deps: periodic dependency update

[qw-in]

Periodic npm dependency and security update

[arcjet-review]

Arcjet Review — 🟢 Low Risk

Decision: Approved

Rationale: This PR only updates dependency versions in example project package.json files and refreshes auto-generated Next.js type reference files (next-env.d.ts). No source code, no library/production code, no CI/infrastructure/auth/migration changes. The dependency-changes trigger fires but all edits are scoped to the examples/* tree, which is not shipped to consumers. Several bumps are major versions (astro 6→7, @astrojs/node 10→11, others are patch/minor), but the risk is contained to example apps. Approving as Low risk with an inline note about the major bumps so the author can confirm the examples still build/run.

Summary of Changes

Periodic dependency refresh across the examples/* directory: npm package version bumps (many patch/minor, plus a few majors like astro 6→7 and @astrojs/node 10→11) and regenerated Next.js next-env.d.ts files adding the new ./.next/types/root-params.d.ts triple-slash import. No library or production code changes.

Escalation Triggers

• Dependency Changes: Multiple package.json files updated across examples/*

Notes

next-env.d.ts changes are auto-generated by Next.js (the file itself warns not to edit it); the added root-params.d.ts reference matches the next 16.2.6 → 16.3.0 bump.

Path filtering: 14 files excluded by ignore paths. 19 of 33 files included in review.

_{Review: afae6b83 | Model: anthropic/claude-opus-4-7 | Powered by Arcjet Review}

[arcjet-review]

Arcjet Review — 🟢 Low Risk

Decision: Approved

Rationale: Re-review of a periodic dependency update PR. All changes remain scoped to examples/* — package.json version bumps across example apps plus auto-generated Next.js type reference files (next-env.d.ts). No source/library code, CI, infrastructure, auth, or migration changes. The dependency-changes trigger fires but the impact is limited to example projects that are not shipped to consumers. The astro major bump previously flagged is still present; the author has not responded, but per re-review rules I will not re-raise the same concern.

Summary of Changes

Bumps npm dependency versions across examples/* (astro, fastify, nestjs, next, react, react-router, nuxt, sveltekit, tanstack-start, firebase-tools, etc.) and refreshes auto-generated next-env.d.ts files to include the new root-params.d.ts reference introduced by Next.js 16.3.

Escalation Triggers

• Dependency Changes: Many examples/*/package.json files updated with version bumps.

Notes

Astro 6→7 and @astrojs/node 10→11 major bumps in examples/astro/package.json were previously flagged and left unresolved; not re-raising per re-review policy. next-env.d.ts additions of root-params.d.ts reference align with the Next.js 16.2.6 → 16.3.0 bump.

Path filtering: 14 files excluded by ignore paths. 19 of 33 files included in review.

_{Review: c5395db6 | Model: anthropic/claude-opus-4-7 | Powered by Arcjet Review}