chore(deps): apply compatible runtime security updates

Author: Bill Leoutsakos

apps/docs/package.json

@@ -28,7 +28,7 @@
     "fumadocs-mdx": "14.3.2",
     "fumadocs-openapi": "10.8.1",
     "fumadocs-ui": "16.8.5",
-    "next": "16.3.1",
+    "next": "16.3.3",
     "next-themes": "^0.4.6",
     "react": "19.2.4",
     "react-dom": "19.2.4",

apps/sim/package.json

@@ -196,7 +196,7 @@
     "isolated-vm": "6.2.0",
     "jose": "6.0.11",
     "js-tiktoken": "1.0.21",
-    "js-yaml": "4.3.1",
+    "js-yaml": "4.3.2",
     "jsdom": "^26.0.0",
     "jszip": "3.10.1",
     "lib0": "0.2.117",
@@ -210,10 +210,10 @@
     "mssql": "12.7.0",
     "mysql2": "3.24.2",
     "neo4j-driver": "6.0.1",
-    "next": "16.3.1",
+    "next": "16.3.3",
     "next-mdx-remote": "^6.0.0",
     "next-themes": "^0.4.6",
-    "nodemailer": "9.0.1",
+    "nodemailer": "9.1.1",
     "nuqs": "2.8.9",
     "officeparser": "5.2.2",
     "openai": "7.0.0",
@@ -239,7 +239,7 @@
     "remark-stringify": "11.0.0",
     "resend": "^4.1.2",
     "rss-parser": "3.13.0",
-    "sharp": "0.35.3",
+    "sharp": "0.35.4",
     "socket.io-client": "4.8.1",
     "ssh2": "^1.17.0",
     "streamdown": "2.5.0",
@@ -257,7 +257,7 @@
     "zustand": "^5.0.13"
   },
   "devDependencies": {
-    "@next/env": "16.3.1",
+    "@next/env": "16.3.3",
     "@sim/testing": "workspace:*",
     "@sim/tsconfig": "workspace:*",
     "@tailwindcss/postcss": "^4.3.3",

bun.lock

@@ -118,8 +118,9 @@
   "overrides": {
     "react": "19.2.4",
     "react-dom": "19.2.4",
-    "next": "16.3.1",
-    "@next/env": "16.3.1",
+    "next": "16.3.3",
+    "@next/env": "16.3.3",
+    "@xmldom/xmldom": "0.8.15",
     "drizzle-orm": "^0.45.2",
     "postgres": "^3.4.5",
     "minimatch": "^10.2.5",
@@ -132,8 +133,8 @@
     "deepmerge-ts": "8.0.0",
     "dompurify": "3.4.13",
     "engine.io": "6.6.8",
-    "fast-uri": "3.1.5",
-    "hono": "4.12.34",
+    "fast-uri": "3.1.6",
+    "hono": "4.13.5",
     "ip-address": "10.5.0",
     "postcss": "8.5.26",
     "protobufjs": "7.6.5",
@@ -142,10 +143,10 @@
     "ws": "8.21.3"
   },
   "optionalDependencies": {
-    "@next/swc-darwin-arm64": "16.3.1",
-    "@next/swc-darwin-x64": "16.3.1",
-    "@next/swc-linux-arm64-gnu": "16.3.1",
-    "@next/swc-linux-x64-gnu": "16.3.1"
+    "@next/swc-darwin-arm64": "16.3.3",
+    "@next/swc-darwin-x64": "16.3.3",
+    "@next/swc-linux-arm64-gnu": "16.3.3",
+    "@next/swc-linux-x64-gnu": "16.3.3"
   },
   "devDependencies": {
     "@babel/parser": "7.29.2",
@@ -169,7 +170,7 @@
     "react": "19.2.4",
     "remark-gfm": "4.0.1",
     "remark-parse": "11.0.0",
-    "sharp": "0.35.3",
+    "sharp": "0.35.4",
     "turbo": "2.9.14",
     "unified": "11.0.5",
     "unist-util-visit": "5.1.0",

package.json

@@ -84,7 +84,7 @@
     "class-variance-authority": "^0.7.1",
     "framer-motion": "^12.5.0",
     "input-otp": "^1.4.2",
-    "next": "16.3.1",
+    "next": "16.3.3",
     "prismjs": "^1.30.0",
     "react": "19.2.4",
     "react-dom": "19.2.4",

packages/emcn/package.json

@@ -49,7 +49,7 @@
   "dependencies": {
     "chalk": "5.6.2",
     "commander": "^11.1.0",
-    "js-yaml": "4.3.1",
+    "js-yaml": "4.3.2",
     "proper-lockfile": "4.1.2"
   },
   "devDependencies": {

packages/sim-cli/package.json

@@ -49,7 +49,7 @@
   },
   "devDependencies": {
     "@clack/prompts": "1.7.0",
-    "@next/env": "16.3.1",
+    "@next/env": "16.3.3",
     "@sim/deployment-config": "workspace:*",
     "@sim/security": "workspace:*",
     "@sim/tsconfig": "workspace:*",

packages/sim-setup/package.json

@@ -69,7 +69,7 @@
   },
   "devDependencies": {
     "@sim/tsconfig": "workspace:*",
-    "next": "16.3.1",
+    "next": "16.3.3",
     "stripe": "18.5.0",
     "typescript": "^7.0.2",
     "vitest": "^4.1.0"