build(deps): bump the patch-and-minor-updates group across 1 directory with 27 updates

[dependabot]

Bumps the patch-and-minor-updates group with 27 updates in the / directory:

Package	From	To
@changesets/cli	2.29.8	2.31.1
@nl-design-system/eslint-config	2.2.0	2.4.0
@types/node	24.10.9	24.13.3
eslint-plugin-storybook	10.2.14	10.5.5
markdownlint-cli	0.47.0	0.49.1
postcss	8.5.6	8.5.25
prettier	3.9.4	3.9.6
stylelint	17.14.0	17.14.1
typescript-eslint	8.54.0	8.65.0
next	16.2.4	16.2.12
react	19.2.7	19.2.8
@types/react	19.2.17	19.2.18
react-dom	19.2.7	19.2.8
@types/react-dom	19.2.3	19.2.4
rimraf	6.1.2	6.1.3
rollup	4.62.2	4.62.3
rollup-plugin-typescript2	0.36.0	0.37.0
sass	1.97.3	1.102.0
@etchteam/storybook-addon-status	8.0.0	8.1.0
@storybook/addon-a11y	10.2.14	10.5.5
@storybook/addon-docs	10.2.14	10.5.5
@storybook/addon-links	10.2.14	10.5.5
@storybook/react-vite	10.2.14	10.5.5
storybook	10.2.14	10.5.5
@stencil/react-output-target	1.4.0	1.6.1
@stencil/core	4.41.3	4.43.5
@stencil/sass	3.2.3	3.3.2

Updates @changesets/cli from 2.29.8 to 2.31.1

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.1

Patch Changes

• #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.

@​changesets/cli@​2.31.0

Minor Changes

• #1889 96ca062 Thanks @​mixelburg! - Error on unsupported flags for individual CLI commands and print the matching command usage to make mistakes easier to spot.

• #1873 42943b7 Thanks @​mixelburg! - Respond to --help on all subcommands. Previously, --help was only handled when it was the sole argument; passing it alongside a subcommand (e.g. changeset version --help) would silently execute the command instead. Now --help always exits early and prints per-command usage when a known subcommand is provided, or the general help text otherwise.

Patch Changes

• d2121dc Thanks @​Andarist! - Fix npm auth for path-based registries during publish by preserving configured registry URLs instead of normalizing them.

• #1888 036fdd4 Thanks @​mixelburg! - Fix several changeset version issues with workspace protocol dependencies. Valid explicit workspace: ranges and aliases are no longer rewritten unnecessarily, and workspace path references are handled correctly during versioning.

• #1903 5c4731f Thanks @​Andarist! - Gracefully handle stale npm info data leading to duplicate publish attempts.

• #1867 f61e716 Thanks @​Andarist! - Improved detection for published state of prerelease-only packages without latest dist-tag on GitHub Packages registry.

• Updated dependencies [036fdd4, 036fdd4, 036fdd4]:

  • @​changesets/assemble-release-plan@​6.0.10
  • @​changesets/get-dependents-graph@​2.1.4
  • @​changesets/apply-release-plan@​7.1.1
  • @​changesets/get-release-plan@​4.0.16
  • @​changesets/config@​3.1.4

@​changesets/cli@​2.30.0

Minor Changes

• #1840 057cca2 Thanks @​wotan-allfather! - Add --since flag to add command

  The add command now supports a --since flag that allows you to specify which branch, tag, or git ref to use when detecting changed packages. This is useful for gitflow workflows where you have multiple target branches and the baseBranch config option doesn't cover all use cases.

  Example: changeset add --since=develop

  If not provided, the command falls back to the baseBranch value in your .changeset/config.json.

• #1845 2b4a66a Thanks @​Andarist! - Delegate OTP prompting to the package manager instead of handling it in-process. This allows Changesets to use the package manager's native web auth support.

• #1774 667fe5a Thanks @​bluwy! - Support importing custom commit option ES module. Previously, it used require() which only worked for CJS modules, however now it uses import() which supports both CJS and ES modules.

• #1839 73b1809 Thanks @​leochiu-a! - Add a --message (-m) flag to changeset add (and default changeset) so the changeset summary can be provided from the command line. When --message is present, the summary prompt is skipped while the final confirmation step is kept.

• #1806 0e8e01e Thanks @​luisadame! - Changeset CLI can now be run from the nested directories in the project, where the .changeset directory has to be found in one of the parent directories

Patch Changes

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​changesets/cli since your current version.

Updates @nl-design-system/eslint-config from 2.2.0 to 2.4.0

Release notes

Sourced from @​nl-design-system/eslint-config's releases.

