chore: update nextjs version for CVE-2025-66478

.github/workflows/build.yml

@@ -45,11 +45,12 @@ jobs:
         run: pnpm --filter @repo/db generate
 
       - name: Build web app
-        run: pnpm --filter web build
+        run: pnpm build
         env:
           # CI-only placeholder values for build testing.
           # These values are only used to satisfy build-time validation in CI and are not used for runtime operations or actual connections.
           # They are not real credentials and are safe for public repositories.
+          TURBO_ENV_MODE: loose
           DATABASE_URL: postgresql://user:password@localhost:5432/test
           REDIS_HOST: localhost
           REDIS_PORT: 6379

apps/docs/package.json

@@ -13,18 +13,18 @@
     "dependencies": {
         "@mdx-js/loader": "^3.1.1",
         "@mdx-js/react": "^3.1.1",
-        "@next/mdx": "^16.0.6",
+        "@next/mdx": "^16.0.7",
         "@tailwindcss/postcss": "^4.1.17",
         "@types/mdx": "^2.0.13",
         "class-variance-authority": "^0.7.1",
         "clsx": "^2.1.1",
         "lucide-react": "^0.548.0",
-        "next": "^16.0.6",
+        "next": "^16.0.7",
         "next-mdx-remote": "^5.0.0",
         "next-themes": "^0.4.6",
         "postcss": "^8.5.6",
-        "react": "^19.2.0",
-        "react-dom": "^19.2.0",
+        "react": "^19.2.1",
+        "react-dom": "^19.2.1",
         "rehype-highlight": "^7.0.2",
         "rehype-slug": "^6.0.0",
         "remark-gfm": "^4.0.1",

apps/web/app/api/trpc/[trpc]/route.ts

@@ -2,6 +2,8 @@ import { appRouter, createContext } from '@repo/api';
 import { fetchRequestHandler } from '@trpc/server/adapters/fetch';
 import { headers } from 'next/headers';
 
+export const dynamic = 'force-dynamic';
+export const revalidate = 0;
 export const runtime = 'nodejs';
 
 const handler = (req: Request) =>

apps/web/package.json

@@ -1,6 +1,6 @@
 {
     "name": "web",
-    "version": "0.11.2",
+    "version": "0.11.3",
     "type": "module",
     "private": true,
     "scripts": {
@@ -35,7 +35,7 @@
         "@repo/utils": "workspace:*",
         "@simplewebauthn/server": "^13.2.2",
         "@tailwindcss/postcss": "^4.1.17",
-        "@tanstack/react-query": "^5.90.11",
+        "@tanstack/react-query": "^5.90.12",
         "@trpc/client": "^11.7.2",
         "@trpc/server": "^11.7.2",
         "@trpc/tanstack-react-query": "^11.7.2",
@@ -49,15 +49,15 @@
         "dagre": "^0.8.5",
         "ioredis": "^5.8.2",
         "lucide-react": "^0.548.0",
-        "next": "^16.0.6",
+        "next": "^16.0.7",
         "next-themes": "^0.4.6",
         "pg": "^8.16.3",
         "pino": "^10.1.0",
         "pino-pretty": "^13.1.3",
         "postcss": "^8.5.6",
-        "react": "^19.2.0",
-        "react-dom": "^19.2.0",
-        "react-hook-form": "^7.67.0",
+        "react": "^19.2.1",
+        "react-dom": "^19.2.1",
+        "react-hook-form": "^7.68.0",
         "sonner": "^2.0.7",
         "ssh2": "^1.17.0",
         "superjson": "^2.2.6",

apps/workers/package.json

@@ -13,12 +13,14 @@
     },
     "dependencies": {
         "@dotenvx/dotenvx": "^1.51.1",
+        "@prisma/adapter-pg": "^7.1.0",
         "@repo/db": "workspace:*",
         "@repo/queues": "workspace:*",
         "@repo/utils": "workspace:*",
         "@types/ssh2": "^1.15.5",
         "bullmq": "^5.65.1",
         "ioredis": "^5.8.2",
+        "prisma": "^7.1.0",
         "ssh2": "^1.17.0"
     },
     "devDependencies": {

