An in-range update of next is breaking the build 🚨 about bekrin.me HOT 8 CLOSED

Patches

• Correctly Count Object References: #10903
• Add warning when built-in CSS/SCSS support is disabled: #10942
• Add missing words in docs: #10941
• Update handling for patterns in custom routes: #10523
• Remove extra closing parenthesis: #10948
• Fix paths.params.type in getStaticPaths(document): #10959
• Check SSG Page via Route Lookup: #10971
• Make sure to not show pages/404 GIP error from _app having GIP: #10974
• Fix examples with relay-compiler: #10976
• Use core-js promise polyfill for nomodule browsers: #10985
• Improve Sass Error: #10982
• Add support for getStaticProps in pages/404: #10984
• Cms-datocms SerializableError fixes: #10986
• Fix Lint: 39ed664
• Generic form of GetStaticProps and GetServerSideProps: #10856
• Add Array.flat polyfill to nomodule-polyfills: #11004
• Add "noreferrer" to the prerender indicator doc link: #11005
• Update RegExp test and remove extra script: #11006
• Update data-fetch example to SSG: #11017
• Feat: update api-routes example to SSG: #11019
• Fix Test for Windows: c135830
• Update amp-first example to use GSSP: #11028
• Update with-zeit-fetch example to use SSG: #11026
• Update next-sass example to use built-in sass support: #11015
• Correct Cache-Control Behavior for GS(S)P: #11022
• Update custom-server-fastify example to not use internal fn: #11040
• Updated analyze-bundles example: #11031
• Use getServerSideProps for example: #11057
• Update custom-server-express example with getServerSideProps: #11035
• Upgrade next.js version on datocms example: #11039
• Update with-loading example to SSG: #11050
• Update form handler example: #11059
• Add support for static 404 when _error does not have custom GIP: #11062
• Update ssr-caching example with getServerSideProps: #11032
• Upgrade styled-jsx: #11070
• Update preset.ts: Remove any and use updated Node.js types: #11075
• Update @next/bundle-analyzer dependencies: #11068
• Update introduction.md: #11092
• Fix prettier linting: a231315
• Add experimental support for SCSS options: #11063
• Update API routes documentation to correctly mention middlewar…: #11083
• Update with-react-multi-carousel example to use GSSP: #11069
• Move public directory for development in examples/with-firebas…: #11085
• Update examples to use getStaticProps where possible: #11136

Credits

Huge thanks to @ijjk, @chibicode, @5alidz, @watanabeyu, @messa, @timneutkens, @followbl, @herrstucki, @danlutz, @Spy-Seth, @asotoglez, @josiahwiebe, @ragingwind, @ruisaraiva19, @SarKurd, @bobaaaaa, @akhila-ariyachandra, @lfades, @matamatanot, @JazibJafri, @tomdohnal, @carlospavanetti, @giuseppeg, @lifeiscontent, @7ma7X, @PaulHale, @john015, and @petamoriken for helping!

The new version differs by 53 commits.

• 9730be6 v9.3.1
• d661fac v9.3.1-canary.7
• 7e2d476 Update examples to use getStaticProps where possible (#11136)
• bfab990 Move public directory for development in examples/with-firebas… (#11085)
• 22e3b93 Update with-react-multi-carousel example to use GSSP (#11069)
• 3e1ace3 Update API routes documentation to correctly mention middlewar… (#11083)
• 25d8652 v9.3.1-canary.6
• ea7c1e1 Add support for SCSS options (#11063)
• a231315 Fix prettier linting
• d8d3337 Update introduction.md (#11092)
• 30cf4d5 v9.3.1-canary.5
• 4cac93a Update @next/bundle-analyzer dependencies (#11068)
• 85e9ce1 Update preset.ts: Remove any and use updated Node.js types (#11075)
• bc4aba1 Upgrade styled-jsx (#11070)
• bb3cce2 Update ssr-caching example with getServerSideProps (#11032)

There are 53 commits in total.

See the full diff

This upgrade is completely backwards compatible and recommended for all users on versions below 9.3.2. For future security related communications of our OSS projects, please join this mailing list.

Next.js has just been audited by one of the top security firms in the world.

They found that attackers could craft special requests to access files in the dist directory (.next).

This does not affect files outside of the dist directory (.next).

In general, the dist directory only holds build assets unless your application intentionally stores other assets under this directory.

