Skip to content

chore(deps): bump next-mdx-remote from 4.3.0 to 6.0.0#7243

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/next-mdx-remote-6.0.0
Open

chore(deps): bump next-mdx-remote from 4.3.0 to 6.0.0#7243
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/next-mdx-remote-6.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Feb 24, 2026

Bumps next-mdx-remote from 4.3.0 to 6.0.0.

Release notes

Sourced from next-mdx-remote's releases.

v6.0.0

Breaking/Major Changes

v5.0.0

Major Changes

  • #448 67a221f Thanks @​dstaley! - Update to MDX v3 and add support for React 19. Fix various TypeScript errors. Remove usage of Rollup.

v4.4.1

What's Changed

Full Changelog: hashicorp/next-mdx-remote@v4.4.0...v4.4.1

v4.4.0

This release includes a few fixes for frontmatter types, as well as a way to provide a frontmatter type to serialize or compileMDX and have it propagate through to the returned frontmatter property. See the documentation for an example.

serialize:

import { serialize } from 'next-mdx-remote/serialize'
interface Frontmatter {
title: string
published: string
description?: string
}
//     👇 should have type Frontmatter
const { frontmatter } = serialize<Record<string, unknown>, Frontmatter>(source)

compileMDX:

import { compileMDX } from 'next-mdx-remote/rsc'
interface Frontmatter {
title: string
published: string
description?: string
}
export default async function Page({ source }) {
//              👇 should have type Frontmatter
const { content, frontmatter } = await compileMDX<Frontmatter>(source)
</tr></table>

... (truncated)

Changelog

Sourced from next-mdx-remote's changelog.

6.0.0

Breaking/Major Changes

  • Updated unist-util-remove to ^4.0.0
  • Introduced the parameters blockJS and blockDangerousJS that controls how JS in interpreted during compiling MDX. Both default to true for security reasons.
  • Updated the README to explain this change: hashicorp/next-mdx-remote#498.

5.0.0

Major Changes

  • #448 67a221f Thanks @​dstaley! - Update to MDX v3 and add support for React 19. Fix various TypeScript errors. Remove usage of Rollup.
Commits
Maintainer changes

This version was pushed to npm by rubennic, a new releaser for next-mdx-remote since your current version.


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies javascript Pull requests that update javascript code labels Feb 24, 2026
@greptile-apps
Copy link
Copy Markdown
Contributor

greptile-apps bot commented Feb 24, 2026

PR author is in the excluded authors list.

Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2d17717541

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

"lodash": "^4.17.21",
"next": "^15.5.9",
"next-mdx-remote": "4.3.0",
"next-mdx-remote": "6.0.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Preserve MDX JS expressions when upgrading to v6

next-mdx-remote 6.0.0 changes JS handling defaults (blockJS/blockDangerousJS default to true), but extractMdx still calls serialize() without overriding those flags, while existing docs rely on MDX JS expressions (for example component props like labels={['npm', 'yarn', 'pnpm']} in apps/dev-portal-web/docs/ui/about.en.mdx). This can break server-side compilation/rendering of documentation pages after the dependency bump unless the serializer options are updated or docs are migrated away from JS expressions.

Useful? React with 👍 / 👎.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from 2d17717 to 14d2c17 Compare February 25, 2026 15:14
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from 14d2c17 to 99d0588 Compare February 25, 2026 15:19
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from 99d0588 to 7fb9704 Compare February 25, 2026 16:07
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from 7fb9704 to 97e2c31 Compare February 25, 2026 17:11
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from 97e2c31 to 268eba0 Compare March 1, 2026 05:48
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from 268eba0 to bdd14e0 Compare March 2, 2026 11:35
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from bdd14e0 to 6eaecba Compare March 2, 2026 13:15
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from 6eaecba to 1c38f0b Compare March 4, 2026 08:16
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from 1c38f0b to b886475 Compare March 4, 2026 23:48
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from b886475 to 434b6e0 Compare March 13, 2026 06:15
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from 434b6e0 to a8b0680 Compare March 16, 2026 13:21
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from a8b0680 to 52bdb7c Compare March 17, 2026 20:12
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from 52bdb7c to 5a40d7d Compare March 20, 2026 15:57
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from 5a40d7d to d427847 Compare March 20, 2026 17:52
Bumps [next-mdx-remote](https://github.com/hashicorp/next-mdx-remote) from 4.3.0 to 6.0.0.
- [Release notes](https://github.com/hashicorp/next-mdx-remote/releases)
- [Changelog](https://github.com/hashicorp/next-mdx-remote/blob/main/CHANGELOG.md)
- [Commits](hashicorp/next-mdx-remote@v4.3.0...v6.0.0)

---
updated-dependencies:
- dependency-name: next-mdx-remote
  dependency-version: 6.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/next-mdx-remote-6.0.0 branch from d427847 to dd9ab4e Compare March 23, 2026 18:54
@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies javascript Pull requests that update javascript code

Development

Successfully merging this pull request may close these issues.

0 participants