Next.js

Endless Lifecycle Support (ELS) for Next.js from TuxCare provides security fixes for Next.js versions that have reached their end of life. With ELS, you can continue running Next.js applications without vulnerability concerns, even after official support has ended.

Supported Versions

  • Next.js 12.3.7, 13.5.11, 14.2.35, 15.1.2, 15.5.23, 15.5.24, 15.5.25, 15.5.26, 16.0.6

Installation

Docker compatible

Have a SecureChain token?

Follow the SecureChain installation instructions instead — the steps below are for username & password access.

Prerequisites

  • npm package manager installed
  • TuxCare registry token — contact [email protected]
  • To browse available artifacts, visit TuxCare Nexus and click Sign in in the top right corner. You may need to refresh the page after logging in.
  1. Create or update the .npmrc file

    Navigate to the root directory of your Next.js project and create a .npmrc file or update it if it already exists.

    Example:

    my-nextjs-project/
    ├── node_modules/
    ├── package.json
    ├── .npmrc         ⚠️ ← Create it here
    └── package-lock.json
    
  2. Configure the npm registry

    Use an editor of your choice (e.g., VS Code) to add the following registry address lines to the .npmrc file:

    registry=https://registry.npmjs.org/
    @els-js:registry=https://nexus.repo.tuxcare.com/repository/els_js/
    //nexus.repo.tuxcare.com/repository/els_js/:_auth=${TOKEN}
    

    Replace ${TOKEN} with the token you received from [email protected].

  3. Update dependencies

    Update your package.json file to replace Next.js dependencies with TuxCare-maintained packages. Choose your Next.js version below and add the dependencies and overrides entries shown.

    "dependencies": {
      "next": "npm:@els-js/next@>=12.3.7-tuxcare.1"
    },
    "overrides": {
      "[email protected]": "npm:@els-js/next@>=12.3.7-tuxcare.1"
    }
    
  4. Refresh the project dependencies

    Remove node_modules, package-lock.json, and clear the npm cache:

    rm -rf node_modules package-lock.json && npm cache clean --force
    

    Install dependencies:

    npm install
    

    The token for the TuxCare repository is automatically picked up from your .npmrc file.

  5. Verify the setup

    Use npm to list the project's dependencies and confirm that npm resolves TuxCare packages correctly:

    npm list
    

    After reviewing the dependencies, run your application to ensure everything works correctly. The npm tool identifies and resolves dependencies from the TuxCare ELS for Next.js repository.

What's Next?