⬆️(dependencies) upgrade Next.js 15 to 16, upgrade python dependencies

Signed-off-by: Laurent Paoletti <lp@providenz.fr>

Author: providenz

CHANGELOG.md

@@ -13,6 +13,10 @@ and this project adheres to
 - ✨(back) add projects with custom LLM instructions
 - ✨(front) projects management UI
 
+### Changed
+
+- ⬆️(dependencies) upgrade Next.js 15 to 16, upgrade python dependencies
+
 ## [0.0.14] - 2026-03-11
 
 ### Added

src/backend/conversations/settings.py

@@ -368,6 +368,7 @@ class Base(BraveSettings, Configuration):
         "django.contrib.staticfiles",
         # OIDC third party
         "mozilla_django_oidc",
+        "lasuite.malware_detection",
     ]
 
     # Cache

src/backend/pyproject.toml

@@ -33,7 +33,7 @@ dependencies = [
     "django-cors-headers==4.9.0",
     "django-countries==8.1.0",
     "django-filter==25.2",
-    "django-lasuite[all]==0.0.18",
+    "django-lasuite[all]==0.0.25",
     "django-parler==2.3",
     "django-pydantic-field==0.5.4",
     "django-redis==6.0.0",
@@ -58,7 +58,7 @@ dependencies = [
     "pydantic==2.12.4",
     "pydantic-ai-slim[openai,mistral,mcp,evals,logfire]==1.62.0",
     "psycopg[binary]==3.2.12",
-    "PyJWT==2.10.1",
+    "PyJWT==2.12.0",
     "python-magic==0.4.27",
     "redis<6.0.0",
     "requests==2.32.5",
@@ -67,7 +67,7 @@ dependencies = [
     "trafilatura==2.0.0",
     "uvicorn==0.38.0",
     "whitenoise==6.11.0",
-    "pypdf==6.8.0",
+    "pypdf==6.9.1",
 ]
 
 [project.urls]
@@ -115,6 +115,7 @@ required-environments = [
 ]
 override-dependencies = [
     "cryptography>=46.0.5", # CVE-2026-26007
+    "joserfc>=1.6.3", # CVE-2026-27932
     "pillow>=12.1.1", #CVE-2026-25990
 ]
 

src/backend/uv.lock

@@ -1,5 +1,6 @@
 /// <reference types="next" />
 /// <reference types="next/image-types/global" />
+import "./.next/dev/types/routes.d.ts";
 
 // NOTE: This file should not be edited
 // see https://nextjs.org/docs/pages/api-reference/config/typescript for more information.

src/frontend/apps/conversations/next-env.d.ts

@@ -1,7 +1,5 @@
 const crypto = require('crypto');
 
-const { InjectManifest } = require('workbox-webpack-plugin');
-
 const buildId = crypto.randomBytes(256).toString('hex').slice(0, 8);
 
 /** @type {import('next').NextConfig} */
@@ -12,44 +10,22 @@ const nextConfig = {
     unoptimized: true,
   },
   compiler: {
-    // Enables the styled-components SWC transform
     styledComponents: true,
   },
   generateBuildId: () => buildId,
   env: {
     NEXT_PUBLIC_BUILD_ID: buildId,
   },
-  webpack(config, { isServer }) {
-    // Grab the existing rule that handles SVG imports
-    const fileLoaderRule = config.module.rules.find((rule) =>
-      rule.test?.test?.('.svg'),
-    );
-
-    config.module.rules.push(
-      // Reapply the existing rule, but only for svg imports ending in ?url
-      {
-        ...fileLoaderRule,
-        test: /\.svg$/i,
-        resourceQuery: /url/, // *.svg?url
-      },
-      // Convert all other *.svg imports to React components
-      {
-        test: /\.svg$/i,
-        issuer: fileLoaderRule.issuer,
-        resourceQuery: { not: [...fileLoaderRule.resourceQuery.not, /url/] }, // exclude if *.svg?url
-        use: ['@svgr/webpack'],
+  turbopack: {
+    rules: {
+      '*.svg': {
+        loaders: ['@svgr/webpack'],
+        as: '*.js',
       },
-    );
-
-    // Modify the file loader rule to ignore *.svg, since we have it handled now.
-    fileLoaderRule.exclude = /\.svg$/i;
-
-    // Formula rendering in markdown, replace dollar-sign with \(...\) and \[...\]
-    // https://github.com/remarkjs/remark-math/issues/39#issuecomment-2636184992
-    config.resolve.alias['micromark-extension-math'] =
-      'micromark-extension-llm-math';
-
-    return config;
+    },
+    resolveAlias: {
+      'micromark-extension-math': 'micromark-extension-llm-math',
+    },
   },
 };
 

src/frontend/apps/conversations/next.config.js

@@ -37,11 +37,11 @@
     "lottie-react": "^2.4.1",
     "luxon": "3.6.1",
     "micromark-extension-llm-math": "3.1.1-20250610",
-    "next": "15.3.9",
+    "next": "16.2.0",
     "posthog-js": "1.249.3",
-    "react": "19.2.1",
+    "react": "19.2.4",
     "react-aria-components": "1.9.0",
-    "react-dom": "19.2.1",
+    "react-dom": "19.2.4",
     "react-i18next": "15.5.2",
     "react-intersection-observer": "9.16.0",
     "react-markdown": "10.1.0",
@@ -65,22 +65,23 @@
     "@types/lodash": "4.17.17",
     "@types/luxon": "3.6.2",
     "@types/node": "*",
-    "@types/react": "*",
-    "@types/react-dom": "*",
-    "cross-env": "7.0.3",
+    "@types/react": "19.2.14",
+    "@types/react-dom": "19.2.3",
     "dotenv": "16.5.0",
+    "eslint": "^9",
     "eslint-config-conversations": "*",
+    "eslint-config-next": "16.2.0",
     "fetch-mock": "9.11.0",
     "jest": "29.7.0",
     "jest-environment-jsdom": "29.7.0",
-    "node-fetch": "2.7.0",
     "prettier": "3.5.3",
-    "sass": "^1.97.3",
     "stylelint": "16.20.0",
     "stylelint-config-standard": "38.0.0",
     "stylelint-prettier": "5.0.3",
-    "typescript": "*",
-    "webpack": "5.99.9",
-    "workbox-webpack-plugin": "7.1.0"
+    "typescript": "*"
+  },
+  "resolutions": {
+    "@types/react": "19.2.14",
+    "@types/react-dom": "19.2.3"
   }
 }

src/frontend/apps/conversations/package.json

@@ -11,7 +11,7 @@
     "moduleResolution": "bundler",
     "resolveJsonModule": true,
     "isolatedModules": true,
-    "jsx": "preserve",
+    "jsx": "react-jsx",
     "incremental": true,
     "plugins": [
       {

src/frontend/apps/conversations/tsconfig.json

@@ -12,14 +12,10 @@
     "test:ui::chromium": "yarn test:ui --project=chromium"
   },
   "devDependencies": {
-    "@playwright/test": "1.52.0",
+    "@playwright/test": "1.56.0",
     "@types/node": "*",
-    "@types/pdf-parse": "1.1.5",
     "eslint-config-conversations": "*",
     "typescript": "*"
   },
-  "dependencies": {
-    "convert-stream": "1.0.2",
-    "pdf-parse": "1.1.1"
-  }
+  "dependencies": {}
 }