Bump the development-dependencies group with 5 updates

[dependabot]

Bumps the development-dependencies group with 5 updates:

Package	From	To
@types/react	19.2.8	19.2.13
next	16.1.2	16.1.6
npm-check-updates	19.3.1	19.3.2
prettier	3.8.0	3.8.1
rollup	4.55.1	4.57.1

Updates @types/react from 19.2.8 to 19.2.13

Commits

• See full diff in compare view

Updates next from 16.1.2 to 16.1.6

Release notes

Sourced from next's releases.

v16.1.6

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• Upgrade to swc 54 (#88207)
• implement LRU cache with invocation ID scoping for minimal mode response cache (#88509)
• tweak LRU sentinel key (#89123)

Credits

Huge thanks to @​mischnic, @​wyattjoh, and @​ztanner for helping!

v16.1.5

Please refer the following changelogs for more information about this security release:

https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472 https://vercel.com/changelog/summary-of-cve-2026-23864

v16.1.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• Only filter next config if experimental flag is enabled (#88733)

Credits

Huge thanks to @​mischnic for helping!

v16.1.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• Fix linked list bug in LRU deleteFromLru (#88652)
• Fix relative same host redirects in node middleware (#88253)

Credits

Huge thanks to @​acdlite and @​ijjk for helping!

Commits

• adf8c61 v16.1.6
• 098c0c0 [backport][ci] Make gh auth status optional when triggering a release (#89100)
• a43df32 Backport/docs fixes jan 25 16.1.x (#89124)
• d6d5734 tweak LRU sentinel cache key (#89123)
• 4324698 backport: implement LRU cache with invocation ID scoping for minimal mode res...
• 23c4649 [backport] Upgrade to swc 54 (#88207) (#89103)
• acba4a6 v16.1.5
• e1d1fc6 Add maximum size limit for postponed body parsing (#88175)
• 500ec83 fetch(next/image): reduce maximumResponseBody from 300MB to 50MB (#88588)
• 1caaca3 feat(next/image)!: add images.maximumResponseBody config (#88183)
• Additional commits viewable in compare view

Updates npm-check-updates from 19.3.1 to 19.3.2

Release notes

Sourced from npm-check-updates's releases.

v19.3.2

What's Changed

• docs: close code tag instead of reopening another one by @​sod in raineorshine/npm-check-updates#1588
• fix(tests): resolve EBUSY errors on Windows by retrying directory removal by @​Zamiell in raineorshine/npm-check-updates#1590

New Contributors

• @​sod made their first contribution in raineorshine/npm-check-updates#1588

Full Changelog: raineorshine/npm-check-updates@v19.3.1...v19.3.2

Commits

• 168325c 19.3.2
• e057a79 install: Provide more helpful message on install failure.
• 7f32052 fix(tests): resolve EBUSY errors on Windows by retrying directory removal (#1...
• 30a0e08 docs: close code tag instead of reopening another one (#1588)
• See full diff in compare view

Updates prettier from 3.8.0 to 3.8.1

Release notes

Sourced from prettier's releases.

3.8.1

• Include available printers in plugin type declarations (#18706 by @​porada)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.1

diff

Include available printers in plugin type declarations (#18706 by @​porada)

// Input
import * as prettierPluginEstree from "prettier/plugins/estree";
// Prettier 3.8.0
// Property 'printers' does not exist on type 'typeof import("prettier/plugins/estree")'. ts(2339)
prettierPluginEstree.printers.estree; //=> any
// Prettier 3.8.1
prettierPluginEstree.printers.estree; //=> Printer
prettierPluginEstree.printers["estree-json"]; //=> Printer

Commits

• 90983f4 Release 3.8.1
• 57f702f Include available printers in plugin type declarations (#18706)
• bece827 Revert change in release script
• 82a4ab2 Bump Prettier dependency to 3.8.0
• 5213ee4 Clean changelog_unreleased
• f95ad0f Comment out finished steps
• b2034e8 Fix release script
• 5824b15 Release 3.8.0
• 0433601 Add blog post for v3.8.0 (#18639)
• c45fef1 Fix LWC attribute with --embedded-language-formatting off (#18383)
• See full diff in compare view

Updates rollup from 4.55.1 to 4.57.1

Release notes

Sourced from rollup's releases.

v4.57.1

4.57.1

2026-01-30

Bug Fixes

• Fix heap corruption issue in Windows (#6251)
• Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

• #6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@​alan-agius4, @​lukastaegert)
• #6252: chore(deps): update dependency lru-cache to v11 (@​renovate[bot])
• #6253: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #6254: Fully include dynamic imports in a try-catch (@​lukastaegert)
• #6255: chore(deps): lock file maintenance (@​renovate[bot])

v4.57.0

4.57.0

2026-01-27

Features

• Add import attributes to all plugin hooks that did not provide them yet (#5700)
• Deprecate returning import attributes from load or transform hooks as that will no longer be supported with rollup 5 (#5700)

Pull Requests

• #5700: extend more hooks to include import attributes and add warnings (@​TrickyPi, @​lukastaegert)
• #6243: fix(deps): update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #6244: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #6245: chore(deps): lock file maintenance (@​renovate[bot])
• #6246: Refactor to reduce Rollup 5 upgrade diff (@​lukastaegert)

v4.56.0

4.56.0

2026-01-22

Features

• Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

• Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.57.1

2026-01-30

Bug Fixes

• Fix heap corruption issue in Windows (#6251)
• Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

• #6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@​alan-agius4, @​lukastaegert)
• #6252: chore(deps): update dependency lru-cache to v11 (@​renovate[bot])
• #6253: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #6254: Fully include dynamic imports in a try-catch (@​lukastaegert)
• #6255: chore(deps): lock file maintenance (@​renovate[bot])

4.57.0

2026-01-27

Features

• Add import attributes to all plugin hooks that did not provide them yet (#5700)
• Deprecate returning import attributes from load or transform hooks as that will no longer be supported with rollup 5 (#5700)

Pull Requests

• #5700: extend more hooks to include import attributes and add warnings (@​TrickyPi, @​lukastaegert)
• #6243: fix(deps): update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #6244: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #6245: chore(deps): lock file maintenance (@​renovate[bot])
• #6246: Refactor to reduce Rollup 5 upgrade diff (@​lukastaegert)

4.56.0

2026-01-22

Features

• Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

• Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

• #6230: Refine namespace handling (@​lukastaegert)

... (truncated)

Commits

• d37675f 4.57.1
• eafac0b chore(deps): lock file maintenance (#6255)
• 47fa568 chore(deps): update dependency lru-cache to v11 (#6252)
• 416f476 Fully include dynamic imports in a try-catch (#6254)
• 5e393e3 fix: Isolate and cache process.report.getReport() calls in a child process ...
• c931d23 chore(deps): lock file maintenance minor/patch updates (#6253)
• c79e6c2 Mitigate vulnerability that would allow to steal credentials
• 743d054 4.57.0
• 74121c7 extend more hooks to include import attributes and add warnings (#5700)
• c519d82 Refactor to reduce Rollup 5 upgrade diff (#6246)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions