fix for CVE-2025-67779 (#1062)

vicb · web-flow · commit 6feb26885c52 · 2025-12-12T08:22:13.000+01:00
diff --git a/.changeset/little-groups-film.md b/.changeset/little-groups-film.md
@@ -0,0 +1,7 @@
+---
+"@opennextjs/aws": patch
+---
+
+fix for CVE-2025-67779
+
+See <https://nextjs.org/blog/security-update-2025-12-11>
diff --git a/packages/open-next/package.json b/packages/open-next/package.json
@@ -64,7 +64,7 @@
     "typescript": "catalog:"
   },
   "peerDependencies": {
-    "next": "^14.2.34 || ~15.0.6 || ~15.1.10 || ~15.2.7 || ~15.3.7 || ~15.4.9 || ~15.5.8 || ^16.0.9"
+    "next": "^14.2.35 || ~15.0.7 || ~15.1.11 || ~15.2.8 || ~15.3.8 || ~15.4.10 || ~15.5.9 || ^16.0.10"
   },
   "bugs": {
     "url": "https://github.com/opennextjs/opennextjs-aws/issues"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
@@ -3,7 +3,7 @@ packages:
   - "packages/*"
 
 catalog:
-  next: 16.0.9
+  next: 16.0.10
   react: 19.0.2
   react-dom: 19.0.2
   "@types/node": 20.17.6
