fix: React Server Components CVE vulnerabilities (#11245)

> [!IMPORTANT]
> This is an automatic PR generated by Vercel to help you patch known
vulnerabilities related to CVE-2025-55182 (React2Shell), CVE-2025-55183,
CVE-2025-55184, and CVE-2025-67779. We can't guarantee the PR is
comprehensive, and it may contain mistakes.

Not all projects are affected by all issues, but **patched versions are
required to ensure full remediation**.

Vercel has deployed WAF mitigations globally to help protect your
application, but upgrading remains required for complete protection.

This automated pull request updates your React, Next.js, and related
Server Components packages to versions that fix **all currently known
React Server Components vulnerabilities**, including the two newly
discovered issues.

See our [Security Bulletins](https://vercel.com/kb/bulletin/) for more
information and reach out to [email protected] with any questions.

Fixes VULN-3312

---------

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
Co-authored-by: Anthony Shew <[email protected]>

Author: vercel[bot]

docs/site/package.json

@@ -47,7 +47,7 @@
     "geist": "1.3.1",
     "linkedom": "0.18.12",
     "lucide-react": "0.479.0",
-    "next": "15.5.7",
+    "next": "15.5.9",
     "next-themes": "0.4.6",
     "react": "19.0.0",
     "react-dom": "19.0.0",

examples/basic/apps/docs/package.json

@@ -12,7 +12,7 @@
   },
   "dependencies": {
     "@repo/ui": "workspace:*",
-    "next": "^16.0.7",
+    "next": "16.0.10",
     "react": "^19.2.0",
     "react-dom": "^19.2.0"
   },

examples/basic/apps/web/package.json

@@ -12,7 +12,7 @@
   },
   "dependencies": {
     "@repo/ui": "workspace:*",
-    "next": "^16.0.7",
+    "next": "16.0.10",
     "react": "^19.2.0",
     "react-dom": "^19.2.0"
   },

examples/basic/pnpm-lock.yaml

@@ -13,7 +13,7 @@
   "dependencies": {
     "@repo/logger": "workspace:*",
     "@repo/ui": "workspace:*",
-    "next": "^16.0.7",
+    "next": "16.0.10",
     "react": "^19.2.0",
     "react-dom": "^19.1.0"
   },

examples/kitchen-sink/apps/storefront/package.json

@@ -10,7 +10,7 @@
     "check-types": "next typegen && tsc --noEmit"
   },
   "dependencies": {
-    "next": "16.0.7",
+    "next": "16.0.10",
     "react": "19.2.0",
     "react-dom": "19.2.0"
   },