Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@
"dotenv": "^17.2.0",
"fuse.js": "^7.0.0",
"lodash": "^4.17.21",
"next": "^14.2.35",
"next": "^15.5.10",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unsupported Next third-parties version pairing

Medium Severity

Upgrading next to ^15.5.10 while keeping @next/third-parties at ^14.2.35 creates an unsupported version mix. @next/third-parties@14.2.35 declares a peer range for next ^13 || ^14, so this change can cause peer resolution failures in stricter installs and runtime incompatibilities in components importing @next/third-parties/google.

Additional Locations (1)

Fix in Cursor Fix in Web

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nextra 2.13.4 may not support Next.js 15

High Severity

Nextra 2.13.4 and nextra-theme-docs 2.13.4 are pinned to outdated versions that were released before Next.js 15. Research shows that Nextra 4 is the current version supporting Next.js 14 and 15, with significant breaking changes including dropping Pages Router support. While Nextra 2.13.4's peer dependencies technically allow Next.js 15, the framework was not designed or tested against Next.js 15's breaking changes, potentially causing build failures or runtime errors.

Fix in Cursor Fix in Web

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Next.js 15 requires React 19, but React 18 remains

High Severity

Bumping next from ^14.2.35 to ^15.5.10 is a major version upgrade that requires react and react-dom to be updated to version 19, but they remain at ^18.3.1. Next.js 15.5.x has a peer dependency on React 19, so this will cause installation failures (peer dependency conflicts) and potentially runtime errors. The @next/third-parties package also remains pinned at ^14.2.35 and nextra/nextra-theme-docs at 2.13.4, which may not be compatible with Next.js 15.

Additional Locations (1)

Fix in Cursor Fix in Web

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Major Next.js bump leaves companion packages at v14

High Severity

Bumping next from 14 to 15 (a major version) while @next/third-parties stays at ^14.2.35, nextra at 2.13.4, and nextra-theme-docs at 2.13.4 is very likely to break the build or cause runtime failures. @next/third-parties is a version-aligned companion package that needs to match the next major version. nextra 2.x was built for Next.js 13/14 and relies on internal Next.js APIs; Nextra 3+/4+ was specifically created for Next.js 15 compatibility. Dev dependencies @next/eslint-plugin-next and eslint-config-next also remain at v14.

Additional Locations (2)

Fix in Cursor Fix in Web

"nextra": "2.13.4",
"nextra-theme-docs": "2.13.4",
"node-fetch": "^3.3.2",
Expand Down
Loading
Loading