> This page is for Developer.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.bigcommerce.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.bigcommerce.com/_mcp/server.

# Catalyst version 1.3.6 Release Notes

Catalyst v1.3.6 release addresses a **security vulnerability ([CVE-2025-55184, CVE-2025-55183](https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components))** that affects React Server Components.

## Key Changes

* **Next.js 15.5.8**: Upgraded from Next.js 15.5.7 to 15.5.8
* **React 19**: Upgraded to React 19.1.3 and React DOM 19.1.3

## Migration Guide

### Update Dependencies

Update dependencies in your `package.json`:

```json showLineNumbers={false}
{
	"dependencies": {
		"next": "15.5.8",
		"react": "19.1.3",
		"react-dom": "19.1.3"
	},
	"devDependencies": {
		"@next/bundle-analyzer": "15.5.8",
		"eslint-config-next": "15.5.8"
	}
}
```

### Run `pnpm install`

```bash showLineNumbers={false}
pnpm install
```

> **Note**
>
> **Note**: `next` will automatically update your `tsconfig.json` file.

## Release Tags

We have published new tags for the Core and Makeswift versions of Catalyst. Target these tags to pull the latest code:

* [**@bigcommerce/catalyst-core@1.3.6**](https://github.com/bigcommerce/catalyst/releases/tag/%40bigcommerce%2Fcatalyst-core%401.3.6)
* [**@bigcommerce/catalyst-makeswift@1.3.7**](https://github.com/bigcommerce/catalyst/releases/tag/%40bigcommerce%2Fcatalyst-makeswift%401.3.7)

And as always, you can pull the latest stable release with these tags:

* [**@bigcommerce/catalyst-core@latest**](https://github.com/bigcommerce/catalyst/releases/tag/%40bigcommerce%2Fcatalyst-core%40latest)
* [**@bigcommerce/catalyst-makeswift@latest**](https://github.com/bigcommerce/catalyst/releases/tag/%40bigcommerce%2Fcatalyst-makeswift%40latest)