Skip to content

Conversation

Copy link
Contributor

Copilot AI commented Dec 4, 2025

Description

PR #538 updated package.json files to Next.js 15.5.7 but did not regenerate package-lock.json files, leaving installations vulnerable to GHSA-9qr9-h5gf-34mp.

Changed:

  • Regenerated 6 existing package-lock.json files (were locked at 15.4.7 or 15.5.2)
  • Updated toolbar example package.json version specifier (^15.5^15.5.7) and regenerated its lockfile (was at 15.5.5)

Files updated:

  • examples/next/*/example-app/package-lock.json (4 files)
  • packages/toolbar/examples/next/example-app/package.json + package-lock.json
  • plugins/hwp-previews/examples/hwp-preview-rest/example-app/package-lock.json
  • plugins/wpgraphql-webhooks/examples/webhooks-isr/example-app/package-lock.json

All tracked lockfiles now reference Next.js 15.5.7. Security audits confirm 0 vulnerabilities.

Related Issue

Completes work from #538

Dependant PRs

None

Type of Change

  • ✅ Bug fix (non-breaking change which fixes an issue)
  • ✨ New feature (non-breaking change which adds functionality)
  • 💥 Breaking change (fix or feature that would cause existing functionality to change)
  • 🧹 Code refactoring (no functional changes)
  • 📄 Example update (no functional changes)
  • 📝 Documentation update
  • 🔍 Performance improvement
  • 🧪 Test update

How Has This Been Tested?

  • Verified all tracked package-lock.json files reference Next.js 15.5.7
  • Ran npm audit on updated examples (0 vulnerabilities)
  • CodeQL scan confirmed no security issues

Screenshots

N/A

Checklist

  • I have read the CONTRIBUTING document
  • My code follows the project's coding standards
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation (if applicable)
  • My changes generate no new warnings
  • I have added tests that prove my fix is effective or that my feature works (if applicable)
  • Any dependent changes have been highlighted, merged or published
Original prompt

This section details on the original issue you should resolve

<issue_title>chore: Update Next.js for examples</issue_title>
<issue_description># Overview

Update all version of Next.js under examples to the latest version.

The latest version currently is 15.5.7 - GHSA-9qr9-h5gf-34mp</issue_description>

<agent_instructions>PR was created #538 which updated the package.json file but never updated the package-lock.json file so the security issues still exist.</agent_instructions>

Comments on the Issue (you are @copilot in this section)


💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

@changeset-bot
Copy link

changeset-bot bot commented Dec 4, 2025

⚠️ No Changeset found

Latest commit: 673bcf2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@ahuseyn ahuseyn self-requested a review December 4, 2025 10:12
@github-project-automation github-project-automation bot moved this to 🆕 Backlog in Headless OSS Dec 4, 2025
@ahuseyn ahuseyn moved this from 🆕 Backlog to 👀 In review in Headless OSS Dec 4, 2025
@ahuseyn ahuseyn moved this from 👀 In review to 🏗 In progress in Headless OSS Dec 4, 2025
Copilot AI and others added 3 commits December 4, 2025 10:14
Co-authored-by: colinmurphy <682403+colinmurphy@users.noreply.github.com>
Co-authored-by: colinmurphy <682403+colinmurphy@users.noreply.github.com>
Co-authored-by: colinmurphy <682403+colinmurphy@users.noreply.github.com>
Copilot AI changed the title [WIP] Update Next.js to version 15.5.7 in examples chore: Regenerate package-lock.json files for Next.js 15.5.7 Dec 4, 2025
@github-actions
Copy link

github-actions bot commented Dec 4, 2025

📦 Plugin Artifacts Ready!

Download from GitHub Actions run

Available plugins:

  • ✅ hwp-previews.zip
  • ✅ wpgraphql-webhooks.zip

See the "Artifacts" section at the bottom of the Actions run page

Copilot AI requested a review from colinmurphy December 4, 2025 10:27
@colinmurphy colinmurphy marked this pull request as ready for review December 4, 2025 10:28
@colinmurphy colinmurphy requested a review from a team as a code owner December 4, 2025 10:28
@colinmurphy colinmurphy enabled auto-merge December 4, 2025 10:28
@colinmurphy colinmurphy added this pull request to the merge queue Dec 4, 2025
Merged via the queue into main with commit 154a98d Dec 4, 2025
15 of 19 checks passed
@colinmurphy colinmurphy deleted the copilot/update-nextjs-examples branch December 4, 2025 10:30
@github-project-automation github-project-automation bot moved this from 🏗 In progress to ✅ Closed in Headless OSS Dec 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: ✅ Closed

Development

Successfully merging this pull request may close these issues.

chore: Update Next.js for examples

3 participants