We recommend upgrading to the latest version of Next.js to improve the overall security of your application.

How to Upgrade

• We have released patch versions for both the stable and canary channels of Next.js.
• To upgrade run npm install next@latest --save

Impact

• Not affected: Deployments on ZEIT Now v2 (https://zeit.co) are not affected
• Not affected: Deployments using the serverless target
• Not affected: Deployments using next export
• Affected: Users of Next.js below 9.3.2 that use next start

We recommend everyone to upgrade regardless of whether you can reproduce the issue or not.

How to Assess Impact

If you think sensitive code or data could have been exposed, you can filter logs of affected sites by ../ with a 200 response.

What is Being Done

As Next.js has grown in popularity, it has received the attention of security researchers and auditors. We are thankful to Luca Carettoni from Doyensec for their investigation and discovery of the original bug and subsequent responsible disclosure.

We've landed a patch that ensures only known filesystem paths of .next/static are made available under /_next/static.
Regression tests for this attack were added to the security integration test suite.

• We have notified known Next.js users in advance of this publication.
• A public CVE is in progress.
• If you want to stay on top of our security related news impacting Next.js or other ZEIT projects, please join this mailing list.
• We encourage responsible disclosure of future issues. Please email us at [email protected]. We are actively monitoring this mailbox.

Patches

• Add Numeric Separator Support for TypeScript: #11308
• Update CLI custom config documentation link: #11152
• Add error when attempting to export GSSP page: #11154
• Update blog-starter example: #11071
• Add CSS file to build output: #11145
• Update <dir> reference in help text: 5274535
• Clean up examples directory: #11169
• Remove react-ssr-prepass alias as it's not longer needed: #11170
• Upgrade @ampproject/toolbox-optimizer to 2.0.1: #11168
• Add section on reading files: #11084
• [Examples] fix remark link in blog-starter's README: #11177
• Updated with-typescript example to SSG: #11081
• Add CMS example for Sanity: #10907
• Group CSS files in shared build output separate from JS files: #11184
• Updating min nodejs requirement: #11181
• Docs(ssr): req is an IncomingMessage instance, not HttpRequest: #11194
• Add support for baseUrl option in tsconfig and jsconfig: #11203
• [Example] with-passport: #10529
• CMS TakeShape Example: #11038
• Ensure hybrid AMP works correctly with SSG: #11205
• Update mocha example with yml configuration.: #11214
• Fix with-firebase-cloud-messaging example setup code: #10686
• Update wording of new data fetching methods recommendation: #11221
• Updated Api Routes Middleware example to use getServerSideProps: #11128
• With Firebase Client-Side example: #11053
• Docs(example): Load basic-css example on codesandbox: #11227
• Remove mkdirp, bump fs-extra to 9.0.0: #11251
• Add support for paths in tsconfig.json and jsconfig.json: #11293
• Add test for single alias: #11296
• Update GIP docs: #11303
• Add custom amp optimizer and skip validation mode: #10705
• Update handling for ENOENT from GSSP methods: #11302
• Docs: clarify how to customize next/babel presets: #11316
• Fix assignment of props in WithApollo.getInitialProps: #11236
• Fix: typo in isStaging in with-env example: #11305
• Skip paths that are routed to a .d.ts file: #11322
• Upgrade loader-utils: #11324
• Fix warning for API routes with next export: #11330
• Make sure to copy AMP SSG files during export: #11331
• Just a small typo I think, right?: #11344
• [docs] Mention our channels: #11336
• Use records to init store: #11343
• Update data-fetching.md: 074c60e
• Fix preview-mode docs/examples typo: #11345
• Update to prevent re-using workers for getStaticPaths in dev mode: #11347

Credits

Huge thanks to @chibicode, @ijjk, @timneutkens, @sebastianbenz, @zhe, @shaswatsaxena, @prateekbh, @vvo, @lfades, @bbortt, @aviaryan, @mgranados, @julianbenegas, @gregrickaby, @dulmandakh, @yosuke-furukawa, @tinymachine, @bgoerdt, @nicolasrouanne, @filipesmedeiros, @rishabhsaxena, and @queq1890 for helping!

The new version differs by 62 commits.