@​nl-design-system/eslint-config@​2.4.0

Minor Changes

• 3fd8dd3: Add eslint-plugin-sonarjs, eslint-plugin-unicorn, eslint-plugin-regexp, and @​stylistic/eslint-plugin recommended rules

@​nl-design-system/eslint-config@​2.3.0

Minor Changes

• 60db69b: Enforce single quotes in test files (.test., .spec.)

Patch Changes

• 9887374: chore: add eslint v10 to eslint-config peerDependencies'

Changelog

Sourced from @​nl-design-system/eslint-config's changelog.

2.4.0

Minor Changes

• 3fd8dd3: Add eslint-plugin-sonarjs, eslint-plugin-unicorn, eslint-plugin-regexp, and @​stylistic/eslint-plugin recommended rules

2.3.0

Minor Changes

• 60db69b: Enforce single quotes in test files (.test., .spec.)

Patch Changes

• 9887374: chore: add eslint v10 to eslint-config peerDependencies'

Commits

• 320b532 docs(release): design system packages
• 3fd8dd3 feat: improving code quality with additional ESLint plugins
• 754695b docs(release): design system packages
• 60db69b feat(eslint-config): enforce single quotes in test files
• 9887374 chore: add eslint v10 to eslint-config peerDependencies
• 8e3d086 chore: upgrade dependencies (minor range)
• 8ade456 chore: upgrade dependencies (patch range)
• See full diff in compare view

Updates @types/node from 24.10.9 to 24.13.3

Commits

• See full diff in compare view

Updates eslint-plugin-storybook from 10.2.14 to 10.5.5

Release notes

Sourced from eslint-plugin-storybook's releases.

v10.5.5

10.5.5

• CLI: Update AI setup instructions to msw-storybook-addon v3 - #35512, thanks @​yannbf!
• Core: Upgrade `ws` to fix security advisories - #35584, thanks @​ndelangen!
• ReactNative: Telemetry framework detection fix - #35560, thanks @​ndelangen!
• SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @​hxy-asdw!
• TanStack: Preserve explicit route ids on pathful clones - #35499, thanks @​unpunnyfuns!
• TanStack: Resolve mock redirects through Vite's resolver - #35501, thanks @​unpunnyfuns!
• TanStack: Respect routeOverrides component overrides in stories - #35497, thanks @​unpunnyfuns!

v10.5.4

10.5.4

• ReactNative: Telemetry framework detection fix - #35560, thanks @​ndelangen!
• SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @​hxy-asdw!

v10.5.3

10.5.3

• Dependencies: Upgrade TypeScript to 6.0.3 - #34971, thanks @​valentinpalkovic!

v10.5.2

10.5.2

• Angular-Vite: Drop @​angular/platform-browser-dynamic peer dependency - #35457, thanks @​valentinpalkovic!
• Angular-Vite: Widen TypeScript peer dependency range to support TypeScript 6 - #35455, thanks @​valentinpalkovic!
• Core: Include chromatic packages in ecosystem identifier - #35170, thanks @​yannbf!
• TanStack: Fix createServerFn validator mock - #35185, thanks @​sjh9714!
• TanStack: Support pathless layout routes (id-only) in story routing - #35465, thanks @​unpunnyfuns!
• Tanstack-react: Add missing Hydrate export - #35111, thanks @​arun-357!
• Tanstack-react: Keep JSX-only component references during dead-code elimination - #35206, thanks @​yatishgoel!
• Vitest: Fix coverage toggle crash on Vite 6 by clearing closed Vitest instance on restart - #35461, thanks @​yannbf!

v10.5.1

10.5.1

• Angular-Vite: Drop @​angular/platform-browser-dynamic peer dependency - #35457, thanks @​valentinpalkovic!
• Angular-Vite: Widen TypeScript peer dependency range to support TypeScript 6 - #35455, thanks @​valentinpalkovic!
• Core: Include chromatic packages in ecosystem identifier - #35170, thanks @​yannbf!

v10.5.0

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

• ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
• 🌈 Vitest initialGlobals: Test across themes, viewports, locales

... (truncated)

Changelog

Sourced from eslint-plugin-storybook's changelog.

10.5.5

• CLI: Update AI setup instructions to msw-storybook-addon v3 - #35512, thanks @​yannbf!
• Core: Upgrade ws to fix security advisories - #35584, thanks @​ndelangen!
• ReactNative: Telemetry framework detection fix - #35560, thanks @​ndelangen!
• SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @​hxy-asdw!
• TanStack: Preserve explicit route ids on pathful clones - #35499, thanks @​unpunnyfuns!
• TanStack: Resolve mock redirects through Vite's resolver - #35501, thanks @​unpunnyfuns!
• TanStack: Respect routeOverrides component overrides in stories - #35497, thanks @​unpunnyfuns!

10.5.4

• ReactNative: Telemetry framework detection fix - #35560, thanks @​ndelangen!
• SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @​hxy-asdw!

