Skip to content

Commit b9075eb

Browse files
github-actions[bot]chanceaclark
authored andcommitted
Version Packages (integrations/makeswift)
1 parent c698ce1 commit b9075eb

3 files changed

Lines changed: 45 additions & 46 deletions

File tree

.changeset/clever-regions-mate.md

Lines changed: 0 additions & 45 deletions
This file was deleted.

core/CHANGELOG.md

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,49 @@
11
# Changelog
22

3+
## 1.3.8
4+
5+
### Patch Changes
6+
7+
- [#2773](https://github.com/bigcommerce/catalyst/pull/2773) [`b475a36`](https://github.com/bigcommerce/catalyst/commit/b475a3670a3a9b265e4fddddd506bfea943772cf) Thanks [@chanceaclark](https://github.com/chanceaclark)! - Catalyst has been upgraded to Next.js 15.5.9. This is a patch version upgrade that requires migration steps for existing stores to fix a security vulnerability.
8+
9+
## 🔒 Security Update
10+
11+
**This upgrade addresses a security vulnerability ([CVE-2025-55184 + CVE-2025-55183](https://nextjs.org/blog/security-update-2025-12-11))** that affects React Server Components. These vulnerabilities allow a Denial of Service attack and Source Code Exposure attach. This upgrade includes:
12+
- Next.js 15.5.9 with the security patch
13+
- React 19.1.4 and React DOM 19.1.4 with the security patch
14+
15+
**All users are strongly encouraged to upgrade immediately.**
16+
17+
## Key Changes
18+
-**Next.js 15.5.9**: Upgraded from Next.js 15.5.7 to 15.5.9
19+
- ⚛️ **React 19**: Upgraded to React 19.1.4 and React DOM 19.1.4
20+
21+
## Migration Guide
22+
23+
### Update Dependencies
24+
25+
If you're maintaining a custom Catalyst store, update your `package.json`:
26+
27+
```json
28+
{
29+
"dependencies": {
30+
"next": "15.5.9",
31+
"react": "19.1.4",
32+
"react-dom": "19.1.4"
33+
},
34+
"devDependencies": {
35+
"@next/bundle-analyzer": "15.5.9",
36+
"eslint-config-next": "15.5.9"
37+
}
38+
}
39+
```
40+
41+
Then run:
42+
43+
```bash
44+
pnpm install
45+
```
46+
347
## 1.3.7
448

549
### Patch Changes

core/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"name": "@bigcommerce/catalyst-makeswift",
33
"description": "BigCommerce Catalyst is a Next.js starter kit for building headless BigCommerce storefronts.",
4-
"version": "1.3.7",
4+
"version": "1.3.8",
55
"private": true,
66
"scripts": {
77
"dev": "npm run generate && next dev",

0 commit comments

Comments
 (0)