• ee00813 v9.3.2
• dd4cee7 v9.3.2-canary.9
• e02b66a Add with-redux-toolkit example (#11358)
• 044ddf4 [Example] Use .jpg for images in blog-starter (#11176)
• ee249ee v9.3.2-canary.8
• 1d6ffc3 Fix static/ file name encoding (#11373)
• e83cd4a v9.3.2-canary.7
• d8155b2 Add initial support for new env handling (#10525)
• a391d32 Add docs for multi zones (#11348)
• 4801dcd Update AMP docs (#11353)
• aac2e3e v9.3.2-canary.6
• 2ba6db6 Update to prevent re-using workers for getStaticPaths in dev mode (#11347)
• 67fd72b Fix preview-mode docs/examples typo (#11345)
• 074c60e Update data-fetching.md
• b46abed use records to init store (#11343)

There are 62 commits in total.

See the full diff

Patches

• Revert "Fix assignment of props in WithApollo.getInitialProps " (#11384): #11236
• Add support for comments in tsconfig.json: e7ea276
• Docs: Replace micro-cors with cors middleware: #11395
• Add support for comments in tsconfig.json: #11392
• Fixed typo: libraray -> library: #11435
• Minor change in README.md: #11434
• Fix with-aphrodite readme typo: #11436
• Update api-rest-example to SSG: #11362
• Change mdx options description: #11409
• Update .gitignore: #11421
• Update emotion dependencies in with-emotion-11: #11414
• Fix #11396: #11397
• Fix type ignore: #11479
• Typos fixed: overriden --> overridden and innaccurate -->inacc…: #11454
• Fix small punctuation issue: #11439

Credits

Huge thanks to @bgoerdt, @herrstucki, @MichelleLucero, @liulanz, @sdhani, @JazibJafri, @ElForastero, @moeyashi, @Andarist, @comxd, @chislee0708, and @PullJosh for helping!

The new version differs by 18 commits.

• b5d8660 v9.3.3
• ac223e2 v9.3.3-canary.0
• dd098ca Merge branch 'canary' of github.com:zeit/next.js into canary
• e4bf0d4 Fix small punctuation issue (#11439)
• a553768 Typos fixed: overriden --> overridden and innaccurate -->inacc… (#11454)
• d3d0b93 Fix type ignore (#11479)
• 6f27e21 Fix #11396 (#11397)
• fc94605 Update emotion dependencies in with-emotion-11 (#11414)
• 41764b2 Update .gitignore (#11421)
• 8d63330 Change mdx options description (#11409)
• 9e2ae69 Update api-rest-example to SSG (#11362)
• 48650a7 Fix with-aphrodite readme typo (#11436)
• 39a70d8 Minor change in README.md (#11434)
• 2b818a1 fixed typo: libraray -> library (#11435)
• 8fdc13a Add support for comments in tsconfig.json (#11392)

There are 18 commits in total.

See the full diff

Minor Changes

• Refactor and expand ncc optimization

Patches

• Update to not add path segments to redirect query automatically: #11497
• Use Lax Cookie for Preview Mode: #11495
• Fix(performance-relayer): properly clean up event listeners: #11410
• Drop url dependency: #11503
• Update environment support: #11524
• Update checking for existing dotenv usage: #11496
• Update auth0 example with getServerSideProps: #11051
• Added "with-route-as-modal" example: #11473
• Generic Type for GetStaticPaths: #11430

Credits

Huge thanks to @ijjk, @shYkiSto, @guybedford, @timneutkens, @alfrejivi, @IAmMorrow, and @wongmjane for helping!

The new version differs by 85 commits.

• 8c899ee v9.3.4
• e000d84 v9.3.4-canary.4
• 7b546a9 Update hello-world example React version & name for CodeSandbox (#11550)
• a37ad0a Add notes to styled-components example README (#11540)
• a992444 v9.3.4-canary.3
• 3f6bd47 Update build output with renamed column (#11401)
• 1992e2a Example/update unstated (#11534)
• d61eced Update to make sure AMP only bundles are always removed in pro… (#11527)
• fa5da6d Remove passing of NODE_OPTIONS='--inspect' to subprocesses (#11041)
• f9cd7c5 v9.3.4-canary.2
• c17ee73 Generic Type for GetStaticPaths (#11430)
• 2263876 added "with-route-as-modal" example (#11473)
• f2315ff update auth0 example with getServerSideProps (#11051)
• b307ed9 Update checking for existing dotenv usage (#11496)
• b8d075e Update environment support (#11524)

There are 85 commits in total.

See the full diff

Patches

• Fix styled-components example README notes: #11548
• Prevent extraneous re-renders with next/dynamic: #11587
• Update to make sure to respond with 400 for invalid URLs: #11561
• Add: jsx to list of supported files in docs: #11579
• [docs] document how root routes coexist with dynamic api routes: #11591
• [docs] Remove broken link to example api-routes-micro: #11597
• Update minimum required node version to be more specific: #11604
• Rename unstable GSP field: #11602
• Replace getInitialProps with getServerSideProps: #11586
• [Docs] Remove concepts folder: #11621
• Make providers headlines so they become linkable: #11613
• [fix:typo] - Fixing a typo in the typescript example: #11630
• Fix Preview Mode in <iframe>: #11638
• Update FAQ link: #11636
• Updated with-shallow-routing to use getServerSideProps: #11585
• Add error when GSSP methods are added as page component members: #11645
• Warn when user has pages/_error but no pages/404: #11603
• Updating native-url version: #11670
• Integrate with-atlaskit: #11269
• Fix documentation link in Basic API routes example: #11671
• Add links to sections in data fetching documentation: #11666
• [create-next-app] update logic for shouldUseYarn function: #11683
• Update Automatic Static Optimization docs: #11618
• A little bit of maintenance on the ReasonML examples: #11662
• Use function for function components: #11695
• Add dependencies used by compiled files: #11699
• Add example for polyfilling DOMParser in Node: #10782
• Update postcss.config.js: #11366
• Update webpack and mkdirp: #11165
• Add repository URL to package.json: #10748
• Any elements must be direct children of next/head: #11557
• Add routing example with dynamic as prop: #11114
• Mention <title> and styled-jsx caveats in Document's docs: #11499
• [docs] Mention the new data fetching methods on missing places: #11620
• Allow top-level GitHub repo URLs as examples: #11691
• Import from compiled: #11684
• Remove node-promisepipe library: #11700
• Update compiler.ts Improve TypeScript typings: #11074
• Cleanup Build Output Types: #11076
• Fix Utility Types: #11077
• Add warning when a page is rendered without a starting /: #11418
• Update dependencies: #11707
• Update to not modify req.url for getServerSideProps requests: #11637
• Update typescript.md: #11717
• Remove outdated sentence from static-export example: #11708
• Update got in create-next-app: #11725
• Pre-ncc compiled packages to prevent re-nccing unnecessarily: #11569
• [Examples] Update mobx examples to not use SSR: #11576
• [Example] Remove SSR from with-cerebral: #11562
• [Examples] Add SWR to api-routes and api-routes-middleware: #11385
• [example] Add SWR to api-routes-graphql: #11383
• Chore(deps): remove next-css from examples/antd: #10804
• Docs(examples): add with-iron-session example: #10973
• Update to merge props from GSSP methods with _app pageProps: #11709
• Confirm if user wants example when creating app: #10543
• Fix inconsistent handling for /index: #11643
• Updated with-webpack-bundle-size-analyzer to use SSG: #11657
• Make sure to handle "next" import gracefully: #11733
• Updated with-xstate: #11658
• [Examples] Update with-mobx-state-tree examples: #11736
• Bump timeout for create-next-app tests: #11743
• [contributing docs] Add more details about chromedriver for ma…: #11739
• Fix: small typo in SERVER_PROPS_EXPORT_ERROR constant: #11749
• Add New Provider: #11757
• Minor with-docker readme grammar fix: #11760
• Update start script in preact example: #11763
• Chore(example): Update styled-components to v5: #11765
• Update to latest version of AMP optimizer: #11753
• Fix just headers not being applied in dev mode: #11755
• Remove duplicate content: #11750
• Upgrade ci-info: #11758
• Fix typo: #11786
• Update CNA tests on windows for further investigating: #11779
• Add Node.js version to Bug template: #11781
• Update auto export opt-out warning and err.sh: #11801
• Replace brackets in CSS classes for dynamic routes: #11795
• Add Prismic Example: #10897
• Update dev script in examples/using-preact: #11805
• Handle more invalid CSS class characters: #11809
• Externalize next-server from Server Builds: #11819
• Make sure to pass through query values for custom routes: #11812
• Update dependencies: #11833
• Minor change in hello-world/package.json: #11830
• Rename functional component -> function component: #11850
• Add displayName property to React Context objects: #11829
• Add gip identifiers to NEXT_DATA: #11835
• [examples/custom-server-fastify] Fix ts(2341): #11844
• Update @types in create-next-app: #11815
• [examples/with-react-intl] Fix issues with Intl.js polyfill: #11806
• Update sentry example: #11701
• Adds first input delay performance metric: #8884
• Remove update-check.d.ts: #11858
• Fix Lockfile: 9fdd6ed
• Update Serverless Note in Docs: #11861
• Chore(example): Update styled-components to v5 in with-typescript-styled-components: #11766
• Feat(example): add CRUD example with next-connect and passport: #11359
• Replaced express with next-connect: #11747
• Update shallow routing docs: #11616
• Add stats config for load tests: #11868
• Add basePath in link component and add/remove it consistently: #9988
• Revert "minor change in hello-world/package.json": #11874
• Remove with-cookie-auth: #11865
• Remove unused import: #11875
• Fix Situation Where Build Can Hang Indefinitely: #11881
• Handle Potential Promise Rejection in Serverless: #11882
• Add support for params in header key/values: #10324
• Fix(export): fallback to empty string for basePath: #11880
• Update with-redux-thunk example to include HMR: #11816

Credits

Huge thanks to @mattcarlotta, @devknoll, @kvoncode, @sw-yx, @tsriram, @ijjk, @djanda97, @lfades, @janpio, @noejon, @jansepke, @janicklas-ralph, @asotoglez, @TalAter, @kandros, @scull7, @chibicode, @fabianishere, @PaulPCIO, @mjziolko, @ykzts, @yossisp, @karlhorky, @vassbence, @bduffany, @matamatanot, @lifeiscontent, @joeytepp, @kkobiela, @zfben, @mottox2, @viztor, @vvo, @merelinguist, @zackkrida, @sdhani, @stigkj, @agarwalrounak, @timneutkens, @armujahid, @Timer, @liulanz, @NMinhNguyen, @davecardwell, @MicrochipQ, @a14m, @housseindjirdeh, @hoangvvo, and @Fonger for helping!

The new version differs by 208 commits.

• c0724ca v9.3.5
• df1e548 v9.3.5-canary.13
• ffa4089 Update with-redux-thunk example to include HMR (#11816)
• 682120b v9.3.5-canary.12
• 5248e18 fix(export): fallback to empty string for basePath (#11880)
• ab18c79 Add support for params in header key/values (#10324)
• b1aa594 Handle Potential Promise Rejection in Serverless (#11882)
• d1b987f v9.3.5-canary.11
• 841cd6c Fix Situation Where Build Can Hang Indefinitely (#11881)
• 4e6d6d2 Remove unused import (#11875)
• 4094dfe Remove with-cookie-auth (#11865)
• 5713bcb v9.3.5-canary.10
• f0422f2 Revert "minor change in hello-world/package.json" (#11874)
• d3e308a Add basePath in link component and add/remove it consistently (#9988)
• 0b51b23 Add stats config for load tests (#11868)

There are 208 commits in total.