10.5.3

• Dependencies: Upgrade TypeScript to 6.0.3 - #34971, thanks @​valentinpalkovic!

10.5.2

• TanStack: Fix createServerFn validator mock - #35185, thanks @​sjh9714!
• TanStack: Support pathless layout routes (id-only) in story routing - #35465, thanks @​unpunnyfuns!
• Tanstack-react: Add missing Hydrate export - #35111, thanks @​arun-357!
• Tanstack-react: Keep JSX-only component references during dead-code elimination - #35206, thanks @​yatishgoel!
• Vitest: Fix coverage toggle crash on Vite 6 by clearing closed Vitest instance on restart - #35461, thanks @​yannbf!

10.5.1

• Angular-Vite: Drop @​angular/platform-browser-dynamic peer dependency - #35457, thanks @​valentinpalkovic!
• Angular-Vite: Widen TypeScript peer dependency range to support TypeScript 6 - #35455, thanks @​valentinpalkovic!
• Core: Include chromatic packages in ecosystem identifier - #35170, thanks @​yannbf!

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

• ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
• 🌈 Vitest initialGlobals: Test across themes, viewports, locales
• 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
• ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
• 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

• A11y: Fix MDX heading anchors not keyboard accessible - #34368, thanks @​TheSeydiCharyyev!
• A11y: Handle lang attribute throughout preview - #35321, thanks @​Sidnioulz!

... (truncated)

Commits

• 05a52b7 Bump version from "10.5.4" to "10.5.5" [skip ci]
• 3327dc4 Bump version from "10.5.3" to "10.5.4" [skip ci]
• 9ac2739 Bump version from "10.5.2" to "10.5.3" [skip ci]
• b4b00f2 Merge pull request #34971 from storybookjs/valentin/upgrade-typescript-6
• 518f711 Bump version from "10.5.1" to "10.5.2" [skip ci]
• c253a06 Bump version from "10.5.0" to "10.5.1" [skip ci]
• 9dafcd2 Bump version from "10.5.0-beta.2" to "10.5.0" [skip ci]
• 448db85 Bump version from "10.5.0-beta.1" to "10.5.0-beta.2" [skip ci]
• a4ce979 Bump version from "10.5.0-beta.0" to "10.5.0-beta.1" [skip ci]
• f0bf138 Bump version from "10.5.0-alpha.11" to "10.5.0-beta.0" [skip ci]
• Additional commits viewable in compare view

Updates markdownlint-cli from 0.47.0 to 0.49.1

Release notes

Sourced from markdownlint-cli's releases.

v0.49.1

• Update markdownlint dependency to 0.41.1
  • Improve MD029
  • Fix module resolution under webpack
  • Update dependencies
• Update all dependencies via Dependabot

v0.49.0

• Update markdownlint dependency to 0.41.0
  • Improve MD022/MD028/MD035/MD042/MD051/MD060
  • Remove handling of inline directive syntax (frequent false positives)
  • Remove support for end-of-life Node version 20
• Update all dependencies via Dependabot

v0.48.0

• Update all dependencies via Dependabot

Commits

• 5b5dddc Bump version 0.49.1
• 4e83bdd Bump run-con from 1.3.2 to 1.3.3
• 4f2127b Bump actions/setup-node from 6 to 7
• cc62492 Manually address new violations reported by xo.
• 678b7ee Bump xo from 3.0.2 to 4.0.0
• 06602e9 Bump ignore from 7.0.5 to 7.0.6
• eac32dd Bump markdownlint from 0.41.0 to 0.41.1
• 2864eb0 Bump js-yaml from 5.2.0 to 5.2.1
• 2748661 Bump markdown-it from 14.2.0 to 14.3.0
• 0144ebe Manually address new violations reported by xo.
• Additional commits viewable in compare view

Updates postcss from 8.5.6 to 8.5.25

Release notes

Sourced from postcss's releases.

8.5.25

• Fixed 8.5.17 visitor regression.
• Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

• Preserve the BOM after the processing (by @​hdimer).

8.5.23

• Do not load source map without opts.from for security reasons.

8.5.22

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

8.5.21

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

8.5.20

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

8.5.15

• Fixed declaration parsing performance (by @​homanp).

8.5.14

• Fixed custom syntax regression (by @​43081j).

8.5.13

• Fixed postcss-scss commend regression.

8.5.12

• Fixed reading any file via user-generated CSS.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.25

• Fixed 8.5.17 visitor regression.
• Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

• Preserve the BOM after the processing (by @​hdimer).

8.5.23

• Do not load source map without opts.from for security reasons.

