Skip to content

Conversation

@SamRome1
Copy link

@SamRome1 SamRome1 commented Dec 17, 2025

What kind of change does this PR introduce?

This is a fork of the current deprecated Stripe, Vercel starter kit on the Supabase main page if you scroll down. It is a modernization due to it not being up kept resulting in new feature updates, dependency modernization, and documentation update to mimic the correct behavior.

What is the current behavior?

The template uses outdated dependencies:

  • Next.js 14.2.3 (deprecated patterns)
  • Supabase SSR 0.1.0 (old client patterns)
  • Multiple security vulnerabilities in dependencies
  • Outdated Stripe webhook documentation

What is the new behavior?

  • Next.js 14.2.3 → 15.1.3 with async params/searchParams patterns
  • Supabase SSR 0.1.0 → 0.5.2 with modernized client patterns
  • Stripe SDK updated with proper null checks
  • All dependencies updated to latest stable versions
  • ReadME updated for better direction

Additional context

Future-proofing note: Once Next 16 is more battle-tested in the ecosystem (and the template’s dependencies/patterns are validated against it), we can do a follow-up PR to bump to 16.x with a tighter scope.

- Update Next.js 14 -> 15 with async params/searchParams
- Update Supabase SSR 0.1.0 -> 0.5.2
- Update Stripe SDK and modernize API usage
- Fix all TypeScript errors and linting issues
- Update all dependencies to latest versions
- Add ESLint configuration
- Remove pnpm-lock.yaml (template repo best practice)
- Resolve security vulnerabilities (0 vulnerabilities)
@SamRome1 SamRome1 added documentation Improvements or additions to documentation dependencies Pull requests that update a dependency file labels Dec 17, 2025
@SamRome1 SamRome1 assigned SamRome1 and unassigned SamRome1 Dec 21, 2025
Copy link
Member

@dshukertjr dshukertjr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@SamRome1 Thanks for this update!

I know we talked about it in the meeting a little, but do you think it makes sense to update it to use Next.js v16? I think having the latest version just makes it more marketable!

Actually, let's upgrade it to v16 in another PR. This PR is complete with the current state. Let me take a quick look.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just curious, why was this deleted?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I was running into problems with the existing lock file contents. The lock file contains resolved dependency trees based on the old versions, and when you're updating dependencies from older versions (like Supabase SSR 0.1.0 → 0.5.2 and Next.js 14 → 15.1.3), you run into issues because you can't easily change the whole dependency tree. Also, when users clone the starter kit and run pnpm install, it will create a fresh lock file for them anyway.

@dshukertjr
Copy link
Member

Thanks for this update! It's great! Feel free to merge it!

@SamRome1 SamRome1 merged commit 3aa0d95 into main Dec 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file documentation Improvements or additions to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants