[playground] Downgrade Next.js to a secure version #35317
Merged
+77
−71
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
github-actions
bot
added
the
React Core Team
eps1lon
force-pushed
the
sebbie/12-07-_playground_downgrade_next.js_to_a_secure_version
branch
from
84dd80b to
ef3d1e2
Compare
Contributor
You might be referring to this issue which has been fixed. The fix cleared the way for Activity in this PR, now merged. |
github-actions bot
pushed a commit
to surajmaity1/react
that referenced
this pull request
Dec 9, 2025
Was bumped to a canary in facebook#34499 which got never released as stable. Presumeably to use `Activity` which only made it into Activity in later Next.js releases. However, `Activity` never ended up being used due to incompatibilities with Monaco Editor. Downgrading should be safe. Downgrading to fix GHSA-9qr9-h5gf-34mp. This will allow new deploys since Vercel is currently blocking new deploys of unsafe version --------- Co-authored-by: Eugene Choi <[email protected]> DiffTrain build for [55480b4](facebook@55480b4)
github-actions bot
pushed a commit
to surajmaity1/react
that referenced
this pull request
Dec 9, 2025
Was bumped to a canary in facebook#34499 which got never released as stable. Presumeably to use `Activity` which only made it into Activity in later Next.js releases. However, `Activity` never ended up being used due to incompatibilities with Monaco Editor. Downgrading should be safe. Downgrading to fix GHSA-9qr9-h5gf-34mp. This will allow new deploys since Vercel is currently blocking new deploys of unsafe version --------- Co-authored-by: Eugene Choi <[email protected]> DiffTrain build for [55480b4](facebook@55480b4)
This was referenced Dec 9, 2025
unstubbable
pushed a commit
to vercel/next.js
that referenced
this pull request
Dec 10, 2025
[diff facebook/react@378973b3...55480b4d](facebook/react@378973b...55480b4) <details> <summary>React upstream changes</summary> - facebook/react#35317 - facebook/react#35306 - facebook/react#35285 - facebook/react#35316 - facebook/react#35313 - facebook/react#35308 - facebook/react#35284 - facebook/react#35296 </details>
github-actions bot
pushed a commit
to code/lib-react
that referenced
this pull request
Dec 14, 2025
Was bumped to a canary in facebook#34499 which got never released as stable. Presumeably to use `Activity` which only made it into Activity in later Next.js releases. However, `Activity` never ended up being used due to incompatibilities with Monaco Editor. Downgrading should be safe. Downgrading to fix GHSA-9qr9-h5gf-34mp. This will allow new deploys since Vercel is currently blocking new deploys of unsafe version --------- Co-authored-by: Eugene Choi <[email protected]> DiffTrain build for [55480b4](facebook@55480b4)
github-actions bot
pushed a commit
to code/lib-react
that referenced
this pull request
Dec 14, 2025
Was bumped to a canary in facebook#34499 which got never released as stable. Presumeably to use `Activity` which only made it into Activity in later Next.js releases. However, `Activity` never ended up being used due to incompatibilities with Monaco Editor. Downgrading should be safe. Downgrading to fix GHSA-9qr9-h5gf-34mp. This will allow new deploys since Vercel is currently blocking new deploys of unsafe version --------- Co-authored-by: Eugene Choi <[email protected]> DiffTrain build for [55480b4](facebook@55480b4)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Was bumped to a canary in #34499 which got never released as stable.
Presumeably to use
Activitywhich only made it into Activity in later Next.js releases. However,Activitynever ended up being used due to incompatibilities with Monaco Editor. Downgrading should be safe.Downgrading to fix GHSA-9qr9-h5gf-34mp. This will allow new deploys since Vercel is currently blocking new deploys of unsafe version