chore(deps): bump next to 16.2.5 for CVE-2026-44578 SSRF fix

Author: waleedlatif1

apps/docs/package.json

@@ -26,7 +26,7 @@
     "fumadocs-openapi": "10.8.1",
     "fumadocs-ui": "16.8.5",
     "lucide-react": "^0.511.0",
-    "next": "16.2.4",
+    "next": "16.2.5",
     "next-themes": "^0.4.6",
     "postgres": "^3.4.5",
     "react": "19.2.4",

apps/sim/package.json

@@ -155,7 +155,7 @@
     "mongodb": "6.19.0",
     "mysql2": "3.14.3",
     "neo4j-driver": "6.0.1",
-    "next": "16.2.4",
+    "next": "16.2.5",
     "next-mdx-remote": "^6.0.0",
     "next-runtime-env": "3.3.0",
     "next-themes": "^0.4.6",
@@ -241,8 +241,8 @@
     "sharp"
   ],
   "overrides": {
-    "next": "16.2.4",
-    "@next/env": "16.2.4",
+    "next": "16.2.5",
+    "@next/env": "16.2.5",
     "react-floater": {
       "react": "$react",
       "react-dom": "$react-dom"

bun.lock

@@ -49,8 +49,8 @@
   "overrides": {
     "react": "19.2.4",
     "react-dom": "19.2.4",
-    "next": "16.2.4",
-    "@next/env": "16.2.4",
+    "next": "16.2.5",
+    "@next/env": "16.2.5",
     "drizzle-orm": "^0.45.2",
     "postgres": "^3.4.5",
     "minimatch": "^10.2.5"