Skip to content

chore(deps): bump next from 15.5.15 to 15.5.18 in /examples/dApp/simple-lock#795

Merged
RetricSu merged 2 commits into
developfrom
dependabot/npm_and_yarn/examples/dApp/simple-lock/next-15.5.18
May 12, 2026
Merged

chore(deps): bump next from 15.5.15 to 15.5.18 in /examples/dApp/simple-lock#795
RetricSu merged 2 commits into
developfrom
dependabot/npm_and_yarn/examples/dApp/simple-lock/next-15.5.18

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Bumps next from 15.5.15 to 15.5.18.

Release notes

Sourced from next's releases.

v15.5.18

This release contains security fixes for the following advisories:

High:

Moderate:

Low:

v15.5.16

This release contains security fixes for the following advisories:

High:

Moderate:

Low:

Commits
  • 9ff92ce v15.5.18
  • 00ebe23 [backport] Disable build caches for production/staging/force-preview deploys ...
  • 62c97ab v15.5.17
  • 423623a Turbopack: Match proxy matchers with webpack implementation (#93594)
  • fa78739 Turbopack: Fix middleware matcher suffix (#93590)
  • 36e62c6 [backport] Turbopack: more strict vergen setup (#93588)
  • 36589b5 [backport][test] Pin package manager to patch versions (#93596)
  • ad6fd4e v15.5.16
  • 79d7dff Ignore malformed CSP nonce headers (#103)
  • c4f6908 router-server: guard upgrade proxy against absolute-url SSRF (#77) (#102)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [next](https://github.com/vercel/next.js) from 15.5.15 to 15.5.18.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.5.15...v15.5.18)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 15.5.18
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 12, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented May 12, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
nervos-ckb-docs Ready Ready Preview, Comment May 12, 2026 5:19am

Request Review

@RetricSu
Copy link
Copy Markdown
Collaborator

@copilot fix the ci

Copy link
Copy Markdown
Contributor

Copilot AI commented May 12, 2026

@copilot fix the ci

Fixed in fb512e4. The CI was failing because the pnpm-lock.yaml committed by dependabot didn't match the expected format (Prettier rewrites quote styles). I ran pnpm install and pnpm format to regenerate and format the lock file correctly.

Copilot AI requested a review from RetricSu May 12, 2026 05:19
@RetricSu RetricSu merged commit a1aaf19 into develop May 12, 2026
4 checks passed
@RetricSu RetricSu deleted the dependabot/npm_and_yarn/examples/dApp/simple-lock/next-15.5.18 branch May 12, 2026 05:40
RetricSu added a commit that referenced this pull request May 12, 2026
* chore(deps): bump axios in /examples/dApp/ccc-molecule (#792)

Bumps [axios](https://github.com/axios/axios) from 1.15.0 to 1.16.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.15.0...v1.16.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.16.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump @babel/plugin-transform-modules-systemjs in /website (#793)

Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) from 7.23.9 to 7.29.4.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs)

---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-modules-systemjs"
  dependency-version: 7.29.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix: correct total supply statement in node overview (#794)

* fix: correct total supply statement in node overview

The previous text incorrectly stated that CKB's "total supply is fixed
at 33.6 billion CKB." However, per CKB's economic model (RFC 0015),
while the base issuance is capped at 33.6 billion CKB, secondary
issuance adds a fixed 1.344 billion CKB annually with no upper limit.
This means the total supply is not fixed at 33.6 billion.

Update the statement to refer to the base issuance cap instead of the
total supply.

Fixes #789

* fix: reword global state cap explanation to include secondary issuance

Address review feedback: the previous wording still implied the global
state was strictly capped by the 33.6B base issuance limit. Since
secondary issuance continues to add CKB annually, the global state
is not strictly capped at a fixed number.

Reword the bullet to state that the total supply grows predictably
through both capped base issuance and fixed-rate secondary issuance,
so the global state size is inherently bounded rather than fixed.

* fix: reword global state explanation per review suggestion

Replace the bullet with a more accurate explanation that:
- Emphasizes the economic constraint rather than implying a hard cap
- Acknowledges base issuance is capped at 33.6B CKB
- Explicitly notes that secondary issuance can still increase capacity

* fix: use 'predictably' to describe secondary issuance growth

---------

Co-authored-by: humble-little-bear <retric@ckba.build>

* chore(deps): bump next from 15.5.15 to 15.5.18 in /examples/dApp/simple-lock (#795)

* chore(deps): bump next in /examples/dApp/simple-lock

Bumps [next](https://github.com/vercel/next.js) from 15.5.15 to 15.5.18.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.5.15...v15.5.18)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 15.5.18
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: update and format pnpm-lock.yaml in simple-lock after next bump

Agent-Logs-Url: https://github.com/nervosnetwork/docs.nervos.org/sessions/0c619746-5c8c-49af-8ba2-d1ec1ef33018

Co-authored-by: RetricSu <23436060+RetricSu@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: RetricSu <23436060+RetricSu@users.noreply.github.com>

* chore: bump version to 2.38.0 (#796)

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: humble-little-bear <retric@ckba.build>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: RetricSu <23436060+RetricSu@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants