
321 | 321 | | |
322 | 322 | | |
323 | 323 | | |
| |||
2653 | 2653 | | |
2654 | 2654 | | |
2655 | 2655 | | |
2656 | | - | |
2657 | | - | |
2658 | | - | |
2659 | | - | |
| 2656 | + | |
| 2657 | + | |
| 2658 | + | |
| 2659 | + | |
2660 | 2660 | | |
2661 | | - | |
| 2661 | + | |
2662 | 2662 | | |
2663 | 2663 | | |
2664 | 2664 | | |
2665 | 2665 | | |
2666 | 2666 | | |
2667 | 2667 | | |
2668 | 2668 | | |
2669 | | - | |
2670 | | - | |
2671 | | - | |
2672 | | - | |
2673 | | - | |
2674 | | - | |
2675 | | - | |
2676 | | - | |
| 2669 | + | |
| 2670 | + | |
| 2671 | + | |
| 2672 | + | |
| 2673 | + | |
| 2674 | + | |
| 2675 | + | |
| 2676 | + | |
2677 | 2677 | | |
2678 | 2678 | | |
2679 | 2679 | | |
| |||
0 commit comments