as announced on the blog, next publishes an out of band security update today for two critical and one high severity vulnerabilities. my automation will open the upgrade PR the moment the advisory drops, run the full test matrix and merge on green. if you are still doing this by hand, today is a free rehearsal. wednesday patches are a fact of life in the react world.