package.json

@@ -12,8 +12,8 @@
         "push-image": "export SEA_STACK_VERSION=$(jq -r .version apps/web/package.json) && docker push ghcr.io/seastackapp/seastack:latest && docker push ghcr.io/seastackapp/seastack:$SEA_STACK_VERSION"
     },
     "devDependencies": {
-        "prettier": "^3.7.3",
-        "turbo": "^2.6.1",
+        "prettier": "^3.7.4",
+        "turbo": "^2.6.3",
         "typescript": "5.9.3"
     },
     "packageManager": "pnpm@9.0.0",

packages/api/package.json

@@ -9,7 +9,6 @@
         "dist"
     ],
     "scripts": {
-        "build": "tsc -p tsconfig.json",
         "check-types": "tsc -p tsconfig.json --noEmit",
         "test": "ENCRYPTION_SECRET=abc jest",
         "test:watch": "ENCRYPTION_SECRET=abc jest --watch",

packages/auth/package.json

@@ -9,7 +9,6 @@
         "dist"
     ],
     "scripts": {
-        "build": "tsc -p tsconfig.json",
         "check-types": "tsc -p tsconfig.json --noEmit"
     },
     "devDependencies": {

packages/db/package.json

@@ -14,7 +14,6 @@
         "db:push": "prisma db push",
         "migrate:dev": "prisma migrate dev",
         "migrate:deploy": "prisma migrate deploy",
-        "build": "tsc -p tsconfig.json",
         "check-types": "tsc -p tsconfig.json --noEmit",
         "studio": "prisma studio"
     },
@@ -24,8 +23,8 @@
         "pg": "^8.16.3"
     },
     "devDependencies": {
-        "@prisma/language-server": "^7.1.0",
         "@dotenvx/dotenvx": "^1.51.1",
+        "@prisma/language-server": "^7.1.3",
         "@repo/typescript-config": "workspace:*",
         "@types/node": "^22.19.1",
         "@types/pg": "^8.15.6",

packages/eslint-config/package.json

@@ -10,14 +10,14 @@
     },
     "devDependencies": {
         "@eslint/js": "^9.39.1",
-        "@next/eslint-plugin-next": "^16.0.6",
+        "@next/eslint-plugin-next": "^16.0.7",
         "eslint": "^9.39.1",
         "eslint-config-prettier": "^10.1.8",
         "eslint-plugin-only-warn": "^1.1.0",
         "eslint-plugin-react": "^7.37.5",
         "eslint-plugin-react-hooks": "^7.0.1",
         "eslint-plugin-sonarjs": "^1.0.4",
-        "eslint-plugin-turbo": "^2.6.1",
+        "eslint-plugin-turbo": "^2.6.3",
         "globals": "^16.5.0",
         "typescript": "^5.9.3",
         "typescript-eslint": "^8.48.1"

packages/queues/package.json

@@ -6,7 +6,6 @@
     "main": "src/index.ts",
     "types": "src/index.ts",
     "scripts": {
-        "build": "tsc -p tsconfig.json",
         "check-types": "tsc -p tsconfig.json --noEmit"
     },
     "dependencies": {

packages/schemas/package.json

@@ -9,7 +9,6 @@
         "dist"
     ],
     "scripts": {
-        "build": "tsc -p tsconfig.json",
         "check-types": "tsc -p tsconfig.json --noEmit"
     },
     "dependencies": {

packages/utils/package.json

@@ -6,7 +6,6 @@
     "main": "src/index.ts",
     "types": "src/index.ts",
     "scripts": {
-        "build": "tsc -p tsconfig.json",
         "check-types": "tsc -p tsconfig.json --noEmit",
         "test": "ENCRYPTION_SECRET=abc jest",
         "test:watch": "ENCRYPTION_SECRET=abc jest --watch",