Skip to content

deps: Next.js 16.4.3 (0.10.0) - #321

Merged
ralyodio merged 1 commit into
masterfrom
chore/next-16
Oct 26, 2026
Merged

ralyodio merged 1 commit into
masterfrom
chore/next-16

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Upgrades qrypt.chat from Next 15.5.28 to 16.4.3.

  • next + eslint-config-next -> 16.4.3. Build now uses Turbopack (Next 16 default); no custom webpack config, so nothing to port.
  • src/middleware.js -> src/proxy.js, export function proxy (Next 16 rename of middleware). Matcher, rate limits, www redirect and crawl gateway unchanged.
  • removed eslint.ignoreDuringBuilds from next.config.js: Next 16 dropped build-time linting and the key.
  • dynamic APIs (params, cookies, headers) were already awaited, so no route changes.

Verified locally: bun run build clean (85 pages, no warnings), standalone server under Bun answers 200 on /, /chat, /auth, /api/plugins, /llms.txt, security headers present, GPTBot gets 402 from the proxy. bun run test:ci: 119 files, 768 tests pass.

🤖 Generated with Claude Code

- next + eslint-config-next 15.5.28 -> 16.4.3; builds with Turbopack (the 16 default)
- src/middleware.js -> src/proxy.js with export proxy (Next 16 rename; runs on the Node runtime)
- drop the eslint key from next.config.js: Next 16 no longer lints during build

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@ralyodio
ralyodio merged commit 1bad332 into master Oct 26, 2026
7 checks passed
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

14 finding(s)

MEDIUM: 10 | LOW: 4

Severity Rule Location
MEDIUM js-unescaped-html-sink src/app/blog/[slug]/page.jsx:38
MEDIUM js-unescaped-html-sink src/app/blog/[slug]/page.jsx:66
MEDIUM js-unescaped-html-sink src/app/faq/page.jsx:57
MEDIUM js-unescaped-html-sink src/app/layout.jsx:142
MEDIUM js-unescaped-html-sink src/app/layout.jsx:146
MEDIUM js-unescaped-html-sink src/app/page.jsx:49
MEDIUM redos-nested-quantifier src/lib/auth/dns-name.js:88
MEDIUM js-unescaped-html-sink src/lib/components/chat/MessageItem.jsx:85
MEDIUM js-unescaped-html-sink src/lib/components/chat/MessageItem.jsx:130
MEDIUM js-unescaped-html-sink src/lib/components/PitFooter.jsx:15
LOW secret-generic-credential src/app/api/auth/register-anon/route.test.js:32
LOW secret-jwt tests/debug-sms.js:10
LOW secret-generic-credential tests/private-key-import-export.test.js:252
LOW secret-generic-credential tests/private-key-import-export.test.js:264

Snippets are redacted; ThreatCrush never prints matched credential material.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant