UI5 / webcomponents-react / 19920995925 / 1

85%

main: 85%

push

github

chore(deps): update dependency next to v16.0.7 [security] (#8000)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [next](https://nextjs.org)
([source](https://redirect.github.com/vercel/next.js)) | [`16.0.6` ->
`16.0.7`](https://renovatebot.com/diffs/npm/next/16.0.6/16.0.7) |
![age](https://developer.mend.io/api/mc/badges/age/npm/next/16.0.7?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/next/16.0.6/16.0.7?slim=true)
|

### GitHub Vulnerability Alerts

####
[CVE-2025-66478](https://redirect.github.com/vercel/next.js/security/advisories/GHSA-9qr9-h5gf-34mp)

A vulnerability affects certain React packages<sup>1</sup> for versions
19.0.0, 19.1.0, 19.1.1, and 19.2.0 and frameworks that use the affected
packages, including Next.js 15.x and 16.x using the App Router. The
issue is tracked upstream as
[CVE-2025-55182](https://www.cve.org/CVERecord?id=CVE-2025-55182).

Fixed in:
React: 19.0.1, 19.1.2, 19.2.1
Next.js: 15.0.5, 15.1.9, 15.2.6, 15.3.6, 15.4.8, 15.5.7, 16.0.7

The vulnerability also affects experimental canary releases starting
with 14.3.0-canary.77. Users on any of the 14.3 canary builds should
either downgrade to a 14.x stable release or 14.3.0-canary.76.

All users of stable 15.x or 16.x Next.js versions should upgrade to a
patched, stable version immediately.

<sup>1</sup> The affected React packages are:
- react-server-dom-parcel
- react-server-dom-turbopack
- react-server-dom-webpack

---

### Release Notes

<details>
<summary>vercel/next.js (next)</summary>

###
[`v16.0.7`](https://redirect.github.com/vercel/next.js/compare/v16.0.6...7492122a3)

[Compare
Source](https://redirect.github.com/vercel/next.js/compare/v16.0.6...v16.0.7)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At ... (continued)

118 of 3173 branches covered (3.72%)

Branch coverage included in aggregate %.

841 of 5124 relevant lines covered (16.41%)

14.7 hits per line