UI5 / webcomponents-react
85%
main: 85%

LAST BUILD BRANCH: renovate/patch-tanstack-virtual-monorepo
DEFAULT BRANCH: main
Repo Added
Token oPWbg1az908gQvSJuuJozJ1sPPNWz9O6K regen
Build 1169 Last
Files 231
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH gh-readonly-queue/main/pr-8028-bd1dadde3cdb8352eb5bf2219cd4f9527f3a44cd
branch: gh-readonly-queue/main/pr-8028-bd1dadde3cdb8352eb5bf2219cd4f9527f3a44cd
CHANGE BRANCH
x
Sync Branches

coverage: 84.91%. Remained the same
20195115396

push

github

web-flow 
chore(deps): update dependency next to v16.0.10 [security] (#8028)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [next](https://nextjs.org)
([source](https://redirect.github.com/vercel/next.js)) | [`16.0.9` ->
`16.0.10`](https://renovatebot.com/diffs/npm/next/16.0.9/16.0.10) |
![age](https://developer.mend.io/api/mc/badges/age/npm/next/16.0.10?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/next/16.0.9/16.0.10?slim=true)
|

### GitHub Vulnerability Alerts

####
[GHSA-5j59-xgg2-r9c4](https://redirect.github.com/vercel/next.js/security/advisories/GHSA-5j59-xgg2-r9c4)

It was found that the fix
addressing [CVE-2025-55184](https://redirect.github.com/advisories/GHSA-2m3v-v2m8-q956) in
React Server Components was incomplete and did not fully prevent
denial-of-service attacks in all payload types. This affects React
package versions 19.0.2, 19.1.3, and 19.2.2 and frameworks that use the
affected packages, including Next.js 13.x, 14.x, 15.x and 16.x using the
App Router. The issue is tracked upstream as
[CVE-2025-67779](https://www.cve.org/CVERecord?id=CVE-2025-67779).

A malicious HTTP request can be crafted and sent to any Server Function
endpoint that, when deserialized, can enter an infinite loop within the
React Server Components runtime. This can cause the server process to
hang and consume CPU, resulting in denial of service in unpatched
environments.

---

### Release Notes

<details>
<summary>vercel/next.js (next)</summary>

###
[`v16.0.10`](https://redirect.github.com/vercel/next.js/compare/v16.0.9...v16.0.10)

[Compare
Source](https://redirect.github.com/vercel/next.js/compare/v16.0.9...v16.0.10)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasin... (continued)

3263 of 4169 branches covered (78.27%)

Branch coverage included in aggregate %.

5740 of 6434 relevant lines covered (89.21%)

118754.5 hits per line

Relevant lines Covered
6434 RELEVANT LINES 5740 COVERED LINES
118754.5 HITS PER LINE
Source Files on gh-readonly-queue/main/pr-8028-bd1dadde3cdb8352eb5bf2219cd4f9527f3a44cd

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
20195115396 gh-readonly-queue/main/pr-8028-bd1dadde3cdb8352eb5bf2219cd4f9527f3a44cd chore(deps): update dependency next to v16.0.10 [security] (#8028) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) ... push web-flow github
84.91
See All Builds (1154)

Badge your Repo: webcomponents-react

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh