This repository was archived by the owner on Mar 6, 2022. It is now read-only.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
11.1.3
->12.0.7
Release Notes
vercel/next.js
v12.0.7
Compare Source
Core Changes
Credits
Huge thanks to @timneutkens for helping!
v12.0.6
Compare Source
Core Changes
v12.0.5
Compare Source
This upgrade is completely backward-compatible and recommended for all users on versions below 12.0.5. A backport of the patch to Next.js 11 is available as 11.1.3.
When a URL is provided to
next-server
that cannot be parsed, anunhandledPromiseRejection
could occur. On Node.js versions <v15.0.0
this isn't a fatal issue as only a warning is shown. However, in Node.js versions >v15.0.0
, this causes the server process to exit, which can result in unexpected server crashes.How to Upgrade
npm install next@latest --save
Impact
v11.1.0
and belowv12.0.5
v15.0.0
being usednext start
or a custom serverWe recommend everyone to upgrade regardless of whether you can reproduce the issue or not.
How to Assess Impact
If you are running Node.js >
v15.0.0
with Next.js, you can filter any server error logs forERR_INVALID_URL
.What is Being Done
As Next.js has grown in popularity and usage by enterprises, it has received the attention of security researchers and auditors. We are thankful to GitHub user
hopeless-programmer-online
for their investigation and discovery of the original bug.We've landed a patch that ensures this is handled properly so the
unhandledPromiseRejection
issue no longer occurs.Regression tests for this attack were added to the security integration test suite
security@vercel.com
. We are actively monitoring this mailbox.Core Changes
console.*
calls.: #31449next lint
withouteslint-config-next
installed: #29823.json
static method: #31483Google-PageRenderer
bot: #31521Document
components an error: #31505renderToWebStream
: #31553no-html-link-for-pages
from warning for static files: #31495next/link
: #30606pages/_document
: #31946Documentation Changes
Suspense
import: #31897React
import: #31900next export
documentation.: #31465sharp
memory usage on default Linux setup: #31919Example Changes
with-sentry
example: #30401Misc Changes
Credits
Huge thanks to @mzaien, @losfair, @ykzts, @leerob, @timneutkens, @stefanprobst, @javivelasco, @sokra, @goncy, @knezevicdev, @Kikobeats, @huozhi, @shuding, @styfle, @yang-feng-yfeng, @kdy1, @xuchaobei, @elkevinwolf, @padmaia, @kyliau, @devknoll, @fabienheureux, @hanneslund, @nilskaspersson, @Andarist, @mathcrln, @ijjk, @dferber90, @molebox, @FranciscoMoretti, @benschwarz, @wendellhu95, @gazdagergo, @imabp, @ljosberinn, @samuliasmala, @lfades, @ka2jun8, @monsonjeremy, @pqt, @vvo, @leoortizz, @michel-kraemer, @thibautsabot, @MaedahBatool, @lobsterkatie, @ntkoopman, @delbaoliveira, @iicdii, @j-mendez, @chentsulin, @ericmatthys, @lennym, @balogunkeji, and @wnr for helping!
v12.0.4
Compare Source
Core Changes
<Main>
: #30156sizes
prop: #31064./data:
urls in sass: #31134useId
mismatches on hydration: #31102displayNameAndId
ofstyled-components
: #31189CryptoKey
andglobalThis.CryptoKey
: #31193next build
log: #31295jsc.paths
: #31290styled-jsx
: #31407(middleware only)
when a middleware is added to the compiler: #31409normalizeLocalePath()
when path is empty string: #30978Documentation Changes
next/script
documentation: #31063Example Changes
getSession
should be called withreq
andres
: #31330Misc Changes
concurrentFeatures
enabled: #31227Credits
Huge thanks to @javivelasco, @shuding, @rishabhpoddar, @chemicalkosek, @huozhi, @timneutkens, @devknoll, @sokra, @KittyGiraudel, @styfle, @padmaia, @housseindjirdeh, @OKinane, @KonstHardy, @BrandonRomano, @leerob, @furcan, @dusanralic, @kdy1, @elliottsj, @vvo, @Kikobeats, @hi-ogawa, @panva, @genetschneider, @thundermiracle, @stefano-rainieri, @ericbiewener, @vordgi, @stevejarvis, @ihmpavel, @ijjk, @delbaoliveira, @matamatanot, @dyarfaradj, @iheyunfei, @thibautsabot, @ascorbic, @fytriht, @emzoumpo, @onurtemiz, @a-ursino, @mxschmitt, @knezevicdev, @bywo, @OArnarsson, and @TurekBot for helping!
v12.0.3
Compare Source
Core Changes
images.path
in next.config.js: #30741_document.js
error whendisableStaticImages: true
: #30768globalThis
: #30877assetPrefix
when initializing HMR connection : #30632next-swc
: Add.bundle()
: #30935Documentation Changes
<Suspense>
: #30983Example Changes
Misc Changes
binary-cache
check inid: binary-cache
: #30658Credits
Huge thanks to @ijjk, @leerob, @shuding, @gish, @matamatanot, @vadymshymko, @huozhi, @padmaia, @stefee, @styfle, @ihmpavel, @rishabhpoddar, @kamsar, @skhaz, @Prashoon123, @kdy1, @IrisvanOllefen, @timneutkens, @evan-bradley, @sokra, @Kikobeats, @ntltd, @furcan, @genetschneider, and @EzequielDM for helping!
v12.0.2
Compare Source
Core Changes
next/image
parent element: #30453next/image
loader width: #30562next/image
loader width even more: #30624Documentation Changes
Example Changes
Misc Changes
incremental
to template/tsconfig.json to avoid changes on first build: #30357Credits
Huge thanks to @oBusk, @sokra, @ijjk, @kdy1, @martpie, @BruceRodrigues, @luke-h1, @styfle, @balazsorban44, @padmaia, @lucasvazq, @velocity23, @AkiraTsuboi, @mitheelgajare, @kyliau, @huozhi, @karaggeorge, @JamiesWhiteShirt, @shuding, @stefanprobst, @leroydev, @JulienZD, and @timneutkens for helping!
v12.0.1
Compare Source
Core Changes
.swcrc
: #30384Documentation Changes
currentFeatures
toconcurrentFeatures
: #30356Misc Changes
Credits
Huge thanks to @shuding, @leotaku, @timneutkens, @sokra, @huozhi, @ijjk, @molebox, @mattfwood, @kripod, @kdy1, and @styfle for helping!
v12.0.0
Compare Source
Core Changes
no-document-import-in-page
rule to usepath
separators: #28768RenderResult
class: #28776next lint
(necessary forlint-staged
): #28042Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.