Skip to content

fix(backend-deps): upgrade payload and next to latest#930

Open
jeffplays2005 wants to merge 7 commits intomasterfrom
fix/payload-deps
Open

fix(backend-deps): upgrade payload and next to latest#930
jeffplays2005 wants to merge 7 commits intomasterfrom
fix/payload-deps

Conversation

@jeffplays2005
Copy link
Member

@jeffplays2005 jeffplays2005 commented Feb 4, 2026

Description

Note

Some things are likely to break, hence requiring a slower development flow with proper testing & monitoring to work on.

Important

Payload v3.65.0:
This release disables Turbopack Build support. Please use Webpack to build your app for now. You can do so by using pnpm build on Next.js 15 and pnpm build --webpack on Next.js 16.

This ticket addresses the CVE issue with Next.js and updates the Payload & related dependencies to the latest (possible) versions.

Also aims to upgrade the backend Next.js version to the latest possible version.

Type of change

  • Bug fix (non-breaking change which fixes an issue)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)

How Has This Been Tested?

  • Manual testing (requires screenshots or videos)
  • Integration tests written (requires checks to pass)

Checklist before requesting a review

  • My code follows the style guidelines of this project
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have added thorough tests that prove my fix is effective and that my feature works
  • I've requested a review from another user

@github-actions
Copy link
Contributor

github-actions bot commented Feb 4, 2026

Preview Deployment Status

✅ Storybook Preview: https://e5c1ccdc.uabc-storybook.pages.dev

✅ Frontend Preview: https://4fc8aaf8.uabc.pages.dev

@github-actions
Copy link
Contributor

github-actions bot commented Feb 4, 2026

Coverage Report

Status Category Percentage Covered / Total
🔵 Lines 84.03% (🎯 70%)
🟰 ±0%
2578 / 3068
🔵 Statements 83.89% (🎯 70%)
🟰 ±0%
2641 / 3148
🔵 Functions 78.78% (🎯 80%)
🟰 ±0%
609 / 773
🔵 Branches 77.92% (🎯 60%)
🟰 ±0%
1436 / 1843
File CoverageNo changed files found.
Generated in workflow #3860 for commit 7b4ecff by the Vitest Coverage Report Action

- Backend `next` version has been updated and NOT frontend
- Types have been regenerated as Payload implemented kv
@jeffplays2005 jeffplays2005 changed the title fix(deps): upgrade payload to latest fix(backend-deps): upgrade payload and next to latest Feb 4, 2026
https://nextjs.org/blog/CVE-2025-66478

- Updated to the patched version of `15.4.x` to address CVE issue.
- Also matched the next.js versions to address type disparities.
> **Payload v3.65.0:**
> This release disables Turbopack Build support. Please use Webpack to build your app for now.
> You can do so by using `pnpm build` on Next.js 15 and `pnpm build --webpack` on Next.js 16.
@jeffplays2005 jeffplays2005 force-pushed the fix/payload-deps branch 3 times, most recently from 990ad1d to bcba20e Compare February 6, 2026 06:40
- React `19.2.1` contains a patch for the recent CVE-2025-55182 vulnerability.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[DevOps] [Critical] Update next.js version

1 participant