Back to changelog
November dependency refresh
Pro Prisma and Pro Drizzle v2.8.2 update Next.js, React, Better Auth and other dependencies.
SecurityDependenciesPro PrismaPro DrizzleDependency update required
Pro Prisma and Pro Drizzle v2.8.2 refresh dependencies without changing the starter-kit features.
Highlights
- Next.js and the bundle analyzer are now on 16.4.5, including the November security fixes.
- React and React DOM are on 19.3.1. Better Auth and the passkey plugin are on 1.7.18.
- Base UI, Sentry, the MCP SDK, Zod, Sharp and build and test tooling have compatible updates.
- The Prisma kit updates Prisma Client, the PostgreSQL adapter and Prisma CLI to 7.10.1.
Existing projects
The local Node.js version file pins 22.23.4, which includes the October Node.js security fixes. Use a patched Node.js 22 runtime. No database migration or new environment variable is required. The Stripe server SDK and API version are unchanged.