build(deps): bump next from 16.0.9 to 16.0.10 in the npm_and_yarn group across 1 directory

[dependabot]

Bumps the npm_and_yarn group with 1 update in the / directory: next.

Updates next from 16.0.9 to 16.0.10

Release notes

Sourced from next's releases.

v16.0.10

Please see the Next.js Security Update for information about this security patch.

Commits

• 581dee6 v16.0.10
• 9a0dc9c Backport facebook/react#35351 for 16.0.9 (#87085)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Greptile Overview

Greptile Summary

This PR updates Next.js from 16.0.9 to 16.0.10, which is a critical security patch release. The update addresses a security vulnerability detailed in the Next.js Security Update.

• Updated next dependency to version 16.0.10 in package.json
• Updated lockfile with new integrity hashes for Next.js core and all platform-specific SWC binaries (darwin-arm64, darwin-x64, linux-arm64-gnu, linux-arm64-musl, linux-x64-gnu, linux-x64-musl, win32-arm64-msvc, win32-x64-msvc)
• No breaking changes or functional modifications expected
• The security patch backports a React fix ([Flight] Add extra loop protection facebook/react#35351) for version 16.0.9

This is a straightforward dependency bump generated by Dependabot with no code changes required.

Confidence Score: 5/5

• This PR is safe to merge immediately - it's a critical security patch with no breaking changes
• This is an automated security patch from Dependabot that updates Next.js from 16.0.9 to 16.0.10. The update is a patch version bump that addresses a security vulnerability documented in the official Next.js security advisory. The changes are limited to version numbers and integrity hashes in the dependency files, with no code modifications required. The update maintains compatibility with all existing peer dependencies (React 19.2.0, babel-plugin-react-compiler 1.0.0) and requires no configuration changes.
• No files require special attention - both files are standard dependency updates

Important Files Changed

File Analysis

Filename	Score	Overview
package.json	5/5	Bumped next from 16.0.9 to 16.0.10 for critical security patch
pnpm-lock.yaml	5/5	Updated lockfile with Next.js 16.0.10 and all platform-specific SWC binaries

Sequence Diagram

sequenceDiagram
    participant D as Dependabot
    participant R as Repository
    participant P as package.json
    participant L as pnpm-lock.yaml
    participant N as Next.js Registry

    D->>N: Check for Next.js updates
    N-->>D: Version 16.0.10 available (security patch)
    D->>P: Update next: 16.0.9 → 16.0.10
    D->>L: Update lockfile dependencies
    L->>N: Fetch new integrity hashes
    N-->>L: Return @next/[email protected] hash
    N-->>L: Return @next/swc-* binaries hashes
    L->>L: Update snapshots for all platforms
    D->>R: Create PR #34 with security update

Loading

[greptile-apps]

_{1 file reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}