See the full diff

Patches

• Add initial process.env stubbing for new env support: #11893
• Enable "paths" support by default: #11970
• Experimental: React Refresh Support: #12008
• Add module.hot.invalidate() to webpack HMR: #12038
• Docs(auth): add with-iron-session to the alternatives list: #11903
• Docs(Link): precise how prefetch works: #11792
• Fix: Update shallow routing docs: #11894
• Fix NEXT_PUBLIC env values not being inlined: #11896
• Correct Global and Local CSS Loading Order in Dev: #11901
• Ensure module not found error is shown with jsconfig paths: #11889
• Upgrade terser-webpack-plugin for Webpack 5: #11922
• Add initial configuration changes for webpack 5: #11917
• Updated shallow docs: #11925
• Improved steps for examples/cms-prismic: #11935
• Add warning about manually installing PostCSS plugins: #11966
• Allow disabling runtime JS in production for certain pages: #11949
• Docs: improve wording on some pages according to alex.js: #11973
• Serialize JSON Warnings Before Event: #11976
• Update HMR Client Runtime: #11977
• Add Missing Hook for MainTemplate: #11984
• Strongly Type Usage of Client Pages Loader: #11985
• Add API route to default CNA template: #11981
• With-iron-session: fix link to next-iron-session: #11974
• Fix On Demand Types in Hot Reloader: #11987
• Refactor(next-client-pages-loader): allow toggling router HMR: #11989
• Create React Refresh Utils: #12006
• Examples/with-react-helmet: upgrade react-helmet to v6.0.0: #12000
• Resolve TypeScript Extension in Correct Order: #12014
• Stabilize HMR tests on CI: #12029
• Fast Refresh: Test Syntax Error Recovery: #12032
• Add Heroku to list of cache examples: #12037
• [Examples] Update draft-js to v0.11.5 and add editorKey prop i…: #12011
• Bug: error when using transition property in tailwindcss + emo…: #12027
• Update next/head docs to clarify duplicate tags.: #12033
• Add documentation on next build output.: #12034
• Add note about polyfilling CSS Grid for IE11.: #12035
• Fix typo in next/amp docs: #12040
• Fix linting: 6188c79
• Fix with mobx: #11907
• Update to only apply experimental process.env stub in developm…: #12055
• (examples) Fix link in with-passport example README: #12056
• [Fast Refresh] Module re-execution tests from Metro: #12059
• Rename ZEIT to Vercel: #12075
• Update year on license files: 9f1e713
• Add additional check for segments in destination but not source: #12067
• Make sure to not show _error without 404 warning in some cases: #12061
• Fix postcss.config.js warnings: #12070
• Add Experimental React Refresh Example: #12081
• Rosetta i18n example: #11841
• [Fast Refresh] propagates a module that stops accepting in nex…: #12062
• Upgrade webpack: #12082
• Update to track test timings separate for Azure and Actions: #12083
• Fix type on NextApiHandler: #11988
• Upgrade ora to 4.0.4 to prevent undefined progress on CI build: #12088
• Evaluate App before Page in Dev for CSS Ordering: #12090
• Add Additional Test Case for CSS Order in Dev: #12007
• Update engines in package.json: #12022
• Fix typo in example: #12094
• [internal] Dedupe monorepo deps: #12093
• Fix(dev-server): render 404 when dynamic ssg path doesn't exist: #12085
• Avoid bugs with native Date class: #12098
• Update Code of Conduct email address: #12108
• Make sure to handle // during hydration: #11788
• Update TypeScript API routes tests: #12112
• Fix variable: #12114
• Add example with Magic authentication: #11810
• Improve Server Lib Utilities: #12119
• Remove @types/find-up: #12120
• Add tests for dotenv-expand behavior: #12140
• Ensure modern AMP client page bundles are removed: #12138
• Update to match log style for new env loading: #12137
• Add userbase example: #12150
• Added a link to the next.config.js docs for the with-env-next-…: #12153
• Update snapshot in with-jest example: #12157
• Remove unnecessary export to make usage clearer.: #12167
• Add quotes to static paths in fallback section: #12170
• Run tsconfig paths resolver before PnP: #12104
• Fast Refresh: test cyclic dependencies: #12161
• Link to CLI doc from getting started doc / link to Telemetry doc from CLI doc: #12181
• [Example] update with-tailwindcss-emotion to tailwind 1.3.3 and emotion 11 + tailwind-ui plugin: #11611
• Fix CSS Module HMR: #12177
• Remove launched experimental options: #12197
• Fix basePath not being applied for GS(S)P data routes: #12200
• Update node-notifier: #12205
• Downgrade terser to fix invalid minifying: #12178
• Update size-limit to reflect Terser downgrade: c72143d
• Fix CSS Identifier Cleaning: #12239
• Fix ncc'd version of terser not being used by terser webpack plugin: #12252
• Add namedRegex and routeKeys to routes manifest: #12250
• Downgrade node-notifier to fix Azure tests: #12261
• Update built-in-css-support.md: #12268

Credits

Huge thanks to @ijjk, @vvo, @gndelia, @sparkertime, @Timer, @lfades, @pjaws, @timneutkens, @vcapretz, @justincy, @dvaJi, @bhaskarmurthy, @agarwalrounak, @coktopus, @leerob, @yangshun, @Talbot3, @jamesmosier, @oddnavy, @StarpTech, @bduffany, @Fonger, @matamatanot, @dzigg, @thomasheyenbrock, @qWici, @styfle, @Oxicode, @seanli, @Kiarash-Z, @coetry, @sdhani, @rokinsky, @Dashue, @giovannigiordano, @chibicode, @Arthie, and @andrewkfiedler for helping!

The new version differs by 317 commits.

• e6424fe v9.3.6
• bcd9b77 v9.3.6-canary.16
• 5936cbb Update built-in-css-support.md (#12268)
• 9482bfb Downgrade node-notifier to fix Azure tests (#12261)
• e40f8ff v9.3.6-canary.15
• 5268669 Add namedRegex and routeKeys to routes manifest (#12250)
• af33ebc Fix ncc'd version of terser not being used by terser webpack plugin (#12252)
• f080931 v9.3.6-canary.14
• 937884b Fix CSS Identifier Cleaning (#12239)
• 04f3d94 v9.3.6-canary.13
• c72143d Update size-limit to reflect Terser downgrade
• 718d6a4 v9.3.6-canary.12
• 3094016 Downgrade terser to fix invalid minifying (#12178)
• 6ce3c7b Update node-notifier (#12205)
• 9b8a9de Fix basePath not being applied for GS(S)P data routes (#12200)

There are 250 commits in total.

See the full diff

Minor Changes

• Polyfill fetch by default: #12353
• [Fast Refresh] Redesigned Runtime Error Experience: #12222
• Elements with role=link should open on [Enter]: #12460
• [Fast Refresh] New Overlay for Prerender Error: #12485
• Export NextApiRequest type as interface: #12186
• Experimental: New ESLint Plugin: #11986
• Context types for getStaticProps and getServerSideProps: #12606
• Allow @babel/preset-typescript to be configured: #11840
• Cont. Update performance relayer and remove unstable prefix: #12665
• Enable Fast Refresh by Default: #12640
• Enable sassOptions support in next.config.js: #12685
• [Docs] Environment Variables: #12696

Patches

• Remove documentMiddleware experimental option: #12218
• Update preview-mode.md: #12287
• New logging output: #12169
• Enable NEXT_PUBLIC_ env var support: #12283
• Fix wildcard paths causing infinite resolving: #12318
• [Examples] add Contentful example: #12323
• Fix typo: #12224
• Update jsconfig paths fix for windows: #12328
• Update with-tailwindcss to use Tailwind CSS v1.4.0's new built-in purge option: #12327
• [Docs] Add link to relative title in postcss docs: #12330
• Skip LogBox tests to fix CI: 103c25a
• [Fast Refresh] Skip Environment Check: #12359
• Upgrade source-map package: #12355
• Add URL escaping for custom headers: #12031
• Rectified typo: #12366
• Only monospace numbers for new overlay: #12394
• [Fast Refresh] Click to open in editor: #12397
• Add name to component in with-tailwindcss example: #12417
• Add names to components in hello-world example: #12416
• Add names to components in amp example: #12415
• Update lint-staged: #12225
• [Fast Refresh] Add Titles for Click to Open Action: #12427
• Docs(examples): with-iron-session update: #12418
• Remove NEXT_DATA from production builds when runtime JS is disabled: #12406
• Clean up styles in with-tailwindcss example: #12458
• [Fast Refresh] Fix terminal editors on macOS: #12430
• [Fast Refresh] Support client-side code being ran in Node: #12426
• [Fast Refresh] Unlock Focus on Disabled Element: #12425
• Use fs.promises in test files: #12432
• Fix linting: 806b78c
• Do not prettify lerna.json: 93a94b8
• Add warning for non-standard NODE_ENV value: #12361
• Add additional file serving tests: #12479
• Upgrade Flexbugs Dependency: #12459
• Don't generate fake cache keys for Preview Mode: #12487
• Next/client/link: improve internal type annotation: #12468
• [examples/with-typescript-graphql] Add "createResolverContext" hook, etc.: #11681
• Fixed typo: #12497
• Add note about HoC possibly adding GIP to _app: #12491
• Disable cache warning on supported platforms: #12495
• [Fast Refresh] Better Tabbing Order: #12503
• [Fast Refresh] Correctly Trap Focus in Overlay: #12502
• Disable Comment Extraction: #12496
• [Fast Refresh] Fix overlay display on Safari: #12523
• Update tests to poll for output instead of wait for it: #12534
• Don't add .amp to pathname: #12528
• Update dynamic-import.md: #12541
• [Fast Refresh] New Compile Error Overlay: #12543
• Adds missing deps: #12519
• Add documentation for TypeScript baseUrl and paths option: #12379
• Update blog-starter to use Tailwind CSS v1.4's new built-in purge option: #12452
• Fix: hello world missing default exports: #12551
• Mention nesting in arrays alongside Fragments in next/head docs: #12420
• Update AMP dependencies: #12536
• [Fast Refresh] Toggling of Collapsed Frames: #12560
• [Fast Refresh] Separate LogBox Tests: #12564
• Resolve bug with Prismic Locales: #12132
• [Fast Refresh] Add more test cases: #12568
• Example: added Ant Design Pro Layout less: #12408
• Update to run tests in headless mode on Azure: #12574
• Fix moduleId not resolving correctly on Windows: #12584
• Add cross-env package: #12581
• Add flag to disable API warning: #11380
• Update to latest version of stacktrace-parser: #12597
• Fix DatePicker Day.js bug in Ant Design example: #12580
• [Examples]: With react bootstrap: #12421
• Fix error toast pluralization: #12622
• Clarify dismissal message: #12624
• [Fast Refresh] Adjust Overlay Styling: #12623
• [Fast Refresh] Upgrade react-refresh for SC: #12627
• [Examples] Update data-fetch example: #12617
• [Fast Refresh] Overlay hash must consider stack: #12639
• More renaming ZEIT → Vercel: #12649
• Disable experimental pageEnv stub by default: #12644
• [Fast Refresh] Reorder Loaders: #12671
• [Fast Refresh] Resize Arrows and Preserve Newlines: #12672
• [Fast Refresh] Do not draw eye to collapsed frames: #12673
• Fix: use latest experimental method names: #12669
• Fix check utility in tests: #12678
• Chore(create-next-app): add missing return types on helpers: #12616
• [Fast Refresh] Add additional test case: #12674
• Update documentation that refers to isomorphic fetch libs: #12686
• Chore(create-next-app): add missing types: #12691
• Chore(next): link/router/document missing types: #12692
• Upgrade deps: #12700
• [Examples] Update firebase authentication: #12687
• Update code sample in performance measurement docs: #12690
• Link Made by Vercel to vercel.com: #12702
• Use @/ to show module alias instead of @ prefixed: #12600
• Fix logout in with-iron-session example: #12704
• Add test for API route with fetch polyfill: #12680

Credits

Huge thanks to @jamespohalloran, @lfades, @aemiro-allison, @ijjk, @taylorbryant, @Timer, @ykzts, @plug-n-play, @fabianishere, @vvo, @matamatanot, @chibicode, @karlhorky, @christianalfoni, @sangotaro, @liulanz, @dalibor-123, @stefanjudis, @Kiarash-Z, @hossam-magdy, @mit123suki, @robinweser, @lncls, @kohchihao, @connormcwood, @davidcsally, @roniemeque, @piyu-sh, @jonespen, @joemccann, @makezi, @TxHawks, @devknoll, @jokester, @piglovesyou, @austinhumes-valtech, @rafaelalmeidatk, @arcanis, @timneutkens, @mlorthiois, @huozhi, @lachlanjc, @sebastianbenz, @AlexanderVishnevsky, @mxschmitt, @janicklas-ralph, @NavizDev, @PabloSzx, @tywmick, @lwz7512, @justincy, @Skn0tt, @eps1lon, @maxigimenez, @sarupbanskota, @belgattitude, and @dpyzo0o for helping!

The new version differs by 472 commits.

• 6d1167e v9.4.0
• f9e24ab v9.3.7-canary.21
• 7cca2b0 Add test for API route with fetch polyfill (#12680)
• 29b1100 fix logout in with-iron-session example (#12704)
• 653098d Use @/ to show module alias instead of @ prefixed (#12600)
• 0b36211 [Docs] Environment Variables (#12696)
• 4acad75 Link Made by Vercel to vercel.com (#12702)
• 0900d57 v9.3.7-canary.20
• 467b2c7 Enable sassOptions support in next.config.js (#12685)
• e3aeb2f Update code sample in performance measurement docs (#12690)
• f0220e6 [Examples] Update firebase authentication (#12687)
• 565e111 v9.3.7-canary.19
• 8b51e00 Upgrade deps (#12700)
• ae1daea Enable Fast Refresh by Default (#12640)
• 0bc0760 chore(next): link/router/document missing types (#12692)

There are 250 commits in total.

See the full diff