8.5.22

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

8.5.21

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

8.5.20

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

8.5.15

... (truncated)

Commits

• 08c989c Release 8.5.25 version
• 24f6814 Fix 8.5.17 visitor regression
• f2fa53f Add supply chain security requirement to PostCSS plugin guide
• 10edf0b fix: return empty array for empty string in list.split (#2121)
• 0ebe8ad Release 8.5.24 version
• 73218c6 Update dependencies
• 9a114f6 Preserve the BOM when stringifying (#2119)
• 9069261 Fix types check
• eb9e1fe Release 8.5.23 version
• 9d19c78 Update dependencies
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Updates prettier from 3.9.4 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

• Preserve quotes for methods named new (prettier/prettier#19621 by @​kovsu)
• Support import defer in typescript parser (prettier/prettier#19624, prettier/prettier#19675 by @​fisker)
• Added a new official plugin @prettier/plugin-yuku 🚀 (prettier/prettier#19628, prettier/prettier#19629 by @​fisker)

🔗 Changelog

3.9.5

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

1. Install the plugin:

   yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

• 8f0c950 Release 3.9.6
• e910764 Update changelog
• ec3f1c7 Update typescript-eslint to v8.65.0 (#19675)
• 73d2efc Update Yuku parser to v0.7.0 (#19664)
• dd5e24e Preserve quotes for TSMethodSignature nodes named new (#19621)
• c03ab4e Update dependency eslint-plugin-unicorn to v72 (#19633)
• b74dd53 Update Yuku parser to v0.6.5 (#19654)
• f1b594e Update dependency eslint-plugin-simple-import-sort to v14 (#19655)
• 0d9dfb6 Update Yuku parser to v0.6.4 (#19650)
• 3bbb815 Remove typescript-only directory (#19636)
• Additional commits viewable in compare view

Updates stylelint from 17.14.0 to 17.14.1

Release notes

Sourced from stylelint's releases.

17.14.1

It fixes 4 bugs.

• Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
• Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
• Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
• Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).

Changelog

Sourced from stylelint's changelog.

17.14.1 - 2026-07-20

It fixes 4 bugs.

• Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
• Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
• Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
• Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).

Commits

• cd66b03 Release 17.14.1 (#9397)
• 7c30fc5 Refactor to replace void with undefined in union types (#9395)
• 57c8d0e Fix rule-empty-line-before false positives for shared-line comments with `e...
• 226f10a Bump @​vscode/windows-process-tree from 0.7.0 to 0.8.0 (#9392)
• 13c3c5c Bump globby from 16.2.0 to 16.2.1 (#9393)
• 6dafcf5 Document unknown-effort contributions (#9391)
• 54c2bc8 Fix test for Yarn PnP with npm v12 (#9390)
• 3e7eb56 Fix declaration-block-no-redundant-longhand-properties invalid background...
• 438196e Bump postcss from 8.5.15 to 8.5.16 in the postcss group across 1 directory (#...
• c1e1489 Fix quiet option to suppress report* warning reports (#9387)
• Additional commits viewable in compare view

Updates typescript-eslint from 8.54.0 to 8.65.0

Release notes

Sourced from typescript-eslint's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)
• eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)
• eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)
• typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

• eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)
• eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
• eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

• support parsing import defer (#12513)
• eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
• typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

• eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)

❤️ Thank You

• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.1 (2026-06-29)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.0 (2026-06-22)

🚀 Features

• remove redundant package.json "files" (#12444)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

... (truncated)

Commits

• 63ba81b chore(release): publish 8.65.0
• eaf4576 feat: add warning when TS 7 is detected (#12529)
• 0d06406 chore: add attw validation to repo (#12437)
• c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
• 414d9ab chore(release): publish 8.64.0
• 290cf6c chore(release): publish 8.63.0
• 3ea32f4 chore(release): publish 8.62.1
• 54e2857 chore(release): publish 8.62.0
• 81e4c26 feat: remove redundant package.json "files" (#12444)
• aaad718 chore(release): publish 8.61.1
• Additional commits viewable in compare view

Updates next from 16.2.4 to 16.2.12

Release notes

Sourced from next's releases.

v16.2.12

What's Changed

• Backport/docs fixes 16.2 - July round by @​icyJoseph in vercel/next.js#96031
• [Backport] Fixes to support TypeScript 7 by @​lukesandberg in vercel/next.js#95831

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

• Denial of Service in App Router using Server Actions
• Middleware / Proxy bypass in App Router applications using Turbopack and single locale
• Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
• Server-Side Request Forgery in Server Actions on custom servers

Moderate:

• Cache confusion of response bodies for requests with bodies
• Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences
• Denial of Service in the Image Optimization API using SVGs
• Unauthenticated disclosure of internal Server Function endpoints
• Unbounded Server Action payload in Edge runtime

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• Backport documentation fixes for v16.2 (#93804)
• [backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
• [backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
• [backport] Fix catch-all router.query corruption with basePath + rewrites (

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
example	Error		Aug 1, 2026 10:36pm

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud