Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/fosrl/pangolin/pull/2674
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 3/19/2026
**Status:** ❌ Closed
**Base:** `main` ← **Head:** `dependabot/npm_and_yarn/next-16.2.0`
---
### 📝 Commits (1)
- [`cdff612`](https://github.com/fosrl/pangolin/commit/cdff612283d779eb3870ea0f3877a2d9afcab26f) Bump next from 15.5.12 to 16.2.0
### 📊 Changes
**2 files changed** (+187 additions, -147 deletions)
<details>
<summary>View changed files</summary>
📝 `package-lock.json` (+186 -146)
📝 `package.json` (+1 -1)
</details>
### 📄 Description
Bumps [next](https://github.com/vercel/next.js) from 15.5.12 to 16.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/vercel/next.js/releases">next's releases</a>.</em></p>
<blockquote>
<h2>v16.2.0</h2>
<blockquote>
<p>[!TIP]<br />
<strong>Check out our Next v16.2 <a href="https://nextjs.org/blog/next-16-2">Blog Post</a> to learn more about this release.</strong></p>
</blockquote>
<h3>Core Changes</h3>
<ul>
<li>Upgrade React from <code>f93b9fd4-20251217</code> to <code>65eec428-20251218</code>: <a href="https://redirect.github.com/vercel/next.js/issues/87323">#87323</a></li>
<li>Turbopack: Create junction points instead of symlinks on Windows: <a href="https://redirect.github.com/vercel/next.js/issues/87606">#87606</a></li>
<li>Turbopack: Symlink handling follow-up: <a href="https://redirect.github.com/vercel/next.js/issues/87637">#87637</a></li>
<li>Add experimental routing package for resolving adapter routes: <a href="https://redirect.github.com/vercel/next.js/issues/86404">#86404</a></li>
<li>Ensure outputs are correct with cache components in deployment adapters: <a href="https://redirect.github.com/vercel/next.js/issues/87018">#87018</a></li>
<li>Move off of deprecated url.parse: <a href="https://redirect.github.com/vercel/next.js/issues/87257">#87257</a></li>
<li>[strict-route-types] Add <code>experimental.strictRouteTypes</code> config: <a href="https://redirect.github.com/vercel/next.js/issues/87378">#87378</a></li>
<li>misc: fix type check log for CI envs: <a href="https://redirect.github.com/vercel/next.js/issues/87838">#87838</a></li>
<li>fix: revalidateTag with profile should not trigger client cache invalidation: <a href="https://redirect.github.com/vercel/next.js/issues/88069">#88069</a></li>
<li>chore: warn when running tests against stale build: <a href="https://redirect.github.com/vercel/next.js/issues/88001">#88001</a></li>
<li>Redesign default error pages with cleaner, more user-friendly UI: <a href="https://redirect.github.com/vercel/next.js/issues/87988">#87988</a></li>
<li>dx: avoid next-env.d.ts change in dev: <a href="https://redirect.github.com/vercel/next.js/issues/88103">#88103</a></li>
<li>prevent browser cache from using stale RSC responses from previous builds: <a href="https://redirect.github.com/vercel/next.js/issues/86554">#86554</a></li>
<li>[strict-route-types] Typecheck App Router page props: <a href="https://redirect.github.com/vercel/next.js/issues/87386">#87386</a></li>
<li>[strict-route-types] Enforce common React Component return types in App Router: <a href="https://redirect.github.com/vercel/next.js/issues/87389">#87389</a></li>
<li>[strict-route-types] Switch to <code>satisfies</code> when validating page and route modules: <a href="https://redirect.github.com/vercel/next.js/issues/87398">#87398</a></li>
<li>[strict-route-types] Don't reject <code>number</code> in <code>config.api.bodyParser.sizeLimit</code> when validating route: <a href="https://redirect.github.com/vercel/next.js/issues/87633">#87633</a></li>
<li>Revert "dx: avoid next-env.d.ts change in dev": <a href="https://redirect.github.com/vercel/next.js/issues/88153">#88153</a></li>
<li>[strict-route-types] Typecheck pages router routes in absence of App Router: <a href="https://redirect.github.com/vercel/next.js/issues/87628">#87628</a></li>
<li>[strict-route-types] Ensure cache profiles and routes are type-checked even if .next is excluded: <a href="https://redirect.github.com/vercel/next.js/issues/87768">#87768</a></li>
<li>add compilation error for taint when not enabled: <a href="https://redirect.github.com/vercel/next.js/issues/88173">#88173</a></li>
<li>feat(next/image)!: add <code>images.maximumResponseBody</code> config: <a href="https://redirect.github.com/vercel/next.js/issues/88183">#88183</a></li>
<li>Add maximum size limit for postponed body parsing: <a href="https://redirect.github.com/vercel/next.js/issues/88175">#88175</a></li>
<li>metadata: use fixed segment in dynamic routes with static metadata files: <a href="https://redirect.github.com/vercel/next.js/issues/88113">#88113</a></li>
<li>feat: add --experimental-cpu-prof flag for dev, build, and start: <a href="https://redirect.github.com/vercel/next.js/issues/87946">#87946</a></li>
<li>Add experimental option to use no-cache instead of no-store in dev: <a href="https://redirect.github.com/vercel/next.js/issues/88182">#88182</a></li>
<li>fix overlay frames cannot be opened sometimes: <a href="https://redirect.github.com/vercel/next.js/issues/88210">#88210</a></li>
<li>Handle pnpm-workspace.yaml while searching for monorepo root: <a href="https://redirect.github.com/vercel/next.js/issues/74818">#74818</a></li>
<li>Add more debug logs to <code>'use cache'</code> wrapper: <a href="https://redirect.github.com/vercel/next.js/issues/88219">#88219</a></li>
<li>Omit unused arguments from <code>'use cache'</code> function calls: <a href="https://redirect.github.com/vercel/next.js/issues/86920">#86920</a></li>
<li>Only log <code>pending revalidates...</code> debug log if applicable: <a href="https://redirect.github.com/vercel/next.js/issues/88221">#88221</a></li>
<li>fix(next/image): bump sharp@0.34.5: <a href="https://redirect.github.com/vercel/next.js/issues/88238">#88238</a></li>
<li>Disallow javascript urls in router methods and redirects: <a href="https://redirect.github.com/vercel/next.js/issues/88185">#88185</a></li>
<li>Fix relative same host redirects in node middleware: <a href="https://redirect.github.com/vercel/next.js/issues/88253">#88253</a></li>
<li>Remove loadConfig from main development process, pass value from child process: <a href="https://redirect.github.com/vercel/next.js/issues/88230">#88230</a></li>
<li>Update deploy adapters outputs and handler interfaces for node and edge: <a href="https://redirect.github.com/vercel/next.js/issues/88247">#88247</a></li>
<li>Move Ready in time before handler initialization: <a href="https://redirect.github.com/vercel/next.js/issues/88235">#88235</a></li>
<li>next/image: support custom cache handlers: <a href="https://redirect.github.com/vercel/next.js/issues/88248">#88248</a></li>
<li>feat: add Claude Code plugin marketplace with Cache Components skill: <a href="https://redirect.github.com/vercel/next.js/issues/87993">#87993</a></li>
<li>refactor: consolidate PPR into cacheComponents architecture: <a href="https://redirect.github.com/vercel/next.js/issues/88243">#88243</a></li>
<li>Turbopack: include fewer traced files for standalone: <a href="https://redirect.github.com/vercel/next.js/issues/88322">#88322</a></li>
<li>feat(turbopack): add resolve plugin condition variant of Always and Never: <a href="https://redirect.github.com/vercel/next.js/issues/88190">#88190</a></li>
<li>perf: use length = 0 to clear the logging array: <a href="https://redirect.github.com/vercel/next.js/issues/88244">#88244</a></li>
<li>Time logs: Show full millisecond instead of 1 decimal: <a href="https://redirect.github.com/vercel/next.js/issues/88313">#88313</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/vercel/next.js/commit/c5c94dffbf084e66b172a9c6ff23d80c24973764"><code>c5c94df</code></a> v16.2.0</li>
<li><a href="https://github.com/vercel/next.js/commit/649d30263535f97cc35907dc25a0d133b37d0ca7"><code>649d302</code></a> Unflake router events deploy test (<a href="https://redirect.github.com/vercel/next.js/issues/91589">#91589</a>)</li>
<li><a href="https://github.com/vercel/next.js/commit/bcd9c19a6174ed36bdcf9cc690570e7bb2d604dd"><code>bcd9c19</code></a> docs: Clarify ignoreBuildErrors behavior (<a href="https://redirect.github.com/vercel/next.js/issues/91367">#91367</a>)</li>
<li><a href="https://github.com/vercel/next.js/commit/3683192a6bea9011222e9b236f8000b5266f3fe6"><code>3683192</code></a> v16.2.0-canary.104</li>
<li><a href="https://github.com/vercel/next.js/commit/b61823d7b9dd26370fb1167b31098c24b1fcd199"><code>b61823d</code></a> SRI turbopack documentation (<a href="https://redirect.github.com/vercel/next.js/issues/90477">#90477</a>)</li>
<li><a href="https://github.com/vercel/next.js/commit/0ca967b8637ca0b23a98f3d5fa6cb6675b89afb1"><code>0ca967b</code></a> Add group depth tracking to instant validation boundary discovery (<a href="https://redirect.github.com/vercel/next.js/issues/91208">#91208</a>)</li>
<li><a href="https://github.com/vercel/next.js/commit/a41bef94c5ec99cf71e286b8be02dca850b80062"><code>a41bef9</code></a> improve allowedDevOrigins error (<a href="https://redirect.github.com/vercel/next.js/issues/91521">#91521</a>)</li>
<li><a href="https://github.com/vercel/next.js/commit/75c51c65410bc0d4a852b28bab42943dbf765135"><code>75c51c6</code></a> Turbopack: Use <code>debug = "line-tables-only"</code> for dev builds (<a href="https://redirect.github.com/vercel/next.js/issues/91539">#91539</a>)</li>
<li><a href="https://github.com/vercel/next.js/commit/39e705ca9fcbf417ed4381737737d40c79fc13ef"><code>39e705c</code></a> Turbopack: Merge release-with-assertions-no-lto profile into release-with-ass...</li>
<li><a href="https://github.com/vercel/next.js/commit/4de2201764a31ecb45f02c1024bfb145496b1520"><code>4de2201</code></a> [turbopack] Share scratch buffer across shards using thread local (<a href="https://redirect.github.com/vercel/next.js/issues/90167">#90167</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/vercel/next.js/compare/v15.5.12...v16.2.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/fosrl/pangolin/pull/2674
Author: @dependabot[bot]
Created: 3/19/2026
Status: ❌ Closed
Base:
main← Head:dependabot/npm_and_yarn/next-16.2.0📝 Commits (1)
cdff612Bump next from 15.5.12 to 16.2.0📊 Changes
2 files changed (+187 additions, -147 deletions)
View changed files
📝
package-lock.json(+186 -146)📝
package.json(+1 -1)📄 Description
Bumps next from 15.5.12 to 16.2.0.
Release notes
Sourced from next's releases.
... (truncated)
Commits
c5c94dfv16.2.0649d302Unflake router events deploy test (#91589)bcd9c19docs: Clarify ignoreBuildErrors behavior (#91367)3683192v16.2.0-canary.104b61823dSRI turbopack documentation (#90477)0ca967bAdd group depth tracking to instant validation boundary discovery (#91208)a41bef9improve allowedDevOrigins error (#91521)75c51c6Turbopack: Usedebug = "line-tables-only"for dev builds (#91539)39e705cTurbopack: Merge release-with-assertions-no-lto profile into release-with-ass...4de2201[turbopack] Share scratch buffer across shards using thread local (#90167)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.