Check for supported Next version (#1092)

Author: vicb

.changeset/six-walls-feel.md

@@ -0,0 +1,8 @@
+---
+"@opennextjs/cloudflare": patch
+---
+
+Check for supported Next version
+
+The build will now error for unsupported Next version which may contain unpatched security vulnerabilities.
+You can bypass the check using the `--dangerouslyUseUnsupportedNextVersion` flag.

examples/playground14/package.json

@@ -8,7 +8,7 @@
 		"build": "next build",
 		"start": "next start",
 		"lint": "next lint",
-		"build:worker": "pnpm opennextjs-cloudflare build",
+		"build:worker": "pnpm opennextjs-cloudflare build --dangerouslyUseUnsupportedNextVersion",
 		"preview:worker": "pnpm opennextjs-cloudflare preview",
 		"preview": "pnpm build:worker && pnpm preview:worker",
 		"e2e": "playwright test -c e2e/playwright.config.ts",

packages/cloudflare/package.json

@@ -54,7 +54,7 @@
 	"dependencies": {
 		"@ast-grep/napi": "0.40.0",
 		"@dotenvx/dotenvx": "catalog:",
-		"@opennextjs/aws": "3.9.12",
+		"@opennextjs/aws": "3.9.13",
 		"cloudflare": "^4.4.1",
 		"enquirer": "^2.4.1",
 		"glob": "catalog:",

packages/cloudflare/src/cli/build/build.ts

@@ -34,7 +34,8 @@ export async function build(
 	options: buildHelper.BuildOptions,
 	config: OpenNextConfig,
 	projectOpts: ProjectOptions,
-	wranglerConfig: Unstable_Config
+	wranglerConfig: Unstable_Config,
+	allowUnsupportedNextVersions: boolean
 ): Promise<void> {
 	// Do not minify the code so that we can apply string replacement patch.
 	options.minify = false;
@@ -44,6 +45,11 @@ export async function build(
 	logger.info(`App directory: ${options.appPath}`);
 	buildHelper.printNextjsVersion(options);
 	await ensureNextjsVersionSupported(options);
+	buildHelper.checkNextVersionSupport(
+		options.nextVersion,
+		allowUnsupportedNextVersions,
+		`--dangerouslyUseUnsupportedNextVersion`
+	);
 	const { aws, cloudflare } = getVersion();
 	logger.info(`@opennextjs/cloudflare version: ${cloudflare}`);
 	logger.info(`@opennextjs/aws version: ${aws}`);

packages/cloudflare/src/cli/build/utils/version.ts

@@ -2,7 +2,10 @@ import { createRequire } from "node:module";
 import { join } from "node:path";
 import { fileURLToPath, URL } from "node:url";
 
-export function getVersion() {
+/**
+ * Returns the version of the Cloudflare package and its AWS dependency.
+ */
+export function getVersion(): { cloudflare: string; aws: string } {
 	const require = createRequire(import.meta.url);
 	const __dirname = fileURLToPath(new URL(".", import.meta.url));
 	const pkgJson = require(join(__dirname, "../../../../package.json"));

packages/cloudflare/src/cli/commands/build.ts

@@ -24,6 +24,7 @@ async function buildCommand(
 		noMinify: boolean;
 		skipWranglerConfigCheck: boolean;
 		openNextConfigPath: string | undefined;
+		dangerouslyUseUnsupportedNextVersion: boolean;
 	}>
 ): Promise<void> {
 	printHeaders("build");
@@ -42,7 +43,7 @@ async function buildCommand(
 
 	const wranglerConfig = await readWranglerConfig(args);
 
-	await buildImpl(options, config, projectOpts, wranglerConfig);
+	await buildImpl(options, config, projectOpts, wranglerConfig, args.dangerouslyUseUnsupportedNextVersion);
 }
 
 /**
@@ -75,6 +76,11 @@ export function addBuildCommand<T extends yargs.Argv>(y: T) {
 				.option("openNextConfigPath", {
 					type: "string",
 					desc: "Path to the OpenNext configuration file",
+				})
+				.option("dangerouslyUseUnsupportedNextVersion", {
+					type: "boolean",
+					default: false,
+					desc: "Allow using unsupported Next.js versions",
 				}),
 		(args) => buildCommand(withWranglerPassthroughArgs(args))
 	);