Skip to content

chore(deps): bump next from 15.5.24 to 15.5.28 - #782

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/next-15.5.28
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/next-15.5.28

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026 •

Copy link
Copy Markdown
Contributor

Bumps next from 15.5.24 to 15.5.28.

Release notes

Sourced from next's releases.

v15.5.28

This release contains security fixes for the following advisories:

Critical:

High:

v15.5.27

This release contains security fixes for the following advisories:

Medium:

v15.5.26

This release contains additional security hardening for next/og. For more information, check out https://nextjs.org/blog/nextjs-security-update-september-22-2026

v15.5.25

Follow-up release to v15.5.24 re-enabling AVIF Image Optimization when newer versions of sharp are installed (#97954).

Commits
  • 195cd6a v15.5.28
  • 1b53604 [cd] Allow branch to get published
  • 5e3b687 [lts-maintenance][next/image] Bump sharp (#232)
  • a2021b3 [lts-maintenance][react] Improve Server Component transport protocol (#194)
  • a836b53 [lts-maintenance] Fix google tag manager e2e test, assume GTM 200s instead of...
  • 9c1c1b1 [lts-maintenance][ci] Wire preview builds variables consistently (#99325)
  • def7eff v15.5.27
  • 52c94ab [lts-maintenance] Scope response cache keys to their source route (#219)
  • 785f4c2 [lts-maintenance] Match Next data paths case-sensitively (#197)
  • 7217d63 [lts-maintenance][webpack] Ensure dynamicParams is respected in `opengraph-...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 25, 2026
@github-actions
github-actions Bot enabled auto-merge October 25, 2026 09:53
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-15.5.28 branch from 2438994 to 578077a Compare October 25, 2026 10:08
Bumps [next](https://github.com/vercel/next.js) from 15.5.24 to 15.5.28.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.24...v15.5.28)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 15.5.28
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/next-15.5.28 branch from 578077a to 5109593 Compare October 25, 2026 10:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants