fix: patch Next.js security advisories

[Kinfe123]

Summary

• bump every shipped, example, benchmark, and generated Next.js runtime pin to 16.2.11
• update the root override and only the Next.js family in pnpm-lock.yaml
• keep compatibility peer ranges and unrelated dependencies unchanged

Why

The repository-wide security audit was failing on four high-severity Next.js advisories:

• GHSA-89xv-2m56-2m9x
• GHSA-6gpp-xcg3-4w24
• GHSA-m99w-x7hq-7vfj
• GHSA-p9j2-gv94-2wf4

Next.js 16.2.11 contains the fixes for the affected 16.2.x line.

Validation

• exact CI npm bulk-advisory scan: 1,349 package names, no high/critical findings
• pnpm install --frozen-lockfile
• pnpm format:check
• pnpm lint
• pnpm build
• 1,203 docs, adapter, theme, Nuxt, and smoke tests
• pnpm typecheck
• seven changelog Playwright E2E tests
• full website production build, including Next.js, TanStack Start, Nuxt, Astro, and SvelteKit examples

---

Summary by cubic

Upgraded all Next.js runtime pins to 16.2.11 to patch four high‑severity advisories and unblock the security audit. Only the Next.js family was changed.

• Dependencies
  • Set next to 16.2.11 across benchmarks, examples, website, and generated templates.
  • Updated root pnpm.overrides.next to 16.2.11 and refreshed pnpm-lock.yaml for the Next.js packages.
  • Bumped DEFAULT_NEXT_VERSION in packages/docs/src/cli/dev.ts to 16.2.11.

^{Written for commit d26807a. Summary will update on new commits.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs-website	Ready	Preview, Comment	Jul 23, 2026 12:42pm
farming-labs-docs-docs-cloud	Building	Preview, Comment	Jul 23, 2026 12:42pm

[pkg-pr-new]

Open in StackBlitz

@farming-labs/astro

pnpm add https://pkg.pr.new/farming-labs/docs/@farming-labs/astro@377

@farming-labs/astro-theme

pnpm add https://pkg.pr.new/farming-labs/docs/@farming-labs/astro-theme@377

@farming-labs/docs

pnpm add https://pkg.pr.new/farming-labs/docs/@farming-labs/docs@377

@farming-labs/theme

pnpm add https://pkg.pr.new/farming-labs/docs/@farming-labs/theme@377

@farming-labs/next

pnpm add https://pkg.pr.new/farming-labs/docs/@farming-labs/next@377

@farming-labs/nuxt

pnpm add https://pkg.pr.new/farming-labs/docs/@farming-labs/nuxt@377

@farming-labs/nuxt-theme

pnpm add https://pkg.pr.new/farming-labs/docs/@farming-labs/nuxt-theme@377

@farming-labs/svelte

pnpm add https://pkg.pr.new/farming-labs/docs/@farming-labs/svelte@377

@farming-labs/svelte-theme

pnpm add https://pkg.pr.new/farming-labs/docs/@farming-labs/svelte-theme@377

@farming-labs/tanstack-start

pnpm add https://pkg.pr.new/farming-labs/docs/@farming-labs/tanstack-start@377

commit: d26807a