chore(nextjs): Bump nextjs version for RSC CVEs (#7423)

dominic-clerk · web-flow · commit 6ef85d18ed7f · 2025-12-17T09:15:04.000Z
diff --git a/.changeset/fuzzy-geese-guess.md b/.changeset/fuzzy-geese-guess.md
@@ -0,0 +1,5 @@
+---
+'@clerk/nextjs': patch
+---
+
+Updating peerDependency for CVE-2025-55182
diff --git a/packages/nextjs/package.json b/packages/nextjs/package.json
@@ -92,10 +92,10 @@
   },
   "devDependencies": {
     "crypto-es": "^2.1.0",
-    "next": "15.2.3"
+    "next": "15.2.8"
   },
   "peerDependencies": {
-    "next": "^15.2.3 || ^16",
+    "next": "^15.2.8 || ^15.3.8 || ^15.4.10 || ^15.5.9 || ^15.6.0-0 || ^16.0.10 || ^16.1.0-0",
     "react": "catalog:peer-react",
     "react-dom": "catalog:peer-react"
   },
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
@@ -3,8 +3,8 @@ packages:
 
 catalogs:
   peer-react:
-    react: ^18.0.0 || ^19.0.0 || ^19.0.0-0
-    react-dom: ^18.0.0 || ^19.0.0 || ^19.0.0-0
+    react: ^18.0.0 || ^19.0.3 || ^19.1.4 || ^19.2.3 || ^19.3.0-0
+    react-dom: ^18.0.0 || ^19.0.3 || ^19.1.4 || ^19.2.3 || ^19.3.0-0
   react:
     '@types/react': 18.3.26
     '@types/react-dom': 18.3.7

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +'@clerk/nextjs': patch
 +---
++
 +Updating peerDependency for CVE-2025-55182