Bump next from 13.5.6 to 14.2.35 in /controlpanel

[dependabot]

Bumps next from 13.5.6 to 14.2.35.

Release notes

Sourced from next's releases.

v14.2.35

Please see the Next.js Security Update for information about this security patch.

Commits

• 7b940d9 v14.2.35
• 7c1be85 Backport facebook/react#35351 for 14.2.34 (#87095)
• f307368 v14.2.34
• 8e43882 Update React Version (#36)
• 385e8c2 Backport Next.js changes to v14.2.34 (#29)
• 7a2cf51 update version script
• 778e7bf lock swc binaries
• 5a97b40 v14.2.33
• cb88824 backport(v14): omit searchParam data from FlightRouterState before transport ...
• 89ee561 v14.2.32
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[alexcos20]

@dependabot rebase

[alexcos20]

AI automated code review (Gemini 3).

Overall risk: medium

Summary:
This pull request is an automated dependency update by Dependabot, bumping the next package from version 13.5.6 to 14.2.35 within the /controlpanel directory. This is a major version upgrade for the Next.js framework, which typically brings new features, performance improvements, and potentially breaking changes. The package-lock.json reflects the transitive dependency updates as expected for such a change.

Comments:
• [WARNING][other] Upgrading Next.js from v13 to v14 involves a major version change. While Next.js strives for backward compatibility, it's crucial to review the official Next.js 14 release notes and changelog for any potential breaking changes, deprecations, or new behaviors that might affect the controlpanel application. Pay particular attention to changes related to App Router, data fetching, middleware, and build configurations.
• [INFO][other] The package-lock.json shows a significant number of changes, which is expected when a core framework like Next.js undergoes a major version update, as many of its internal and transitive dependencies are likely to change as well. No immediate red flags here, but confirms the extent of the update.
• [WARNING][performance] Given this is a major upgrade for Next.js, it's highly recommended to perform thorough functional and integration testing of the controlpanel application. Check all critical user flows, page rendering, data fetching, and build processes to ensure there are no regressions or unexpected performance changes introduced by the new Next.js version.

[alexcos20]

AI automated code review (Gemini 3).

Overall risk: medium

Summary:
Dependabot PR: Updates Next.js dependency in the controlpanel package from version 13.5.6 to 14.2.35. This is a significant major version upgrade for the Next.js framework.

Comments:
• [WARNING][other] This PR bumps Next.js from ^13.5.6 to ^14.2.35. This is a major version upgrade (from 13 to 14) and potentially includes breaking changes. Please ensure thorough testing is performed for the controlpanel application to confirm full compatibility and no regressions. Pay close attention to:

1. Routing: Changes or new behaviors in the App Router (if used).
2. Data Fetching: Any updates to getServerSideProps, getStaticProps, getInitialProps, or fetch caching mechanisms.
3. Image Optimization: Potential changes in next/image behavior or requirements.
4. Middleware: Any breaking changes in middleware execution or API.
5. Build/Runtime performance: Verify that the upgrade does not negatively impact performance.
   • [INFO][other] The package-lock.json has been updated as expected due to the Next.js version bump. This is a standard change for dependency updates, reflecting the new dependency tree.

[alexcos20]

AI automated code review (Gemini 3).

Overall risk: medium

Summary:
This pull request updates the next dependency in the controlpanel directory from version 13.5.6 to 14.2.35. This is a major version upgrade, along with corresponding updates to related @next/swc-* packages, @swc/helpers, caniuse-lite, and changes in indirect dependencies like adding graceful-fs and removing watchpack. A critical change is the updated Node.js engine requirement for Next.js 14, now '>=18.17.0', up from '>=16.14.0' in Next.js 13. While Dependabot handles the dependency update, the major version bump of Next.js necessitates thorough testing.

Comments:
• [WARNING][other] The next dependency's Node.js engine requirement has been updated from >=16.14.0 to >=18.17.0. Please ensure that the CI/CD pipelines and all development/production environments for the controlpanel application are running Node.js version 18.17.0 or higher to maintain compatibility and prevent unexpected issues.
• [WARNING][other] Upgrading Next.js from v13 to v14 is a major version bump. While Next.js 14 builds upon Next.js 13, major versions can introduce breaking changes, updated APIs, or behavioral differences that might not be immediately apparent from the commit message. It is crucial to perform comprehensive functional and regression testing of the controlpanel application after this update to ensure everything works as expected, especially any features related to data fetching, routing, or server-side logic.

[alexcos20]

AI automated code review (Gemini 3).

Overall risk: medium

Summary:
This pull request updates the next dependency in the /controlpanel directory from version 13.5.6 to 14.2.35. This is a significant major version bump for the Next.js framework, bringing numerous internal dependency updates, including @next/env, @next/swc-* runtimes, @swc/helpers, and caniuse-lite. It also modifies the minimum Node.js version requirement for Next.js from >=16.14.0 to >=18.17.0. Several @parcel/watcher-* packages have been added or updated for improved file watching across various platforms, while watchpack, glob-to-regexp, and utf-8-validate dependencies have been removed, indicating internal refactoring within Next.js.

Comments:
• [WARNING][other] This is a major version upgrade for Next.js (from 13.x to 14.x). While Next.js 14 aims for high backward compatibility with 13.4+, a jump from 13.5.6 to 14.2.35 could introduce subtle breaking changes or require updates to specific API usages, especially if the controlpanel uses experimental features or specific patterns that might have been deprecated. Please ensure comprehensive regression testing is performed for all functionalities within the controlpanel to catch any unexpected issues. Reviewing the Next.js 14 release notes and migration guides is highly recommended.
• [WARNING][other] The minimum Node.js version required by Next.js has increased from >=16.14.0 to >=18.17.0. Please verify that our CI/CD pipelines, build environments, and local development setups for the controlpanel are compatible with or upgraded to Node.js >=18.17.0 to avoid potential build or runtime failures.
• [INFO][other] Numerous transitive dependencies have been updated, added, or removed (e.g., @next/swc-* runtimes, @parcel/watcher-* modules, removal of watchpack, glob-to-regexp, and utf-8-validate). While many of these are internal to Next.js's build process, it's good to be aware of the breadth of changes. Functional testing should implicitly cover any unexpected interactions from these updates.