Skip to content

chore: Updating next to version 15 to fix security issue#2165

Merged
colinmurphy merged 2 commits intocanaryfrom
faust-security-updates-sept-2025
Sep 3, 2025
Merged

chore: Updating next to version 15 to fix security issue#2165
colinmurphy merged 2 commits intocanaryfrom
faust-security-updates-sept-2025

Conversation

@colinmurphy
Copy link
Copy Markdown
Member

@colinmurphy colinmurphy commented Sep 2, 2025

Tasks

  • I have signed a Contributor License Agreement (CLA) with WP Engine.
  • If a code change, I have written testing instructions that the whole team & outside contributors can understand.
  • I have written and included a comprehensive changeset to properly document the changes I've made.

Description

Security issue - https://vercel.com/changelog/cve-2025-57822

Related Issue(s):

Testing

Screenshots

Documentation Changes

Dependant PRs

@colinmurphy colinmurphy requested a review from a team as a code owner September 2, 2025 15:30
@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented Sep 2, 2025

🦋 Changeset detected

Latest commit: 9d4e788

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages
Name Type
@faustwp/blocks Patch
@faustwp/core Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

Updated next package to version 15 to address a security issue.
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Sep 2, 2025

📦 Next.js Bundle Analysis for @faustwp/getting-started-example

This analysis was generated by the Next.js Bundle Analysis action. 🤖

⚠️ Global Bundle Size Increased

Page Size (compressed)
global 266.15 KB (🟡 +2.03 KB)
Details

The global bundle is the javascript bundle that loads alongside every page. It is in its own category because its impact is much higher - an increase to its size means that every page on your website loads slower, and a decrease means every page loads faster.

Any third party scripts you have added directly to your app using the <script> tag are not accounted for in this analysis

If you want further insight into what is behind the changes, give @next/bundle-analyzer a try!

Five Pages Changed Size

The following pages changed size from the code in this PR compared to its base branch:

Page Size (compressed) First Load % of Budget (350 KB)
/ 265 B 266.41 KB 76.12% (+/- <0.01%)
/[...wordpressNode] 277 B 266.42 KB 76.12% (+/- <0.01%)
/_error 180 B 266.33 KB 76.09% (+/- <0.01%)
/example 806 B 266.94 KB 76.27% (🟢 -0.01%)
/preview 258 B 266.4 KB 76.12% (🟢 -0.01%)
Details

Only the gzipped size is provided here based on an expert tip.

First Load is the size of the global bundle plus the bundle for the individual page. If a user were to show up to your website and land on a given page, the first load size represents the amount of javascript that user would need to download. If next/link is used, subsequent page loads would only need to download that page's bundle (the number in the "Size" column), since the global bundle has already been downloaded.

Any third party scripts you have added directly to your app using the <script> tag are not accounted for in this analysis

The "Budget %" column shows what percentage of your performance budget the First Load total takes up. For example, if your budget was 100kb, and a given page's first load size was 10kb, it would be 10% of your budget. You can also see how much this has increased or decreased compared to the base branch of your PR. If this percentage has increased by 20% or more, there will be a red status indicator applied, indicating that special attention should be given to this. If you see "+/- <0.01%" it means that there was a change in bundle size, but it is a trivial enough amount that it can be ignored.

@github-project-automation github-project-automation Bot moved this to 🆕 Backlog in Headless OSS Sep 2, 2025
@colinmurphy colinmurphy moved this from 🆕 Backlog to 👀 In review in Headless OSS Sep 2, 2025
@colinmurphy colinmurphy merged commit 59953b9 into canary Sep 3, 2025
12 of 26 checks passed
@colinmurphy colinmurphy deleted the faust-security-updates-sept-2025 branch September 3, 2025 07:54
@github-project-automation github-project-automation Bot moved this from 👀 In review to ✅ Closed in Headless OSS Sep 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: ✅ Closed

Development

Successfully merging this pull request may close these issues.

2 participants